This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer File: nZEfOSNannHK5JlXppouUkKg3TU.cer (raw, json) Hash identifier: SfVlNxXdulemQavWJwTYb29Csylz7If1R+zSA9z1kOw= Subject key identifier: 9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D23 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:51:32 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328797 IP: 102.221.28.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15651 (0x3d23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:51:32 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B4CC8AF, serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:53:54:0d:09:99:09:99:ed:46:9f:7b:bd: 86:7b:29:f6:20:68:5f:e0:ae:61:7c:8b:51:c8:63: 31:de:aa:d8:2c:86:f7:17:9d:54:42:76:41:ad:06: 34:1a:2d:7f:11:5a:4c:a2:29:2b:10:c6:ea:c9:8f: 4c:ec:dd:9e:1a:d1:7c:94:36:e9:e5:7b:7d:54:23: 37:78:91:b6:54:7c:a1:81:15:13:f2:ef:9c:98:e7: d0:37:ea:fa:00:40:50:9a:ae:13:f8:60:39:4b:4d: 15:7d:34:6d:0e:32:d3:1b:c7:c1:5f:cd:09:ee:ce: df:8b:de:81:2b:4b:a5:d6:03:49:32:e1:02:fc:cf: 43:80:fb:26:54:97:45:c1:49:ba:fa:9f:fe:e2:ec: 97:3c:67:6b:85:c0:33:32:70:6f:92:a6:0e:5c:67: 58:4c:6f:88:69:64:44:b6:69:69:b9:70:b2:b8:bb: 00:87:3f:6c:c7:dd:c7:cb:09:62:41:49:cd:54:6a: 05:c0:e1:2b:b9:c4:cc:e8:89:d8:02:0d:31:f4:e7: 84:b7:e0:17:85:56:75:c1:bf:5f:bc:80:59:7c:19: 71:f6:ff:a3:05:ec:35:d0:fd:8d:2b:5c:1d:a6:b5: 9f:a4:f2:75:8c:1a:e0:4e:36:47:7f:9a:03:96:8f: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328797 sbgp-ipAddrBlock: critical IPv4: 102.221.28.0/22 Signature Algorithm: sha256WithRSAEncryption 44:34:61:c4:0d:f4:a1:e9:48:d5:2f:8a:2c:48:07:94:f1:5b: c5:83:c8:4b:e0:71:34:3f:f2:0d:f0:b3:51:5f:2d:5a:5e:2f: b1:8b:05:3d:e6:41:8d:6f:ad:45:f5:f1:79:cf:a7:c1:4f:0b: d8:fe:2b:b5:2f:25:05:25:df:7c:3b:d4:62:7b:47:5d:48:4e: 8b:c8:ae:46:1d:9d:20:ef:1a:dd:6d:ea:8f:da:9c:61:43:f2: 84:9f:ef:e3:36:e6:a4:d1:53:be:ef:86:d2:23:28:d5:6c:42: 3d:d5:6e:90:61:89:5c:a4:05:76:5d:a0:de:ec:29:d0:c2:01: 1e:22:fb:3f:2d:da:49:5a:00:6b:3c:fd:36:0d:a8:57:fe:66: 29:cc:8d:0c:c7:bb:5b:c3:aa:0d:5f:4c:50:f1:06:68:10:f1: 01:03:6d:a9:1c:ee:23:08:94:c3:5f:7f:64:d8:53:69:c3:39: 40:d3:9a:31:de:62:1a:9a:89:2f:b9:75:b0:05:e4:9d:35:5f: 20:5c:76:68:6d:52:2a:21:a0:b1:3d:15:a5:ae:2f:cf:fb:bc: aa:05:11:98:52:f3:ef:ab:c8:c8:1c:c2:1d:a5:1e:df:e3:2a: f8:66:77:e4:b3:44:88:0d:b4:62:82:13:bc:fc:c3:e7:bf:ab: fb:dc:f9:1c -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICPSMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzUxMzJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkI0Q0M4QUYxMTAvBgNVBAUTKDlEOTExRjM5MjM1QTlFNzFDQUU0OTk1 N0E2OUEyRTUyNDJBMEREMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3oVNUDQmZCZntRp97vYZ7KfYgaF/grmF8i1HIYzHeqtgshvcXnVRCdkGtBjQa LX8RWkyiKSsQxurJj0zs3Z4a0XyUNunle31UIzd4kbZUfKGBFRPy75yY59A36voA QFCarhP4YDlLTRV9NG0OMtMbx8FfzQnuzt+L3oErS6XWA0ky4QL8z0OA+yZUl0XB Sbr6n/7i7Jc8Z2uFwDMycG+Spg5cZ1hMb4hpZES2aWm5cLK4uwCHP2zH3cfLCWJB Sc1UagXA4Su5xMzoidgCDTH054S34BeFVnXBv1+8gFl8GXH2/6MF7DXQ/Y0rXB2m tZ+k8nWMGuBONkd/mgOWjx1RAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUnZEfOSNa nnHK5JlXppouUkKg3TUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCNENDOC8yQkQ3QTY3QzlEQTYx MUVFOTQyMDg2NUNEMjVCRTQ2NS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QjRDQzgvMkJEN0E2N0M5REE2MTFFRTk0MjA4NjVDRDI1QkU0NjUvblpFZk9T TmFubkhLNUpsWHBwb3VVa0tnM1RVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBF0wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3RwwDQYJKoZIhvcN AQELBQADggEBAEQ0YcQN9KHpSNUviixIB5TxW8WDyEvgcTQ/8g3ws1FfLVpeL7GL BT3mQY1vrUX18XnPp8FPC9j+K7UvJQUl33w71GJ7R11ITovIrkYdnSDvGt1t6o/a nGFD8oSf7+M25qTRU77vhtIjKNVsQj3VbpBhiVykBXZdoN7sKdDCAR4i+z8t2kla AGs8/TYNqFf+ZinMjQzHu1vDqg1fTFDxBmgQ8QEDbakc7iMIlMNff2TYU2nDOUDT mjHeYhqaiS+5dbAF5J01XyBcdmhtUiohoLE9FaWuL8/7vKoFEZhS8++ryMgcwh2l Ht/jKvhmd+SzRIgNtGKCE7z8w+e/q/vc+Rw= -----END CERTIFICATE-----Generated at Sun Jan 25 15:19:41 2026 by rpki-client