This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer File: pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer (raw, json) Hash identifier: 5in48cyX4qXaxihV3dfjINn8kAa3vN4lGeicXdd9fTY= Subject key identifier: A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36C9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Tue 11 Nov 2025 11:28:12 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 327727 AS: 329617 IP: 102.211.168.0/22 IP: 154.72.16.0/22 IP: 2c0f:f168::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14025 (0x36c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 11 11:28:12 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36BDDB2AF, serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:ae:05:b0:77:34:1f:25:7d:1f:de:32:ed: 3a:b3:8a:06:70:36:04:6b:41:c9:66:30:94:ea:65: 00:23:98:6e:eb:e5:91:9f:e1:7e:f3:a7:a5:37:db: 67:63:40:19:7e:fd:ce:2d:93:74:f5:3c:12:c2:d8: 3b:f8:a0:c3:83:da:18:1d:97:ee:8e:73:98:97:fc: 15:2d:3a:58:32:dc:62:1f:57:67:50:bf:9f:93:18: 67:ae:39:f0:72:b6:b2:31:27:a4:ac:61:87:e8:27: d8:e4:ed:d5:ec:29:6a:a1:c7:43:14:8a:6b:0b:a4: 11:40:e6:02:96:a0:38:e5:3f:aa:a2:f9:b0:24:43: d3:ba:38:05:a9:d5:52:e9:f8:57:a7:0c:cc:47:3c: 65:ef:cc:f5:c0:03:d2:23:91:10:b8:86:22:7b:4c: 65:0c:8b:69:98:a4:05:32:03:d7:a1:f7:5c:8c:21: 59:06:6c:23:d8:f2:5f:f2:c3:5c:67:b1:25:10:2b: 6c:35:7b:44:36:ac:95:7e:6f:ef:ac:16:8e:99:9d: a8:d0:9a:7e:4a:d1:31:2d:b1:d4:3c:6b:b5:9b:ca: c0:d0:12:19:66:62:84:f4:07:b6:a0:14:eb:3a:e7: 11:45:ff:66:a2:ba:c5:09:f2:79:d5:91:13:a2:36: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327727 329617 sbgp-ipAddrBlock: critical IPv4: 102.211.168.0/22 154.72.16.0/22 IPv6: 2c0f:f168::/32 Signature Algorithm: sha256WithRSAEncryption 9e:a8:d1:2b:22:48:b9:55:45:c9:e3:fd:bb:33:64:f1:30:9b: 80:4c:2a:ed:bb:17:76:b8:59:23:5a:94:03:4e:45:31:22:5c: c9:bf:8f:ab:15:d5:5f:69:24:36:17:a4:d8:47:92:95:3c:1b: a0:21:86:de:c8:e5:0c:36:81:67:7d:4f:e3:5c:7f:27:a8:f6: ed:f8:ca:85:36:cd:a2:90:aa:81:5c:f5:32:93:fe:b9:ca:bb: ab:54:a7:8e:bd:aa:66:9c:e9:e2:cc:7f:44:2d:18:e7:2b:5b: cf:99:bf:95:9a:71:60:e4:64:ba:33:98:f1:67:df:54:8c:a6: 04:1f:1f:bd:d2:13:1a:8d:e5:f7:27:42:c4:cd:a1:ea:8a:4a: 90:3a:35:e2:63:37:78:5b:d4:f7:c7:5d:50:50:03:2f:34:ef: 4d:41:95:96:30:75:88:1d:a3:1c:56:dd:75:4f:29:99:95:15: d7:72:b1:d5:ed:c0:a4:96:dc:c1:e0:15:0d:82:28:0a:b1:84: 30:0b:09:55:34:30:ce:58:9d:30:dd:6e:ec:ab:67:7f:56:17: 90:a7:71:59:21:61:e7:76:cb:e2:a6:da:80:c6:54:76:bf:46: 4e:7a:05:79:9a:f5:23:e4:38:10:1b:b1:b6:95:63:5c:08:c5: 9d:89:62:04 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgICNskwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMTExMTI4MTJaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkJEREIyQUYxMTAvBgNVBAUTKEE1Q0E0RTVBNkZDQUZEOTg3MDY1MjNE MzE0NUM1NkJCQ0VDNzA5NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCphq4FsHc0HyV9H94y7TqzigZwNgRrQclmMJTqZQAjmG7r5ZGf4X7zp6U322dj QBl+/c4tk3T1PBLC2Dv4oMOD2hgdl+6Oc5iX/BUtOlgy3GIfV2dQv5+TGGeuOfBy trIxJ6SsYYfoJ9jk7dXsKWqhx0MUimsLpBFA5gKWoDjlP6qi+bAkQ9O6OAWp1VLp +FenDMxHPGXvzPXAA9IjkRC4hiJ7TGUMi2mYpAUyA9eh91yMIVkGbCPY8l/yw1xn sSUQK2w1e0Q2rJV+b++sFo6ZnajQmn5K0TEtsdQ8a7WbysDQEhlmYoT0B7agFOs6 5xFF/2aiusUJ8nnVkROiNnwtAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUpcpOWm/K /ZhwZSPTFFxWu87HCUAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCRERCMi83QzcxNTkwQ0JFRjEx MUYwQTFFNDk5QTREQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QkREQjIvN0M3MTU5MENCRUYxMTFGMEExRTQ5OUE0REFFNEVDOUMvcGNwT1dt X0tfWmh3WlNQVEZGeFd1ODdIQ1VBLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMFAC8CAwUHkTA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAmbTqAMEAppI EDANBAIAAjAHAwUALA/xaDANBgkqhkiG9w0BAQsFAAOCAQEAnqjRKyJIuVVFyeP9 uzNk8TCbgEwq7bsXdrhZI1qUA05FMSJcyb+PqxXVX2kkNhek2EeSlTwboCGG3sjl DDaBZ31P41x/J6j27fjKhTbNopCqgVz1MpP+ucq7q1Snjr2qZpzp4sx/RC0Y5ytb z5m/lZpxYORkujOY8WffVIymBB8fvdITGo3l9ydCxM2h6opKkDo14mM3eFvU98dd UFADLzTvTUGVljB1iB2jHFbddU8pmZUV13Kx1e3ApJbcweAVDYIoCrGEMAsJVTQw zlidMN1u7Ktnf1YXkKdxWSFh53bL4qbagMZUdr9GTnoFeZr1I+Q4EBuxtpVjXAjF nYliBA== -----END CERTIFICATE-----Generated at Mon Dec 8 16:18:34 2025 by rpki-client