This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer File: j29vvKPGNM2_8Exy6bDsgG-YPKg.cer (raw, json) Hash identifier: YI84+yaDhpON3WpTSVmutjA+zDHpkYVZodZ3os7Wza8= Subject key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D30 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:53:23 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328533 IP: 102.36.208.0/22 IP: 102.208.72.0/22 IP: 102.214.189.0/24 IP: 102.221.208.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15664 (0x3d30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:53:23 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B57DFAF, serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:f7:e4:5e:40:ef:ce:12:4f:ff:78:10:57: e6:e8:46:10:1f:37:73:20:8a:2b:fa:85:a1:bd:89: 30:54:4e:5b:30:8c:46:3c:58:54:62:7d:15:e9:03: 7f:2d:61:6c:0f:8b:39:0c:a2:43:2d:cb:e7:94:c7: 72:fa:a2:f4:09:3e:65:a0:49:64:7b:dd:78:9f:1d: 48:02:9f:dc:84:05:1c:9c:23:4c:69:43:21:93:82: b2:cd:ba:55:5c:8a:7b:7f:7b:ce:19:f5:d6:bd:12: 75:b1:d4:63:85:a0:f5:21:41:ce:30:d7:34:87:7b: 44:83:de:c6:38:fc:4f:0c:52:b1:79:8b:82:5a:65: 8f:57:88:45:94:be:4e:3e:27:0e:01:b4:25:11:5d: 08:b8:8c:d0:fc:8f:3b:c0:71:5c:93:9f:a9:81:36: d9:60:66:d4:e0:fc:fe:67:97:fc:af:d8:40:19:ac: e8:37:c1:92:2f:8d:16:44:0e:53:4c:72:dd:1a:b4: 0f:04:99:3d:69:24:8f:3e:e1:ec:98:24:37:4d:9f: 13:c6:e7:81:3a:9b:22:7a:c5:eb:d3:ee:02:52:b6: d8:75:aa:4d:bf:99:cd:64:24:d3:e4:bd:5a:d1:cf: 66:ef:39:5b:84:26:07:c5:7f:02:70:d6:0b:a7:19: 81:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328533 sbgp-ipAddrBlock: critical IPv4: 102.36.208.0/22 102.208.72.0/22 102.214.189.0/24 102.221.208.0/22 Signature Algorithm: sha256WithRSAEncryption 02:c4:b9:e8:6e:19:03:1e:3b:1d:d0:79:ee:b5:e0:51:9b:aa: f1:45:16:c8:9b:52:ec:3d:0c:bd:8c:10:e7:25:95:ed:bf:8e: 4a:cb:7d:b3:01:9d:60:d7:1a:54:7f:13:74:ed:f2:94:96:9b: 01:a1:6d:f5:26:af:d8:f8:7b:63:ad:4e:7e:5e:68:04:fe:36: a7:f2:53:c1:11:c4:b6:28:b9:80:f1:0d:7b:fc:c3:be:26:62: 6e:51:f5:65:24:47:7a:9f:0e:ad:5c:e1:d2:08:d8:18:fb:59: 24:a6:24:8b:f6:77:8d:d9:73:0c:a0:69:ed:de:93:f3:ea:40: 4f:7f:51:4b:9e:1e:9b:cc:3c:0a:a3:a0:40:37:9a:89:ab:e0: 67:f1:96:44:e7:16:b4:83:0d:15:cb:33:f5:f0:2b:52:62:0b: bd:1c:ad:8f:1d:10:ca:e3:69:8f:d5:82:64:dd:29:2c:ba:80: c0:e0:18:c8:cb:6c:6c:17:d1:dd:45:06:59:c7:ae:46:b8:f9: ff:3d:d9:6c:24:59:66:a1:3e:e6:ba:1a:79:b5:d9:e9:a6:06: 4f:99:7a:df:bb:a3:46:1c:8f:a8:41:bb:bb:c8:89:8f:09:4d: cc:cf:19:67:27:f9:90:ae:37:28:88:86:41:2c:f7:c6:3e:59: 38:87:22:4a -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgICPTAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzUzMjNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkI1N0RGQUYxMTAvBgNVBAUTKDhGNkY2RkJDQTNDNjM0Q0RCRkYwNEM3 MkU5QjBFQzgwNkY5ODNDQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgjPfkXkDvzhJP/3gQV+boRhAfN3Mgiiv6haG9iTBUTlswjEY8WFRifRXpA38t YWwPizkMokMty+eUx3L6ovQJPmWgSWR73XifHUgCn9yEBRycI0xpQyGTgrLNulVc int/e84Z9da9EnWx1GOFoPUhQc4w1zSHe0SD3sY4/E8MUrF5i4JaZY9XiEWUvk4+ Jw4BtCURXQi4jND8jzvAcVyTn6mBNtlgZtTg/P5nl/yv2EAZrOg3wZIvjRZEDlNM ct0atA8EmT1pJI8+4eyYJDdNnxPG54E6myJ6xevT7gJStth1qk2/mc1kJNPkvVrR z2bvOVuEJgfFfwJw1gunGYHbAgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQUj29vvKPG NM2/8Exy6bDsgG+YPKgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCNTdERi81RkI0NDM3NjJGNzMx MUVEOTFFRDc4Q0NGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QjU3REYvNUZCNDQzNzYyRjczMTFFRDkxRUQ3OENDRjEyMjI0NjgvajI5dnZL UEdOTTJfOEV4eTZiRHNnRy1ZUEtnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA1UwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAJmJNADBAJm0EgDBABm 1r0DBAJm3dAwDQYJKoZIhvcNAQELBQADggEBAALEuehuGQMeOx3Qee614FGbqvFF FsibUuw9DL2MEOclle2/jkrLfbMBnWDXGlR/E3Tt8pSWmwGhbfUmr9j4e2OtTn5e aAT+NqfyU8ERxLYouYDxDXv8w74mYm5R9WUkR3qfDq1c4dII2Bj7WSSmJIv2d43Z cwygae3ek/PqQE9/UUueHpvMPAqjoEA3momr4GfxlkTnFrSDDRXLM/XwK1JiC70c rY8dEMrjaY/VgmTdKSy6gMDgGMjLbGwX0d1FBlnHrka4+f892WwkWWahPua6Gnm1 2emmBk+Zet+7o0Ycj6hBu7vIiY8JTczPGWcn+ZCuNyiIhkEs98Y+WTiHIko= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:09 2026 by rpki-client