This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer File: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer (raw, json) Hash identifier: 4jgzmTIqkbrd3LWhcwjI80i0WERmzCBBXnHe8DH29OE= Subject key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3932 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:21:49 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328271 IP: 102.22.208.0/21 IP: 102.176.180.0/22 IP: 102.203.216.0/22 IP: 102.210.56.0/22 IP: 2c0f:ee68::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14642 (0x3932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:21:49 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:a8:ab:09:ad:3c:f4:ff:4d:3d:5c:24:c4: 22:05:fb:33:40:e2:de:be:24:64:d2:10:df:eb:a4: 25:6c:16:f1:ff:f2:d6:93:ad:4b:67:a4:f6:6b:9b: 78:9e:73:ee:0a:e9:f9:8b:51:a5:a4:0e:f6:d5:91: c7:d5:d8:4f:fd:06:0f:a8:41:9c:7b:aa:c5:3d:33: 6f:b6:b5:a9:2b:42:ac:2f:0a:62:b1:fe:ae:4e:85: ef:07:92:fe:ef:83:e2:86:b1:b3:c1:4e:a4:23:14: b9:62:3d:25:a0:3b:ef:9f:65:36:52:e8:8a:2d:6a: cb:e7:dc:b6:7d:bf:d9:d2:2c:9d:c7:7f:b6:f5:6f: 78:c1:ab:6c:dd:b3:b4:8b:b9:6e:56:72:70:cb:ac: 30:96:9a:4e:35:3b:97:af:63:05:7b:03:f5:8e:b4: 8b:04:ce:b6:80:68:93:84:0b:33:c2:de:3a:ba:58: 91:21:4d:b5:cb:20:b8:d7:6c:67:28:ee:dd:87:8e: 2a:9d:1b:8d:b1:83:6e:ae:05:9f:92:4c:5f:e3:e6: 91:61:97:dc:bb:b1:b1:06:8b:49:76:f8:52:bd:6a: 0f:ea:9d:d3:a6:37:fe:5b:10:89:7a:67:4d:86:88: 66:a0:55:a9:76:ed:41:fb:4c:22:8a:89:60:e1:02: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328271 sbgp-ipAddrBlock: critical IPv4: 102.22.208.0/21 102.176.180.0/22 102.203.216.0/22 102.210.56.0/22 IPv6: 2c0f:ee68::/32 Signature Algorithm: sha256WithRSAEncryption 2d:ba:4d:b4:b6:a6:20:4d:9c:c8:74:05:b8:9c:b0:3d:1a:b6: a8:5b:fb:33:45:e2:04:8a:8b:7a:2f:a9:08:a4:8e:ca:26:9f: eb:54:01:43:06:56:66:9e:f9:c1:92:a5:db:56:90:d5:79:b8: ec:4a:a5:f9:ad:56:ae:27:16:45:98:18:d5:fd:62:7c:9b:b4: 17:02:76:3d:ad:6c:16:7c:62:67:a7:38:0e:45:b4:8b:58:b7: 2a:93:59:10:7f:1a:0c:25:0d:26:7c:49:29:78:d3:a3:17:16: de:e3:ad:9a:5f:2c:37:66:5c:a8:52:63:95:af:98:27:b2:0e: da:a2:40:d9:a5:28:57:0c:fa:f8:0f:d5:79:15:88:7b:21:0b: ae:93:12:0b:74:ba:5b:c0:f0:a7:68:56:06:5c:77:1e:47:d8: f1:4e:36:d8:e3:30:4a:d4:ce:cf:b0:d6:9c:94:7f:5a:4a:d7: 38:11:cb:be:f8:8d:83:62:97:70:54:c5:22:96:aa:a0:d2:76: d9:4e:86:b6:40:d5:d6:f9:77:ec:1d:f0:f7:ff:47:66:5a:3b: 3e:07:f5:e9:94:da:b8:e6:a4:ee:99:51:11:3d:75:4e:df:37: aa:46:e2:24:21:4f:7f:93:a4:d3:e7:dc:17:7d:8b:e4:19:d5: 0f:48:54:e8 -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICOTIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTIxNDlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQ1NzIxQUYxMTAvBgNVBAUTKDg3RjNBREMzQTUwQTc3NzYzODM2QUU4 RTM3RjVEOTM4Njk1NzExQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsaqirCa089P9NPVwkxCIF+zNA4t6+JGTSEN/rpCVsFvH/8taTrUtnpPZrm3ie c+4K6fmLUaWkDvbVkcfV2E/9Bg+oQZx7qsU9M2+2takrQqwvCmKx/q5Ohe8Hkv7v g+KGsbPBTqQjFLliPSWgO++fZTZS6Iotasvn3LZ9v9nSLJ3Hf7b1b3jBq2zds7SL uW5WcnDLrDCWmk41O5evYwV7A/WOtIsEzraAaJOECzPC3jq6WJEhTbXLILjXbGco 7t2HjiqdG42xg26uBZ+STF/j5pFhl9y7sbEGi0l2+FK9ag/qndOmN/5bEIl6Z02G iGagVal27UH7TCKKiWDhAn1DAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUh/Otw6UK d3Y4Nq6ON/XZOGlXEcowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0NTcyMS80RDg1NzhFMDM3RkQx MUVEQjhBMkFERjlGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDU3MjEvNEQ4NTc4RTAzN0ZEMTFFREI4QTJBREY5RjEyMjI0NjgvaF9PdHc2 VUtkM1k0TnE2T05fWFpPR2xYRWNvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAk8wQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBANmFtADBAJmsLQDBAJm y9gDBAJm0jgwDQQCAAIwBwMFACwP7mgwDQYJKoZIhvcNAQELBQADggEBAC26TbS2 piBNnMh0BbicsD0atqhb+zNF4gSKi3ovqQikjsomn+tUAUMGVmae+cGSpdtWkNV5 uOxKpfmtVq4nFkWYGNX9YnybtBcCdj2tbBZ8YmenOA5FtItYtyqTWRB/GgwlDSZ8 SSl406MXFt7jrZpfLDdmXKhSY5WvmCeyDtqiQNmlKFcM+vgP1XkViHshC66TEgt0 ulvA8KdoVgZcdx5H2PFONtjjMErUzs+w1pyUf1pK1zgRy774jYNil3BUxSKWqqDS dtlOhrZA1db5d+wd8Pf/R2ZaOz4H9emU2rjmpO6ZURE9dU7fN6pG4iQhT3+TpNPn 3Bd9i+QZ1Q9IVOg= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:09 2026 by rpki-client