This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/g_IB39JtAymSbgjMDdW77FB5ifQ.cer File: g_IB39JtAymSbgjMDdW77FB5ifQ.cer (raw, json) Hash identifier: bs4A6d0DVFZ/x3NLfVgUhoL6TVTsu8oG6CLQUyBse6o= Subject key identifier: 83:F2:01:DF:D2:6D:03:29:92:6E:08:CC:0D:D5:BB:EC:50:79:89:F4 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BF9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/g_IB39JtAymSbgjMDdW77FB5ifQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:06:44 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328312 AS: 328968 IP: 102.164.240.0/22 IP: 102.213.236.0/22 IP: 2001:43fe:a000::/40 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15353 (0x3bf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:06:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3693767AF, serialNumber=83F201DFD26D0329926E08CC0DD5BBEC507989F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:ee:8e:0d:01:5e:2a:37:9f:a6:e5:97:5a: af:ce:10:27:71:a9:b9:4a:c8:c2:a9:b9:d5:93:ad: 25:9c:61:62:7b:cd:d6:f7:3a:c0:a9:4f:3c:45:6a: 7d:ee:b1:80:2f:b7:bf:9c:69:b2:14:ed:fe:bf:86: 88:25:f8:e2:d5:10:20:95:6a:76:f4:20:6d:0a:c7: d2:5c:3d:b6:20:e0:c9:00:f9:20:46:b0:a0:01:75: 3d:b7:00:d5:38:71:10:e3:aa:1c:9f:19:6b:7b:b1: 21:8a:ea:e3:89:4b:92:42:a3:94:a6:2c:ca:88:83: 52:19:5b:ee:15:d9:6d:ae:30:93:44:3e:01:a2:63: b3:ba:70:25:b4:ef:03:b7:44:b9:b5:bf:d0:73:77: ea:fa:e2:aa:7e:b9:ba:51:be:c1:e7:0b:5e:64:b3: 6a:8e:60:77:38:ce:00:4b:a1:0f:43:de:7a:be:f3: d7:c4:be:1f:df:4c:16:cd:13:dc:6a:84:14:3b:fc: a9:27:82:a6:30:ab:8f:5d:3a:9c:aa:9a:b7:e2:f9: 24:bf:c0:cc:7b:4a:30:17:0d:76:c3:53:e1:ac:8d: 74:7a:47:5c:6e:e1:92:f7:b9:93:98:3e:9f:ed:d2: a4:94:df:e5:01:90:d9:ea:5b:c6:2e:47:26:d2:9c: db:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F2:01:DF:D2:6D:03:29:92:6E:08:CC:0D:D5:BB:EC:50:79:89:F4 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/g_IB39JtAymSbgjMDdW77FB5ifQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328312 328968 sbgp-ipAddrBlock: critical IPv4: 102.164.240.0/22 102.213.236.0/22 IPv6: 2001:43fe:a000::/40 Signature Algorithm: sha256WithRSAEncryption 57:0e:ff:6b:0c:48:6b:78:9d:b6:f5:c8:9c:c9:04:1b:8a:09: 72:9a:9c:f5:50:72:0e:f9:04:5b:36:1d:46:92:41:74:a7:33: 5d:d8:1c:08:d0:98:a5:92:6d:19:25:1b:8c:42:c5:33:d5:9e: d3:84:50:94:47:32:c3:7c:09:3a:11:9a:cd:b8:cf:b7:04:65: d8:2d:f1:e5:85:51:52:2e:f0:6f:35:5d:fe:12:e4:a9:05:24: 93:cf:47:0e:82:48:9a:5e:37:e2:77:ba:ad:e3:64:9c:46:1f: 7f:7c:ae:b4:af:c8:e6:cf:0a:cd:30:ae:ba:1f:25:85:07:43: ee:ca:59:17:81:7a:67:a9:e5:80:86:ff:6f:05:d3:6d:7f:58: 30:5b:2c:d0:92:46:3f:ba:7b:88:49:34:79:9f:20:2b:87:9f: 61:19:3a:35:cc:6d:cb:c1:46:84:e7:7f:67:9f:d8:73:32:90: a8:e4:ce:09:ba:c0:fa:fa:50:34:22:f8:48:35:a3:5c:ae:26: 58:c3:1a:3d:aa:85:68:2d:66:cd:89:e4:43:15:8f:ae:cc:92: 39:38:a1:6f:18:1e:c6:f3:fa:b5:69:24:08:da:bd:1c:80:1a: 4b:b1:87:12:34:cd:03:05:1d:96:97:13:47:98:bd:dd:0f:71: 09:cf:e9:cd -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICO/kwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzA2NDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjkzNzY3QUYxMTAvBgNVBAUTKDgzRjIwMURGRDI2RDAzMjk5MjZFMDhD QzBERDVCQkVDNTA3OTg5RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9l+6ODQFeKjefpuWXWq/OECdxqblKyMKpudWTrSWcYWJ7zdb3OsCpTzxFan3u sYAvt7+cabIU7f6/hogl+OLVECCVanb0IG0Kx9JcPbYg4MkA+SBGsKABdT23ANU4 cRDjqhyfGWt7sSGK6uOJS5JCo5SmLMqIg1IZW+4V2W2uMJNEPgGiY7O6cCW07wO3 RLm1v9Bzd+r64qp+ubpRvsHnC15ks2qOYHc4zgBLoQ9D3nq+89fEvh/fTBbNE9xq hBQ7/KkngqYwq49dOpyqmrfi+SS/wMx7SjAXDXbDU+GsjXR6R1xu4ZL3uZOYPp/t 0qSU3+UBkNnqW8YuRybSnNv5AgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUg/IB39Jt AymSbgjMDdW77FB5ifQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5Mzc2Ny9CMkM2RTIzMjU3RjUx MUYwQjY1NDc5RUNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTM3NjcvQjJDNkUyMzI1N0Y1MTFGMEI2NTQ3OUVDREFFNEVDOUMvZ19JQjM5 SnRBeW1TYmdqTURkVzc3RkI1aWZRLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMFAngCAwUFCDA1BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEwDAMEAmak8AMEAmbV 7DAOBAIAAjAIAwYAIAFD/qAwDQYJKoZIhvcNAQELBQADggEBAFcO/2sMSGt4nbb1 yJzJBBuKCXKanPVQcg75BFs2HUaSQXSnM13YHAjQmKWSbRklG4xCxTPVntOEUJRH MsN8CToRms24z7cEZdgt8eWFUVIu8G81Xf4S5KkFJJPPRw6CSJpeN+J3uq3jZJxG H398rrSvyObPCs0wrrofJYUHQ+7KWReBemep5YCG/28F021/WDBbLNCSRj+6e4hJ NHmfICuHn2EZOjXMbcvBRoTnf2ef2HMykKjkzgm6wPr6UDQi+Eg1o1yuJljDGj2q hWgtZs2J5EMVj67Mkjk4oW8YHsbz+rVpJAjavRyAGkuxhxI0zQMFHZaXE0eYvd0P cQnP6c0= -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:01 2026 by rpki-client