This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer File: gyq31tewX3AP-RtzAzXuEJ-gLX8.cer (raw, json) Hash identifier: I4nGYgXyTHfvpr9Ntky2tUfvMUTfmwlkLaxYrtEuTMo= Subject key identifier: 83:2A:B7:D6:D7:B0:5F:70:0F:F9:1B:73:03:35:EE:10:9F:A0:2D:7F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36C7 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Tue 11 Nov 2025 07:37:20 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 329656 IP: 102.204.14.0/24 IP: 2c0f:20::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14023 (0x36c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 11 07:37:20 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36DBD5BAF, serialNumber=832AB7D6D7B05F700FF91B730335EE109FA02D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:ea:c6:14:8d:d0:2e:7a:10:93:b3:b9:2d: d7:80:28:ed:26:d0:56:27:60:a3:fb:ee:06:39:99: bc:8f:87:96:75:e0:9c:ff:5f:46:08:1b:e1:ee:0f: bb:5b:ea:eb:b8:92:80:58:e9:96:fe:34:e7:96:82: 14:83:bb:12:40:fd:c9:be:e3:11:b6:20:d6:50:b4: 39:8e:17:5f:ba:ca:ad:ab:fe:f1:bf:9a:fd:63:80: 79:c1:a0:84:02:9d:99:0c:fe:7f:59:97:b0:5b:71: bb:4d:d9:30:38:a7:1c:8b:86:8a:c0:35:4e:f9:1f: 63:69:ad:d7:fe:74:b3:10:f4:90:d5:73:6e:68:9b: 27:99:d2:29:be:19:aa:e6:44:d1:7d:c3:88:f6:85: 4f:56:db:70:9e:c8:2b:42:c3:25:05:98:1a:ea:1f: 3c:3d:21:7f:b6:38:a9:5c:12:cd:68:be:62:9c:5d: 2a:aa:b2:30:8d:1e:fe:7f:ba:bf:d2:49:23:89:85: de:bf:3e:b2:28:e4:8f:43:1f:7a:9f:f3:2f:0a:ae: 04:19:82:2b:6b:31:b3:e3:51:15:56:29:04:2b:63: 91:ed:8f:fa:b6:f4:16:63:8b:67:38:28:4d:33:31: 11:00:1e:d2:93:05:91:41:94:d0:bc:91:d8:87:ab: b3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2A:B7:D6:D7:B0:5F:70:0F:F9:1B:73:03:35:EE:10:9F:A0:2D:7F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329656 sbgp-ipAddrBlock: critical IPv4: 102.204.14.0/24 IPv6: 2c0f:20::/32 Signature Algorithm: sha256WithRSAEncryption ba:b8:42:5f:7a:5f:4f:3a:a1:b2:64:46:d0:1d:81:cd:8b:bd: 1e:b6:4a:da:12:6f:40:28:a8:65:af:d4:8f:96:65:97:16:cb: ae:ca:cf:b7:ee:a4:04:86:38:c1:3d:d7:09:62:77:92:8d:cd: b0:59:de:9c:ab:f5:32:2e:e9:db:f1:8b:b5:c5:b8:97:cd:7d: 29:64:e1:93:7e:bd:fa:e4:0b:2d:00:94:22:d0:a0:bd:4c:70: 24:c6:be:a9:87:f6:21:70:c8:6c:7c:e4:24:30:eb:5e:75:4f: 24:fb:a9:03:83:17:93:57:33:2c:02:9d:ae:09:e0:3b:17:d5: 8a:79:3a:7f:f3:23:ce:7e:ab:e6:7b:e1:c9:a0:fb:38:43:e3: 69:25:2d:5b:af:a8:40:e3:d0:83:a5:d5:38:6f:04:95:39:02: ce:ae:af:be:91:59:8b:65:bf:cf:a0:51:67:cf:39:13:c1:34: 28:30:46:48:d8:d2:47:39:df:67:c5:6e:ff:a1:cb:cc:85:99: c7:47:ad:5a:fb:ac:a1:21:4e:b6:4c:a0:e9:df:89:3e:49:59: 1d:c1:6d:1c:c2:fb:ed:e3:33:04:0e:5c:c7:09:e5:5e:3a:d1: ed:f2:82:8b:b2:6c:a6:5b:4e:12:0c:19:11:79:49:39:ce:d3: 0f:75:11:e7 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICNscwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMTEwNzM3MjBaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkRCRDVCQUYxMTAvBgNVBAUTKDgzMkFCN0Q2RDdCMDVGNzAwRkY5MUI3 MzAzMzVFRTEwOUZBMDJEN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQj+rGFI3QLnoQk7O5LdeAKO0m0FYnYKP77gY5mbyPh5Z14Jz/X0YIG+HuD7tb 6uu4koBY6Zb+NOeWghSDuxJA/cm+4xG2INZQtDmOF1+6yq2r/vG/mv1jgHnBoIQC nZkM/n9Zl7BbcbtN2TA4pxyLhorANU75H2Nprdf+dLMQ9JDVc25omyeZ0im+Garm RNF9w4j2hU9W23CeyCtCwyUFmBrqHzw9IX+2OKlcEs1ovmKcXSqqsjCNHv5/ur/S SSOJhd6/PrIo5I9DH3qf8y8KrgQZgitrMbPjURVWKQQrY5Htj/q29BZji2c4KE0z MREAHtKTBZFBlNC8kdiHq7MpAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUgyq31tew X3AP+RtzAzXuEJ+gLX8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZEQkQ1Qi8zQzc5NUVBQUJFRDEx MUYwQjBBRDhGRDFEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2REJENUIvM0M3OTVFQUFCRUQxMTFGMEIwQUQ4RkQxREFFNEVDOUMvZ3lxMzF0 ZXdYM0FQLVJ0ekF6WHVFSi1nTFg4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB7gwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABmzA4wDQQCAAIwBwMF ACwPACAwDQYJKoZIhvcNAQELBQADggEBALq4Ql96X086obJkRtAdgc2LvR62StoS b0AoqGWv1I+WZZcWy67Kz7fupASGOME91wlid5KNzbBZ3pyr9TIu6dvxi7XFuJfN fSlk4ZN+vfrkCy0AlCLQoL1McCTGvqmH9iFwyGx85CQw6151TyT7qQODF5NXMywC na4J4DsX1Yp5On/zI85+q+Z74cmg+zhD42klLVuvqEDj0IOl1ThvBJU5As6ur76R WYtlv8+gUWfPORPBNCgwRkjY0kc532fFbv+hy8yFmcdHrVr7rKEhTrZMoOnfiT5J WR3BbRzC++3jMwQOXMcJ5V460e3ygouybKZbThIMGRF5STnO0w91Eec= -----END CERTIFICATE-----Generated at Mon Dec 8 16:18:33 2025 by rpki-client