This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer File: gvHGYRo6FGfbPXikpf7VCgilexM.cer (raw, json) Hash identifier: SyvyOS1IZ7aLnm6kg52u7hpb9fzckLPlV4w2SdB74oo= Subject key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36F8 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Tue 25 Nov 2025 00:04:00 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 37645 IP: 102.130.192.0/19 IP: 102.203.240.0/22 IP: 102.206.52.0 -- 102.206.63.255 IP: 102.206.196.0/22 IP: 102.207.192.0/22 IP: 102.208.92.0/22 IP: 102.208.148.0/22 IP: 102.209.4.0/22 IP: 102.210.4.0/22 IP: 102.210.120.0/22 IP: 102.210.176.0/22 IP: 102.210.228.0/22 IP: 102.211.128.0/22 IP: 102.211.200.0/22 IP: 102.213.12.0/22 IP: 102.213.96.0/20 IP: 102.214.0.0/22 IP: 102.215.60.0/22 IP: 102.215.168.0/22 IP: 102.215.180.0/22 IP: 102.216.44.0 -- 102.216.59.255 IP: 102.216.140.0/22 IP: 102.217.192.0/22 IP: 102.218.92.0/22 IP: 102.218.148.0/22 IP: 102.218.180.0/22 IP: 102.219.184.0/22 IP: 102.220.192.0/22 IP: 102.221.108.0/22 IP: 102.221.172.0/22 IP: 154.66.104.0/22 IP: 154.118.192.0/19 IP: 2c0f:f280::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 09 Dec 2025 11:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14072 (0x36f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 25 00:04:00 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:a2:8c:fd:e2:6a:5a:62:6e:7b:a1:9a:d7: 52:8b:8c:32:57:eb:44:43:57:6c:c1:a9:63:e7:2c: 9d:88:83:93:16:44:a4:5b:ab:be:e4:58:8a:98:d5: 8b:3e:37:6c:64:8e:d9:5c:90:36:13:c4:32:03:36: 04:a6:3d:ff:43:b8:7a:98:24:f8:db:eb:8d:5d:fc: e9:6b:8d:d5:e1:f5:9f:e6:0b:7a:5d:9e:29:48:13: 41:5d:d1:d2:60:a0:80:d1:f6:e3:df:5e:8c:2f:ef: 43:57:d9:f7:9f:51:9a:c4:2a:3e:d1:1a:7e:4c:23: 43:42:0f:4f:3c:29:34:5c:ea:e5:95:c2:72:a5:a1: 73:ac:27:17:ba:cb:87:9f:2b:32:6c:b7:f2:09:30: 55:48:67:3a:45:73:14:95:be:d8:4c:9d:66:93:d5: ee:fb:33:dc:1d:e5:72:98:6a:6b:c3:32:f0:0f:26: 2d:b7:d3:f6:e0:5f:44:8a:94:10:76:7f:8d:ed:3d: ff:a3:cc:28:b5:7b:2c:ea:2a:37:8d:2d:b9:20:d3: 87:44:dc:b9:a4:99:f5:35:08:31:32:ce:60:32:c7: 8a:ec:d7:18:79:e1:df:2a:5e:2c:89:8a:f4:47:8a: 69:86:d9:17:18:16:2c:97:d6:f7:df:ba:05:73:58: d1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37645 sbgp-ipAddrBlock: critical IPv4: 102.130.192.0/19 102.203.240.0/22 102.206.52.0-102.206.63.255 102.206.196.0/22 102.207.192.0/22 102.208.92.0/22 102.208.148.0/22 102.209.4.0/22 102.210.4.0/22 102.210.120.0/22 102.210.176.0/22 102.210.228.0/22 102.211.128.0/22 102.211.200.0/22 102.213.12.0/22 102.213.96.0/20 102.214.0.0/22 102.215.60.0/22 102.215.168.0/22 102.215.180.0/22 102.216.44.0-102.216.59.255 102.216.140.0/22 102.217.192.0/22 102.218.92.0/22 102.218.148.0/22 102.218.180.0/22 102.219.184.0/22 102.220.192.0/22 102.221.108.0/22 