This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer File: iCYpiV2NtXslQepI-hEmMl4pAgs.cer (raw, json) Hash identifier: 0GEV6Q+jdyTRcsrwVXXWXNOjydrZw+HbskOOyiUg0uQ= Subject key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 37E8 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:26:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327750 AS: 328047 AS: 328101 IP: 102.23.224.0/19 IP: 102.69.248.0/21 IP: 102.164.192.0/19 IP: 154.126.192.0/19 IP: 2c0f:f368::/32 IP: 2c0f:f4e8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14312 (0x37e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:26:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:1f:6a:4b:06:73:30:c4:c5:da:ce:e5:72: 7d:cb:db:bf:a7:41:ea:ea:f9:d2:f0:26:ef:fa:4b: 83:fe:b8:01:3d:94:c5:12:7b:c1:01:79:cd:9c:25: cf:8b:f4:7d:14:83:ae:2f:ab:71:a1:a5:31:73:10: af:40:e4:eb:4e:83:f5:c1:7a:57:c8:24:36:f8:27: 08:94:aa:0f:8a:28:60:ea:64:9d:9c:d9:b4:2e:d9: be:b6:d1:64:91:81:8b:c8:e6:49:9a:e9:af:f9:35: ac:40:85:e7:39:90:b2:ab:3a:fb:58:66:90:30:9a: 74:7e:88:4e:64:3b:49:96:fe:01:e0:45:80:48:9c: e5:88:69:7e:1a:15:54:7f:ed:d0:5e:97:a6:4a:63: 67:f6:86:b1:f9:64:be:a4:38:ff:f2:09:a6:74:8f: e6:a0:97:f7:9d:80:d7:b4:17:a9:6c:53:99:c4:ae: af:a2:41:fb:f1:b6:6d:49:b2:21:05:ae:bf:60:b1: 94:82:ce:f1:a6:b3:91:3b:46:a6:3c:ee:49:3f:86: b1:63:32:8d:c6:eb:d5:59:ea:8d:5d:28:0c:26:84: 54:c6:08:d7:dc:51:d2:97:8b:ff:73:77:67:0f:fe: 2b:15:03:9a:7d:ff:bd:d1:8f:9e:d8:15:6e:59:0f: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327750 328047 328101 sbgp-ipAddrBlock: critical IPv4: 102.23.224.0/19 102.69.248.0/21 102.164.192.0/19 154.126.192.0/19 IPv6: 2c0f:f368::/32 2c0f:f4e8::/32 Signature Algorithm: sha256WithRSAEncryption 0a:1b:19:8e:18:af:37:1c:bc:53:aa:d5:1d:8f:b1:97:cd:e5: 0f:9f:f9:c9:48:76:a3:54:4f:48:d3:4e:3c:08:84:6f:fd:90: 4c:44:1b:29:df:b5:2f:4b:31:62:87:1a:47:04:4b:10:08:6a: c8:17:23:9f:f5:bf:79:40:4c:b8:73:8e:bc:4d:b2:c3:75:4d: 11:5b:11:86:7b:fa:f9:c0:ce:b2:bf:56:6f:e1:1c:a2:21:86: 1e:7d:8f:1a:ed:94:52:35:80:82:4d:25:e1:a0:b9:18:af:65: 68:11:50:d7:8a:72:0d:4c:46:13:62:1a:a8:a1:55:de:40:f6: d7:d5:63:cf:31:79:90:80:24:ab:6e:ae:d7:8a:41:3c:bb:30: 03:18:e5:bc:6a:16:bb:e8:94:75:0d:91:c6:a3:5d:7f:cf:bf: bf:d5:38:4e:19:43:30:a7:94:5c:b0:b2:96:42:9e:20:5b:c8: 18:03:f1:2d:ef:85:8e:01:b2:9b:b5:2a:09:df:b0:5c:a8:77: 01:8e:2a:d3:e1:d5:aa:4b:e9:5c:c7:c7:ea:bb:bf:60:b6:97: d2:a5:8d:cd:a1:76:e0:3b:fa:30:c9:79:b1:98:4c:f8:c4:95: 9e:61:ba:e8:6b:c9:fa:32:da:e4:2e:34:7e:4d:2e:61:21:36: d3:ae:df:86 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgICN+gwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDI2MTVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjIwQUNGQUYxMTAvBgNVBAUTKDg4MjYyOTg5NUQ4REI1N0IyNTQxRUE0 OEZBMTEyNjMyNUUyOTAyMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb1h9qSwZzMMTF2s7lcn3L27+nQerq+dLwJu/6S4P+uAE9lMUSe8EBec2cJc+L 9H0Ug64vq3GhpTFzEK9A5OtOg/XBelfIJDb4JwiUqg+KKGDqZJ2c2bQu2b620WSR gYvI5kma6a/5NaxAhec5kLKrOvtYZpAwmnR+iE5kO0mW/gHgRYBInOWIaX4aFVR/ 7dBel6ZKY2f2hrH5ZL6kOP/yCaZ0j+agl/edgNe0F6lsU5nErq+iQfvxtm1JsiEF rr9gsZSCzvGms5E7RqY87kk/hrFjMo3G69VZ6o1dKAwmhFTGCNfcUdKXi/9zd2cP /isVA5p9/73Rj57YFW5ZD6/lAgMBAAGjggM9MIIDOTAdBgNVHQ4EFgQUiCYpiV2N tXslQepI+hEmMl4pAgswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyMEFDRi85MjVFMkJFNjU4NkQx MUU1QUVCNTVDMkZGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MjBBQ0YvOTI1RTJCRTY1ODZEMTFFNUFFQjU1QzJGRjhBRUEyMjgvaUNZcGlW Mk50WHNsUWVwSS1oRW1NbDRwQWdzLm1mdDAkBggrBgEFBQcBCAEB/wQVMBOgETAP AgMFAEYCAwUBbwIDBQGlMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQFZhfg AwQDZkX4AwQFZqTAAwQFmn7AMBQEAgACMA4DBQAsD/NoAwUALA/06DANBgkqhkiG 9w0BAQsFAAOCAQEAChsZjhivNxy8U6rVHY+xl83lD5/5yUh2o1RPSNNOPAiEb/2Q TEQbKd+1L0sxYocaRwRLEAhqyBcjn/W/eUBMuHOOvE2yw3VNEVsRhnv6+cDOsr9W b+EcoiGGHn2PGu2UUjWAgk0l4aC5GK9laBFQ14pyDUxGE2IaqKFV3kD219VjzzF5 kIAkq26u14pBPLswAxjlvGoWu+iUdQ2RxqNdf8+/v9U4ThlDMKeUXLCylkKeIFvI GAPxLe+FjgGym7UqCd+wXKh3AY4q0+HVqkvpXMfH6ru/YLaX0qWNzaF24Dv6MMl5 sZhM+MSVnmG66GvJ+jLa5C40fk0uYSE2067fhg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:07 2026 by rpki-client