This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer File: g9HRV2Bl4FAfLXR0TVFF001qcqo.cer (raw, json) Hash identifier: UGGRxMf6Xvq9RwmVlqihng6XhNVIDwg22q6WRX8VBGE= Subject key identifier: 83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BE4 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:03:30 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329289 IP: 102.206.236.0/22 IP: 102.211.220.0/22 IP: 2c0f:f40::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15332 (0x3be4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:03:30 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3690D01AF, serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:8d:73:70:16:3c:75:71:54:8e:30:92:25: c9:d3:81:88:b2:bf:ae:14:1e:8b:bb:67:c8:5f:3f: 12:3b:ed:df:0b:de:93:93:35:65:c8:92:4a:6b:8b: f5:a3:13:1b:54:b1:00:1a:2c:65:16:91:42:4e:37: 9c:ef:82:f6:ce:a5:ee:73:2f:ce:d2:3f:79:1a:85: cd:98:05:1b:f4:7b:7c:bc:88:7a:c8:2d:84:50:68: 9a:66:01:54:7d:51:a6:82:0b:7b:a7:43:fc:21:09: c9:ea:9e:df:c9:3c:bc:0a:cd:b9:d7:0e:a4:55:3b: 8d:8b:cb:08:e1:17:70:2f:8f:af:16:fa:e4:e5:ee: 4a:72:e3:12:71:84:00:9c:27:39:a6:4f:78:e1:0a: 3b:24:21:0f:05:0a:15:3d:32:fb:10:a8:5a:45:e6: 37:b7:56:d1:72:9c:41:a1:ec:82:ab:c8:b8:44:29: 77:9a:84:a7:a4:5b:76:3b:8a:f3:ab:bc:be:e0:69: 48:3f:09:ab:bd:1e:66:c0:01:cc:72:b1:44:e4:c6: 54:a8:da:b3:94:eb:6c:4e:37:a1:fc:54:b9:74:c7: e1:5e:f8:d7:ad:2c:0f:b4:f0:3d:9a:d2:6a:cd:b0: 86:10:53:2c:98:31:db:03:9d:e9:05:a9:34:e3:6e: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329289 sbgp-ipAddrBlock: critical IPv4: 102.206.236.0/22 102.211.220.0/22 IPv6: 2c0f:f40::/32 Signature Algorithm: sha256WithRSAEncryption b6:97:07:f9:a8:6a:e3:c4:6a:17:13:67:79:d4:a9:09:74:b4: 19:63:d0:70:05:3f:34:e6:d7:f9:f2:5b:4d:93:61:a9:ab:93: f6:81:c1:5f:52:07:8d:0d:4b:df:f2:e5:99:53:6e:16:6c:79: 24:c1:d2:01:0c:64:9d:8e:ec:40:fe:ac:86:4a:c4:ca:73:06: f6:82:d7:14:ed:20:25:45:49:9d:29:6b:9e:85:b4:d7:f1:d6: 73:a3:cf:46:c7:4b:f2:4c:7d:8e:20:44:08:09:79:ea:1a:ed: f4:aa:38:2d:5e:a7:11:79:ea:58:cc:cd:99:48:10:a0:c5:28: 97:43:42:db:98:60:9c:f0:72:aa:5c:d7:b9:12:0a:40:47:be: 7a:78:2e:aa:f1:93:ed:ae:c5:f2:12:cb:8c:de:48:a2:07:8b: e2:35:11:05:ee:b3:20:18:6a:88:a9:1c:ac:f3:cf:8a:9f:59: 42:7d:c7:94:95:ea:dd:38:6c:fe:7c:a8:8b:2a:1e:d8:8c:2d: df:de:32:55:c9:58:84:8e:be:63:3a:d6:24:68:58:00:86:04: fe:e6:4d:4e:77:f2:a4:16:e1:95:da:b9:9d:d5:00:9a:87:a3: 72:a1:2a:3a:e5:8a:4f:d1:ab:54:6f:84:35:70:4a:c0:84:2d: ec:96:19:d0 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICO+QwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzAzMzBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjkwRDAxQUYxMTAvBgNVBAUTKDgzRDFEMTU3NjA2NUUwNTAxRjJENzQ3 NDRENTE0NUQzNEQ2QTcyQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSEI1zcBY8dXFUjjCSJcnTgYiyv64UHou7Z8hfPxI77d8L3pOTNWXIkkpri/Wj ExtUsQAaLGUWkUJON5zvgvbOpe5zL87SP3kahc2YBRv0e3y8iHrILYRQaJpmAVR9 UaaCC3unQ/whCcnqnt/JPLwKzbnXDqRVO42LywjhF3Avj68W+uTl7kpy4xJxhACc JzmmT3jhCjskIQ8FChU9MvsQqFpF5je3VtFynEGh7IKryLhEKXeahKekW3Y7ivOr vL7gaUg/Cau9HmbAAcxysUTkxlSo2rOU62xON6H8VLl0x+Fe+NetLA+08D2a0mrN sIYQUyyYMdsDnekFqTTjbnZTAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUg9HRV2Bl 4FAfLXR0TVFF001qcqowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5MEQwMS8xQzI4N0I4QzYzN0Ux MUVFQjdCMDgxN0M0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTBEMDEvMUMyODdCOEM2MzdFMTFFRUI3QjA4MTdDNEFEOUU2RkMvZzlIUlYy Qmw0RkFmTFhSMFRWRkYwMDFxY3FvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBkkwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJmzuwDBAJm09wwDQQC AAIwBwMFACwPD0AwDQYJKoZIhvcNAQELBQADggEBALaXB/moauPEahcTZ3nUqQl0 tBlj0HAFPzTm1/nyW02TYamrk/aBwV9SB40NS9/y5ZlTbhZseSTB0gEMZJ2O7ED+ rIZKxMpzBvaC1xTtICVFSZ0pa56FtNfx1nOjz0bHS/JMfY4gRAgJeeoa7fSqOC1e pxF56ljMzZlIEKDFKJdDQtuYYJzwcqpc17kSCkBHvnp4Lqrxk+2uxfISy4zeSKIH i+I1EQXusyAYaoipHKzzz4qfWUJ9x5SV6t04bP58qIsqHtiMLd/eMlXJWISOvmM6 1iRoWACGBP7mTU538qQW4ZXauZ3VAJqHo3KhKjrlik/Rq1RvhDVwSsCELeyWGdA= -----END CERTIFICATE-----Generated at Sun Jan 25 05:59:47 2026 by rpki-client