This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer File: h2h0NgiWQiWeHHlERxdaLHZY6qw.cer (raw, json) Hash identifier: zNKZgD57qnK+j2/QznOFVg7abETQ0KSwPWHfE6hKGDg= Subject key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3796 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:11:37 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329429 IP: 102.206.124.0/22 IP: 2c0f:3540::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14230 (0x3796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:11:37 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:54:25:2d:3c:19:50:00:ad:cc:69:41:c9: 65:bf:36:24:f9:be:d2:94:10:90:5b:4e:b1:60:9c: 01:05:85:c8:c9:c5:fa:17:1e:de:da:be:49:8d:0a: ba:ee:14:d8:c6:9b:b3:6d:3b:98:e1:f4:08:9d:0a: 5f:53:28:f4:8f:7b:d4:a1:00:8c:e9:e3:a5:9e:e8: 13:55:14:c3:3e:f4:ee:81:1e:98:f9:48:d9:8e:9d: 57:cc:eb:8b:3c:51:92:04:2d:45:18:d2:79:fc:e3: 96:9b:02:aa:28:aa:14:ed:e6:20:13:22:bf:c2:aa: 87:40:2d:6e:04:5a:aa:40:3f:38:1b:04:1f:75:e5: 8d:f6:b3:02:9f:c7:d8:c9:dd:3d:ae:30:0b:11:ce: e8:70:49:66:f5:31:00:7f:a8:19:ed:8c:b6:64:2b: 06:56:35:a6:ea:42:ba:99:60:dd:e3:f0:5c:84:64: 5c:c5:5b:d1:fd:e4:13:99:28:62:c5:0f:ee:a5:21: 79:e3:71:ad:fa:44:21:09:d8:f0:9c:a0:ec:f2:67: 6f:d3:7c:73:45:d7:a5:21:1a:ee:c0:1c:6b:25:4c: d0:d8:84:0c:c3:be:24:93:92:65:50:01:2d:7d:61: 3d:95:b1:88:88:ef:16:cc:b8:22:44:fc:50:7e:56: e3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329429 sbgp-ipAddrBlock: critical IPv4: 102.206.124.0/22 IPv6: 2c0f:3540::/32 Signature Algorithm: sha256WithRSAEncryption 19:09:3c:5f:45:77:db:65:6e:cc:d4:d2:d6:fb:1c:d5:04:f7: 53:fc:e4:7a:9a:ad:ae:5e:57:ed:f8:9b:d0:8a:54:86:0c:74: 3b:0c:e6:48:83:1b:47:67:37:6b:9e:a7:2e:30:8b:6f:ac:3b: 7a:49:df:a8:a4:fc:c3:78:17:90:3e:12:b9:40:d9:39:b2:bb: e7:e0:c4:ad:23:61:51:21:2e:ab:39:b4:8f:d7:a6:6c:4a:6c: e7:fb:c5:64:1b:cb:97:07:19:e7:f5:48:54:d0:d5:36:33:b0: c6:35:1d:f8:70:dd:80:bb:92:8b:e1:7a:5c:ea:47:cf:61:fe: 4b:6b:b0:7d:e8:0d:3b:62:21:ba:d2:f2:cb:bb:3f:00:31:cf: 6a:62:bc:cd:c5:5d:60:6b:34:ef:46:58:7c:02:6e:47:1c:a3: 73:5a:25:03:ff:1d:c8:55:5e:32:39:e2:13:5e:88:9f:29:84: 56:2a:7e:fe:65:ab:79:66:33:a1:d4:94:b6:e0:a7:18:7d:8d: cd:b7:cf:0f:02:40:5e:ad:12:eb:21:b9:76:4d:2d:90:28:9a: df:62:dd:d6:83:3b:32:53:ce:1f:43:0e:c1:82:cb:47:03:7a: 76:d0:65:35:eb:36:7c:8a:7e:fe:f4:2b:44:cb:b9:2e:f4:fb: bb:41:ba:a3 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICN5YwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDExMzdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE2RUE0QUYxMTAvBgNVBAUTKDg3Njg3NDM2MDg5NjQyMjU5RTFDNzk0 NDQ3MTc1QTJDNzY1OEVBQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSTlQlLTwZUACtzGlByWW/NiT5vtKUEJBbTrFgnAEFhcjJxfoXHt7avkmNCrru FNjGm7NtO5jh9AidCl9TKPSPe9ShAIzp46We6BNVFMM+9O6BHpj5SNmOnVfM64s8 UZIELUUY0nn845abAqooqhTt5iATIr/CqodALW4EWqpAPzgbBB915Y32swKfx9jJ 3T2uMAsRzuhwSWb1MQB/qBntjLZkKwZWNabqQrqZYN3j8FyEZFzFW9H95BOZKGLF D+6lIXnjca36RCEJ2PCcoOzyZ2/TfHNF16UhGu7AHGslTNDYhAzDviSTkmVQAS19 YT2VsYiI7xbMuCJE/FB+VuMlAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUh2h0NgiW QiWeHHlERxdaLHZY6qwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNkVBNC9EMDc0NDE3QzM1NEUx MUYwOTc0MzREQTNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTZFQTQvRDA3NDQxN0MzNTRFMTFGMDk3NDM0REEzREFFNEVDOUMvaDJoME5n aVdRaVdlSEhsRVJ4ZGFMSFpZNnF3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBtUwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmznwwDQQCAAIwBwMF ACwPNUAwDQYJKoZIhvcNAQELBQADggEBABkJPF9Fd9tlbszU0tb7HNUE91P85Hqa ra5eV+34m9CKVIYMdDsM5kiDG0dnN2uepy4wi2+sO3pJ36ik/MN4F5A+ErlA2Tmy u+fgxK0jYVEhLqs5tI/XpmxKbOf7xWQby5cHGef1SFTQ1TYzsMY1Hfhw3YC7kovh elzqR89h/ktrsH3oDTtiIbrS8su7PwAxz2pivM3FXWBrNO9GWHwCbkcco3NaJQP/ HchVXjI54hNeiJ8phFYqfv5lq3lmM6HUlLbgpxh9jc23zw8CQF6tEushuXZNLZAo mt9i3daDOzJTzh9DDsGCy0cDenbQZTXrNnyKfv70K0TLuS70+7tBuqM= -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:22 2026 by rpki-client