This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer File: h8J36lRFUp3Qay_l7p8zzcfOhOA.cer (raw, json) Hash identifier: 8OXvIWO5PUtFlTKzfcbjSBm2mTIMR1wPUO0sCLwjgEc= Subject key identifier: 87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D6A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:02:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328250 IP: 41.223.108.0/22 IP: 102.206.180.0/22 IP: 102.220.40.0/22 IP: 102.223.188.0/22 IP: 2c0f:f8f8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15722 (0x3d6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:02:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36BCC19AF, serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:a9:99:af:12:eb:e8:5b:9e:5a:58:20:25: 1d:53:c3:52:43:98:e0:6b:47:4a:6f:06:68:4b:d2: 7d:21:df:d8:2f:b9:7a:e0:92:ba:b8:53:4f:32:7f: 24:1b:f0:85:64:06:07:0b:24:1b:d0:3b:75:ee:cc: 9c:ea:0e:89:f3:3f:24:a2:65:99:db:5d:b9:02:cd: ab:5d:09:90:10:57:ae:5f:fe:a1:74:d0:56:50:87: 23:47:a9:08:71:dc:42:b1:12:b7:86:a3:93:93:5b: 7d:71:9f:f0:df:41:05:6e:93:68:62:72:6c:50:e2: 17:33:28:c4:93:2c:e8:61:1c:63:21:ed:3e:94:92: 10:ff:d5:6c:61:f3:15:72:f8:46:35:82:32:d0:13: 54:bc:a0:90:45:70:5c:ba:94:9e:6c:09:53:63:b0: 86:11:d5:22:80:45:6f:1f:f1:47:6e:7a:e0:3e:82: e1:21:e1:1c:dc:cd:30:8a:41:5c:8b:8e:36:b8:77: 16:12:40:af:b0:6f:33:f9:a2:f2:93:57:2c:4a:5c: a3:0a:d8:e0:4f:8f:73:cc:90:f3:c7:47:67:81:9b: 11:72:b8:a4:01:1b:d8:aa:f2:ba:e0:64:e4:1e:c2: 08:15:41:cb:bf:bd:5d:49:8b:76:7a:c5:ba:8d:87: 53:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328250 sbgp-ipAddrBlock: critical IPv4: 41.223.108.0/22 102.206.180.0/22 102.220.40.0/22 102.223.188.0/22 IPv6: 2c0f:f8f8::/32 Signature Algorithm: sha256WithRSAEncryption 20:0b:ab:31:2d:a4:5c:66:95:95:4e:0e:b8:46:f5:4f:63:88: 35:c7:9a:fa:b4:13:fb:18:09:8f:dc:fa:ef:eb:c9:2e:6b:64: 4a:2d:d3:2b:47:db:ea:1a:fe:5b:95:40:2b:ac:f3:19:a2:46: b6:e0:a0:20:ea:0c:43:f8:99:97:35:24:a6:82:0f:46:be:e8: a6:31:b8:57:6a:6c:47:71:92:e2:a0:1c:12:22:e5:65:fe:95: 4d:07:42:16:ca:01:52:ff:61:6e:77:2b:51:33:29:a6:6b:c4: 8c:3d:c9:ab:84:4e:6c:3c:5a:a5:c4:ec:cb:d3:39:65:7e:90: e9:51:f0:a4:b7:4f:c8:90:ea:9d:83:10:d6:09:34:ef:ce:58: e9:5c:5b:3b:d4:c9:3b:15:7e:74:20:48:8a:6c:b2:8a:b3:fc: a8:c1:20:91:a2:55:e8:e7:3e:03:23:ed:2e:74:7b:24:ba:3f: f7:ad:a5:e7:29:e0:34:fc:5c:50:24:53:c8:fb:12:77:9b:3e: 9a:6b:77:e7:3f:0e:b3:6f:0d:41:37:20:e8:de:71:41:41:72: f3:88:f3:3e:a5:f6:8a:d2:c2:10:22:c3:77:16:91:44:78:98: c8:f2:a3:a2:fe:e3:0e:a7:af:46:0c:86:5b:68:4e:20:10:71: 2e:b2:17:d3 -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICPWowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDAyNDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkJDQzE5QUYxMTAvBgNVBAUTKDg3QzI3N0VBNTQ0NTUyOUREMDZCMkZF NUVFOUYzM0NEQzdDRTg0RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAW6mZrxLr6FueWlggJR1Tw1JDmOBrR0pvBmhL0n0h39gvuXrgkrq4U08yfyQb 8IVkBgcLJBvQO3XuzJzqDonzPySiZZnbXbkCzatdCZAQV65f/qF00FZQhyNHqQhx 3EKxEreGo5OTW31xn/DfQQVuk2hicmxQ4hczKMSTLOhhHGMh7T6UkhD/1Wxh8xVy +EY1gjLQE1S8oJBFcFy6lJ5sCVNjsIYR1SKARW8f8UdueuA+guEh4RzczTCKQVyL jja4dxYSQK+wbzP5ovKTVyxKXKMK2OBPj3PMkPPHR2eBmxFyuKQBG9iq8rrgZOQe wggVQcu/vV1Ji3Z6xbqNh1PTAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUh8J36lRF Up3Qay/l7p8zzcfOhOAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCQ0MxOS9GNjMzNjQzMjU1MDEx MUVDQjY1QjQ5N0FEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QkNDMTkvRjYzMzY0MzI1NTAxMTFFQ0I2NUI0OTdBRDhBMDE0Q0UvaDhKMzZs UkZVcDNRYXlfbDdwOHp6Y2ZPaE9BLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAjowQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAIp32wDBAJmzrQDBAJm 3CgDBAJm37wwDQQCAAIwBwMFACwP+PgwDQYJKoZIhvcNAQELBQADggEBACALqzEt pFxmlZVODrhG9U9jiDXHmvq0E/sYCY/c+u/ryS5rZEot0ytH2+oa/luVQCus8xmi RrbgoCDqDEP4mZc1JKaCD0a+6KYxuFdqbEdxkuKgHBIi5WX+lU0HQhbKAVL/YW53 K1EzKaZrxIw9yauETmw8WqXE7MvTOWV+kOlR8KS3T8iQ6p2DENYJNO/OWOlcWzvU yTsVfnQgSIpssoqz/KjBIJGiVejnPgMj7S50eyS6P/etpecp4DT8XFAkU8j7Eneb Ppprd+c/DrNvDUE3IOjecUFBcvOI8z6l9orSwhAiw3cWkUR4mMjyo6L+4w6nr0YM hltoTiAQcS6yF9M= -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:21 2026 by rpki-client