This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer File: hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer (raw, json) Hash identifier: 2xC41I0DFrk1uhBD20faAJnhwFGUo1MlaZT+kFGsCtw= Subject key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E41 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:36:32 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328422 IP: 2c0f:5180::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15937 (0x3e41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:36:32 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:03:b5:c4:a4:15:e3:f1:87:6b:31:19:b3: 38:2f:be:2d:7c:56:87:4e:ad:47:f4:ea:cc:67:a4: 64:16:60:a4:a9:26:40:59:d8:86:74:10:ce:ed:31: b4:6b:ae:10:c1:86:e9:a7:fb:d0:75:c3:d7:f8:bd: 78:9c:05:4e:bd:77:9c:00:33:a1:93:36:0e:02:84: a3:a5:a8:7a:0c:2d:b7:b0:8c:20:36:0c:f2:81:c8: 3b:42:29:7b:90:b3:2c:65:bf:4c:85:57:c8:c1:81: 68:63:ae:c9:16:cf:69:c9:d9:3d:9c:db:02:69:10: c2:82:c7:8e:0c:b2:ed:fd:be:ef:f8:6f:f7:e3:0c: 12:5d:cd:f2:f9:5b:89:0d:1c:51:35:3e:f5:2b:de: b1:4c:04:ca:97:75:0f:cc:aa:11:79:f5:36:3c:58: c2:b6:9c:0f:e4:1d:76:80:ea:73:40:2c:74:c0:b8: bc:c3:e9:79:bf:01:1e:b7:f3:a7:dc:a5:db:fe:d6: 17:a5:a1:0b:13:17:93:10:29:b1:03:e8:b8:3f:82: af:01:21:8c:e1:54:88:66:37:9b:be:b7:d6:c3:e2: a8:a9:3a:8d:f0:74:d4:28:9e:84:61:29:a2:ea:dc: 22:6f:38:a0:ca:e3:37:3f:0f:11:66:ba:39:fa:00: f1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328422 sbgp-ipAddrBlock: critical IPv6: 2c0f:5180::/32 Signature Algorithm: sha256WithRSAEncryption 82:2d:a3:6c:1d:cc:40:36:74:e8:8f:62:4f:af:7b:f2:69:b5: ee:99:9a:43:b8:9c:e6:95:e3:e6:f4:db:98:92:f7:83:87:ca: bb:20:f2:91:22:17:07:91:99:e3:2d:e0:f0:77:aa:b1:02:ad: ab:41:5c:f5:2c:7e:fc:00:93:ca:33:50:a8:47:fb:20:95:c5: 5e:74:8d:e2:55:b9:0a:58:6d:71:1b:fb:ee:01:b3:c9:0e:5d: 63:cb:8b:65:26:f1:a9:1f:97:b0:6b:26:33:d4:dc:35:81:f3: 1f:2f:95:3f:eb:a1:ca:c6:db:ca:20:e4:9d:7b:63:e6:28:8e: 7d:9e:4d:7f:ca:7a:65:81:d9:00:34:6f:3a:72:15:4f:4a:3c: b9:1f:ef:3b:cf:54:d0:d7:30:f7:36:4e:02:0b:a8:37:a7:47: cf:cc:61:20:cb:90:3d:2a:e0:72:ba:77:b0:ce:e9:92:3f:30: 35:98:cb:3d:c6:84:93:11:3a:5d:86:ae:63:f7:cd:77:cd:64: 88:d0:3b:0c:bf:07:db:3a:17:4b:86:7f:e3:ab:2b:e6:64:ab: 15:db:14:f2:d8:35:87:0b:42:38:51:d6:3e:b8:4c:f1:39:8f: a9:f5:5a:4b:af:37:48:57:cf:34:41:f2:39:87:a4:c6:c4:48: de:e2:9b:17 -----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgICPkEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDM2MzJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkQ4RDMwQUYxMTAvBgNVBAUTKDg2OTY0NDQ4Nzc1QjJGOEY4NjM1OUQ1 NDE2OEUyMjBDMUU4NzFCRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyQQO1xKQV4/GHazEZszgvvi18VodOrUf06sxnpGQWYKSpJkBZ2IZ0EM7tMbRr rhDBhumn+9B1w9f4vXicBU69d5wAM6GTNg4ChKOlqHoMLbewjCA2DPKByDtCKXuQ syxlv0yFV8jBgWhjrskWz2nJ2T2c2wJpEMKCx44Msu39vu/4b/fjDBJdzfL5W4kN HFE1PvUr3rFMBMqXdQ/MqhF59TY8WMK2nA/kHXaA6nNALHTAuLzD6Xm/AR6386fc pdv+1heloQsTF5MQKbED6Lg/gq8BIYzhVIhmN5u+t9bD4qipOo3wdNQonoRhKaLq 3CJvOKDK4zc/DxFmujn6APE/AgMBAAGjggMMMIIDCDAdBgNVHQ4EFgQUhpZESHdb L4+GNZ1UFo4iDB6HG/UwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZEOEQzMC81Njk3RDQ0Q0E2QjAx MUVEODQ3QjM3OURGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RDhEMzAvNTY5N0Q0NENBNkIwMTFFRDg0N0IzNzlERjEyMjI0NjgvaHBaRVNI ZGJMNC1HTloxVUZvNGlEQjZIR19VLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAuYwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD1GAMA0GCSqGSIb3 DQEBCwUAA4IBAQCCLaNsHcxANnToj2JPr3vyabXumZpDuJzmlePm9NuYkveDh8q7 IPKRIhcHkZnjLeDwd6qxAq2rQVz1LH78AJPKM1CoR/sglcVedI3iVbkKWG1xG/vu AbPJDl1jy4tlJvGpH5ewayYz1Nw1gfMfL5U/66HKxtvKIOSde2PmKI59nk1/ynpl gdkANG86chVPSjy5H+87z1TQ1zD3Nk4CC6g3p0fPzGEgy5A9KuByunewzumSPzA1 mMs9xoSTETpdhq5j9813zWSI0DsMvwfbOhdLhn/jqyvmZKsV2xTy2DWHC0I4UdY+ uEzxOY+p9VpLrzdIV880QfI5h6TGxEje4psX -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:49 2026 by rpki-client