102.221.172.0/22 154.66.104.0/22 154.118.192.0/19 IPv6: 2c0f:f280::/32 Signature Algorithm: sha256WithRSAEncryption 89:66:cd:86:8e:2f:a7:29:62:a9:24:10:a9:ad:88:23:2e:dc: 23:2f:a9:79:a0:bc:c8:b4:3a:ef:9d:67:12:94:13:03:b5:53: b1:44:6d:9d:ea:e9:25:d8:a5:f0:86:7f:0a:22:af:04:27:5d: 20:7b:91:fb:29:d6:48:27:81:50:64:53:a6:e6:66:ca:90:cf: 7c:52:ff:4d:32:03:da:8a:30:19:9f:79:d3:46:95:bf:bd:6d: b0:ea:86:83:fb:1b:63:b1:68:b6:33:fb:4e:b4:d4:e1:2c:79: 9f:60:c7:6f:54:b8:b0:e1:33:f9:60:65:c6:75:30:4f:a5:40: b0:fa:6b:ed:62:5d:61:8b:fa:37:27:04:9c:4c:80:06:44:0f: 36:dd:5c:94:f7:ee:d7:2d:ae:d9:54:d6:66:85:de:21:59:d1: 73:50:fc:94:67:a5:77:c4:39:c2:ae:af:a3:52:92:88:53:32: 1c:f1:69:7f:a3:dc:2d:74:a3:44:6b:75:fe:bb:57:e1:fd:ac: 5f:88:b7:ad:2c:52:69:2c:5a:c3:e4:25:dc:23:8b:df:8c:1b: 1a:ee:45:ad:78:32:0e:be:07:cf:b5:7e:32:88:4d:e7:7a:36: 81:36:b1:44:f9:45:20:f8:69:4f:71:e2:32:ec:83:b4:e2:71: 28:3e:64:e7 -----BEGIN CERTIFICATE----- MIIG9DCCBdygAwIBAgICNvgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMjUwMDA0MDBaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkExQ0VGQUYxMTAvBgNVBAUTKDgyRjFDNjYxMUEzQTE0NjdEQjNENzhB NEE1RkVENTBBMDhBNTdCMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNu6KM/eJqWmJue6Ga11KLjDJX60RDV2zBqWPnLJ2Ig5MWRKRbq77kWIqY1Ys+ N2xkjtlckDYTxDIDNgSmPf9DuHqYJPjb641d/OlrjdXh9Z/mC3pdnilIE0Fd0dJg oIDR9uPfXowv70NX2fefUZrEKj7RGn5MI0NCD088KTRc6uWVwnKloXOsJxe6y4ef KzJst/IJMFVIZzpFcxSVvthMnWaT1e77M9wd5XKYamvDMvAPJi230/bgX0SKlBB2 f43tPf+jzCi1eyzqKjeNLbkg04dE3LmkmfU1CDEyzmAyx4rs1xh54d8qXiyJivRH immG2RcYFiyX1vffugVzWNEhAgMBAAGjggPpMIID5TAdBgNVHQ4EFgQUgvHGYRo6 FGfbPXikpf7VCgilexMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBMUNFRi83RjM4OERFNEYxMzgx MUVCOTE3RkQ3MTdEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTFDRUYvN0YzODhERTRGMTM4MTFFQjkxN0ZENzE3RDhBMDE0Q0UvZ3ZIR1lS bzZGR2ZiUFhpa3BmN1ZDZ2lsZXhNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkw0wgfwGCCsGAQUFBwEHAQH/BIHsMIHpMIHXBAIAATCB0AMEBWaCwAMEAmbL 8DAMAwQCZs40AwQGZs4AAwQCZs7EAwQCZs/AAwQCZtBcAwQCZtCUAwQCZtEEAwQC ZtIEAwQCZtJ4AwQCZtKwAwQCZtLkAwQCZtOAAwQCZtPIAwQCZtUMAwQEZtVgAwQC ZtYAAwQCZtc8AwQCZteoAwQCZte0MAwDBAJm2CwDBAJm2DgDBAJm2IwDBAJm2cAD BAJm2lwDBAJm2pQDBAJm2rQDBAJm27gDBAJm3MADBAJm3WwDBAJm3awDBAKaQmgD BAWadsAwDQQCAAIwBwMFACwP8oAwDQYJKoZIhvcNAQELBQADggEBAIlmzYaOL6cp YqkkEKmtiCMu3CMvqXmgvMi0Ou+dZxKUEwO1U7FEbZ3q6SXYpfCGfwoirwQnXSB7 kfsp1kgngVBkU6bmZsqQz3xS/00yA9qKMBmfedNGlb+9bbDqhoP7G2OxaLYz+060 1OEseZ9gx29UuLDhM/lgZcZ1ME+lQLD6a+1iXWGL+jcnBJxMgAZEDzbdXJT37tct rtlU1maF3iFZ0XNQ/JRnpXfEOcKur6NSkohTMhzxaX+j3C10o0Rrdf67V+H9rF+I t60sUmksWsPkJdwji9+MGxruRa14Mg6+B8+1fjKITed6NoE2sUT5RSD4aU9x4jLs g7TicSg+ZOc= -----END CERTIFICATE-----Generated at Sun Dec 7 16:27:45 2025 by rpki-client