This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer File: ib0Ua61yHpyUGcUJxustXey5ZyE.cer (raw, json) Hash identifier: W2IBtMAnR/dCXRnCj048aIntTyMRVoJ3HyVXtO947rE= Subject key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A60 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:08:24 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328997 IP: 102.206.224.0/22 IP: 102.214.128.0/22 IP: 102.216.216.0/22 IP: 2c0f:2240::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14944 (0x3a60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:08:24 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:02:12:54:d0:95:2a:87:da:e6:92:82:8c: 0a:89:90:df:c8:f4:22:3b:57:a9:3a:a4:f7:b0:54: b0:f0:cf:66:10:73:c5:70:86:24:d2:77:99:5b:50: d4:15:49:9f:15:66:10:b7:11:b9:46:87:83:80:c7: 8b:d3:d2:55:3d:a1:a3:ac:a0:94:c6:54:c1:e2:64: c6:b9:d6:08:4e:b5:98:8b:65:ae:cf:34:65:ae:9b: b9:1e:29:ab:27:5f:86:01:62:86:b4:9f:e8:35:45: 06:fe:52:d9:46:6e:5e:17:79:7c:eb:c3:9d:c1:4d: a8:a0:18:94:e5:8d:a6:04:cf:7c:23:e2:a9:42:ac: 2b:7e:8c:18:6c:13:b4:30:7c:55:c8:1c:91:1d:e7: ac:97:37:b3:a9:4c:d7:60:ad:94:0c:3a:9a:40:25: 3d:85:4c:25:76:b3:e3:3b:26:be:55:d5:f6:dc:20: 37:71:ce:14:c3:1d:6a:c2:4b:5b:ae:0d:16:ca:08: 89:9b:5f:d2:77:26:34:c1:ee:5b:4b:d7:c7:5e:0b: 29:cd:b1:25:29:b4:c6:3d:c6:7d:cf:ff:f4:21:02: d6:81:ec:45:b4:f8:01:11:06:85:a6:81:02:e0:65: dc:a5:c9:cd:0e:dc:1b:54:80:9e:5e:e0:b8:6b:fb: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328997 sbgp-ipAddrBlock: critical IPv4: 102.206.224.0/22 102.214.128.0/22 102.216.216.0/22 IPv6: 2c0f:2240::/32 Signature Algorithm: sha256WithRSAEncryption 67:3a:20:7b:dd:c2:26:cb:8d:2f:33:dc:7b:ea:93:37:4d:9d: 41:54:3b:ef:e1:e5:24:94:6e:bd:16:fb:99:d2:5f:f6:a9:73: 7d:c8:14:3c:2e:8a:ce:e0:4e:8c:21:d8:d0:14:f6:ca:fa:0a: 2e:35:b3:b1:ef:13:7c:93:25:3d:1d:00:0d:e5:d4:da:d7:05: f8:95:38:b4:08:14:b2:f7:0c:a9:ad:b1:c6:27:f9:d9:30:85: 2a:a6:ef:a4:b1:aa:be:8a:58:2a:1b:f1:b2:a5:51:4f:29:8c: a6:37:5b:79:a2:d3:e1:6c:2f:e8:1a:0a:ed:78:93:11:53:64: d0:d7:e4:84:5b:72:73:24:ec:03:61:19:51:51:41:6f:08:a1: ca:e1:d7:c0:1a:da:91:9c:23:50:44:8f:9d:9f:10:4c:4e:d8: a4:41:d0:f0:95:be:cc:cd:9e:82:2c:38:53:1f:df:b3:09:5e: 2e:3a:50:f8:a5:43:8f:34:c0:c3:6c:94:04:99:51:91:e5:ce: f2:07:0f:f9:19:e9:d2:e1:0c:b8:de:69:f5:1c:b3:c8:72:0c: 2c:66:37:a2:69:a0:22:db:32:78:d4:a4:09:da:57:0e:73:b0: a7:c2:89:6d:68:a4:4c:07:19:98:15:f9:56:7f:e1:ca:d3:93: 7c:4e:d3:82 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICOmAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjA4MjRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjY3NUUzQUYxMTAvBgNVBAUTKDg5QkQxNDZCQUQ3MjFFOUM5NDE5QzUw OUM2RUIyRDVERUNCOTY3MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9dAISVNCVKofa5pKCjAqJkN/I9CI7V6k6pPewVLDwz2YQc8VwhiTSd5lbUNQV SZ8VZhC3EblGh4OAx4vT0lU9oaOsoJTGVMHiZMa51ghOtZiLZa7PNGWum7keKasn X4YBYoa0n+g1RQb+UtlGbl4XeXzrw53BTaigGJTljaYEz3wj4qlCrCt+jBhsE7Qw fFXIHJEd56yXN7OpTNdgrZQMOppAJT2FTCV2s+M7Jr5V1fbcIDdxzhTDHWrCS1uu DRbKCImbX9J3JjTB7ltL18deCynNsSUptMY9xn3P//QhAtaB7EW0+AERBoWmgQLg Zdylyc0O3BtUgJ5e4Lhr+wM1AgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUib0Ua61y HpyUGcUJxustXey5ZyEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2NzVFMy9EQTZBMTM2MkQzRUYx MUVFQjBCRjdGNEY3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Njc1RTMvREE2QTEzNjJEM0VGMTFFRUIwQkY3RjRGNzc1NDEyRTYvaWIwVWE2 MXlIcHlVR2NVSnh1c3RYZXk1WnlFLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBSUwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJmzuADBAJm1oADBAJm 2NgwDQQCAAIwBwMFACwPIkAwDQYJKoZIhvcNAQELBQADggEBAGc6IHvdwibLjS8z 3HvqkzdNnUFUO+/h5SSUbr0W+5nSX/apc33IFDwuis7gTowh2NAU9sr6Ci41s7Hv E3yTJT0dAA3l1NrXBfiVOLQIFLL3DKmtscYn+dkwhSqm76Sxqr6KWCob8bKlUU8p jKY3W3mi0+FsL+gaCu14kxFTZNDX5IRbcnMk7ANhGVFRQW8Iocrh18Aa2pGcI1BE j52fEExO2KRB0PCVvszNnoIsOFMf37MJXi46UPilQ480wMNslASZUZHlzvIHD/kZ 6dLhDLjeafUcs8hyDCxmN6JpoCLbMnjUpAnaVw5zsKfCiW1opEwHGZgV+VZ/4crT k3xO04I= -----END CERTIFICATE-----Generated at Sun Jan 25 05:59:14 2026 by rpki-client