This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer File: gyq31tewX3AP-RtzAzXuEJ-gLX8.cer (raw, json) Hash identifier: C7OY60KtDn7FoRKST0brtTVYfERGl3LnNFA8GXkfSBM= Subject key identifier: 83:2A:B7:D6:D7:B0:5F:70:0F:F9:1B:73:03:35:EE:10:9F:A0:2D:7F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E59 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:40:21 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329656 IP: 102.204.14.0/24 IP: 2c0f:20::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15961 (0x3e59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:40:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36DBD5BAF, serialNumber=832AB7D6D7B05F700FF91B730335EE109FA02D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:ea:c6:14:8d:d0:2e:7a:10:93:b3:b9:2d: d7:80:28:ed:26:d0:56:27:60:a3:fb:ee:06:39:99: bc:8f:87:96:75:e0:9c:ff:5f:46:08:1b:e1:ee:0f: bb:5b:ea:eb:b8:92:80:58:e9:96:fe:34:e7:96:82: 14:83:bb:12:40:fd:c9:be:e3:11:b6:20:d6:50:b4: 39:8e:17:5f:ba:ca:ad:ab:fe:f1:bf:9a:fd:63:80: 79:c1:a0:84:02:9d:99:0c:fe:7f:59:97:b0:5b:71: bb:4d:d9:30:38:a7:1c:8b:86:8a:c0:35:4e:f9:1f: 63:69:ad:d7:fe:74:b3:10:f4:90:d5:73:6e:68:9b: 27:99:d2:29:be:19:aa:e6:44:d1:7d:c3:88:f6:85: 4f:56:db:70:9e:c8:2b:42:c3:25:05:98:1a:ea:1f: 3c:3d:21:7f:b6:38:a9:5c:12:cd:68:be:62:9c:5d: 2a:aa:b2:30:8d:1e:fe:7f:ba:bf:d2:49:23:89:85: de:bf:3e:b2:28:e4:8f:43:1f:7a:9f:f3:2f:0a:ae: 04:19:82:2b:6b:31:b3:e3:51:15:56:29:04:2b:63: 91:ed:8f:fa:b6:f4:16:63:8b:67:38:28:4d:33:31: 11:00:1e:d2:93:05:91:41:94:d0:bc:91:d8:87:ab: b3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2A:B7:D6:D7:B0:5F:70:0F:F9:1B:73:03:35:EE:10:9F:A0:2D:7F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329656 sbgp-ipAddrBlock: critical IPv4: 102.204.14.0/24 IPv6: 2c0f:20::/32 Signature Algorithm: sha256WithRSAEncryption bb:74:91:95:38:70:ce:fa:9e:ee:40:08:00:10:f7:b2:52:28: 06:28:7e:aa:f6:14:41:f4:29:5f:89:30:91:39:38:12:dd:b3: c4:69:91:e2:f4:33:c1:ca:d6:33:fb:14:88:9a:e6:d9:20:75: 91:eb:bc:f9:76:a9:eb:ba:3a:6c:8b:78:a3:82:f0:d0:e8:24: b7:b7:b6:be:a6:b3:1e:0e:95:ea:10:b5:50:69:14:f5:02:b7: 73:42:36:50:4b:00:d8:56:84:cf:b2:74:dc:56:83:9c:41:79: d1:b8:ce:df:2c:dc:07:05:aa:d5:47:09:08:4a:dc:90:f6:77: 79:13:70:74:8c:b5:7b:d5:85:69:f0:51:15:4e:09:cd:3c:ef: 34:04:3a:54:20:4f:3e:60:45:77:f4:47:0a:00:20:30:f2:b3: 6d:16:e4:2c:a0:a2:83:09:95:d9:9f:91:c5:1c:d6:4c:bc:14: d4:b1:d5:45:07:8a:49:f9:c4:76:60:d7:3d:a0:a7:1c:13:63: d6:97:d6:1a:f7:4e:bd:1b:6e:9b:cd:1e:8a:4a:11:b9:a0:65: 4a:ce:b6:cc:71:e2:1e:76:08:cb:00:f1:45:b2:c1:09:6d:d1: 88:33:2c:0f:f8:ad:69:d6:85:96:1c:38:13:3a:d9:2b:7a:ad: 8c:e4:6b:7f -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPlkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDQwMjFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkRCRDVCQUYxMTAvBgNVBAUTKDgzMkFCN0Q2RDdCMDVGNzAwRkY5MUI3 MzAzMzVFRTEwOUZBMDJEN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQj+rGFI3QLnoQk7O5LdeAKO0m0FYnYKP77gY5mbyPh5Z14Jz/X0YIG+HuD7tb 6uu4koBY6Zb+NOeWghSDuxJA/cm+4xG2INZQtDmOF1+6yq2r/vG/mv1jgHnBoIQC nZkM/n9Zl7BbcbtN2TA4pxyLhorANU75H2Nprdf+dLMQ9JDVc25omyeZ0im+Garm RNF9w4j2hU9W23CeyCtCwyUFmBrqHzw9IX+2OKlcEs1ovmKcXSqqsjCNHv5/ur/S SSOJhd6/PrIo5I9DH3qf8y8KrgQZgitrMbPjURVWKQQrY5Htj/q29BZji2c4KE0z MREAHtKTBZFBlNC8kdiHq7MpAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUgyq31tew X3AP+RtzAzXuEJ+gLX8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZEQkQ1Qi8zQzc5NUVBQUJFRDEx MUYwQjBBRDhGRDFEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2REJENUIvM0M3OTVFQUFCRUQxMTFGMEIwQUQ4RkQxREFFNEVDOUMvZ3lxMzF0 ZXdYM0FQLVJ0ekF6WHVFSi1nTFg4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB7gwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABmzA4wDQQCAAIwBwMF ACwPACAwDQYJKoZIhvcNAQELBQADggEBALt0kZU4cM76nu5ACAAQ97JSKAYofqr2 FEH0KV+JMJE5OBLds8RpkeL0M8HK1jP7FIia5tkgdZHrvPl2qeu6OmyLeKOC8NDo JLe3tr6msx4OleoQtVBpFPUCt3NCNlBLANhWhM+ydNxWg5xBedG4zt8s3AcFqtVH CQhK3JD2d3kTcHSMtXvVhWnwURVOCc087zQEOlQgTz5gRXf0RwoAIDDys20W5Cyg ooMJldmfkcUc1ky8FNSx1UUHikn5xHZg1z2gpxwTY9aX1hr3Tr0bbpvNHopKEbmg ZUrOtsxx4h52CMsA8UWywQlt0YgzLA/4rWnWhZYcOBM62St6rYzka38= -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:04 2026 by rpki-client