This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer File: pz69jeko0iBEFPgOnBKclZ18RIk.cer (raw, json) Hash identifier: pj5DoKNQbeqIt7gfh90DT127Jk3cLOqRl98p/ZiEwko= Subject key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AAB Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:19:07 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.142.0.0/16 IP: 2c0f:f038::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15019 (0x3aab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:19:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F366F191AF, serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:df:07:e6:85:11:b1:95:89:b4:fe:4a:14:8d: 9c:3b:c5:52:89:a9:7b:e8:11:ac:73:59:7a:27:86: cc:01:02:02:47:a4:3c:1a:18:2a:6a:e9:23:15:c1: 7f:b7:f3:06:14:26:44:ea:bd:7c:1d:bb:8a:37:5f: 48:b6:4b:be:48:75:8e:9a:a0:98:0c:f5:57:68:77: 9b:11:e0:b7:03:47:6a:0d:d9:4a:66:94:46:75:74: b2:d2:49:6c:06:ef:4b:d8:3d:21:34:4d:74:58:eb: 99:d9:dd:56:85:b3:02:42:34:2d:41:f9:ff:77:df: e2:ba:57:d5:61:92:80:73:e8:3d:25:99:40:f2:91: 39:a7:35:d2:32:1d:11:c3:23:37:3d:da:1e:83:72: b3:2c:e4:15:7e:5b:d4:a2:56:a9:99:18:6c:13:56: df:f1:17:c5:b4:c1:48:f4:ab:ee:c4:8a:94:4e:8e: a2:e5:6b:13:95:2c:3b:bd:2e:fe:b3:b4:4c:55:d5: ec:46:b6:50:38:01:42:2b:aa:e5:73:c8:77:58:77: 6e:9e:29:06:10:fc:4e:8b:e4:0e:b8:5a:ec:76:bb: a2:d0:b1:66:f4:e7:8d:49:11:78:de:59:ce:ff:62: 68:7b:71:45:0e:a4:62:a3:09:29:d1:b6:d2:15:b7: e6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft sbgp-ipAddrBlock: critical IPv4: 102.142.0.0/16 IPv6: 2c0f:f038::/32 Signature Algorithm: sha256WithRSAEncryption c2:9d:b1:0a:d5:23:00:95:67:c7:1a:19:15:05:43:0a:92:dc: 5e:ae:c8:94:d8:66:ef:8c:9a:83:87:9b:0d:8b:1e:2a:00:dc: ae:51:29:70:ec:6d:d3:fd:7c:89:1d:77:b8:ce:c9:64:28:1f: 9a:7d:3e:cc:dd:fe:e8:b8:ee:67:46:0d:4c:ea:34:4b:dd:9c: db:f4:7a:2f:36:6f:20:1f:96:67:88:e2:ee:d8:20:6d:fb:c3: 4c:b4:64:5e:6d:47:9f:47:fc:17:2e:cf:cc:ca:0d:27:bc:bc: f6:39:06:4b:8b:0c:ff:69:47:48:fc:4d:d4:c5:fd:31:6e:0b: af:51:1b:df:17:b9:f7:8a:50:e3:05:2d:ff:c4:20:5b:a9:67: ae:fb:2e:1c:e4:10:5e:f8:bc:8c:57:46:a3:f1:0c:53:33:40: 60:a8:74:d7:a6:df:09:a9:12:d2:95:c5:c5:bc:20:f5:0a:ac: 2e:7a:5c:90:df:8d:ae:fd:1d:4b:52:2a:25:85:09:5f:95:0f: 2e:65:76:86:96:de:9d:cf:75:19:e1:cb:41:a6:e7:fc:3c:e7: ac:91:69:1b:27:dd:cd:bf:1e:5e:40:67:85:be:6b:68:5d:ce: 35:e1:0d:12:45:b8:54:8a:43:f6:77:a8:d2:b1:87:1c:05:71: dd:04:38:06 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgICOqswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjE5MDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjZGMTkxQUYxMTAvBgNVBAUTKEE3M0VCRDhERTkyOEQyMjA0NDE0Rjgw RTlDMTI5Qzk1OUQ3QzQ0ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa3wfmhRGxlYm0/koUjZw7xVKJqXvoEaxzWXonhswBAgJHpDwaGCpq6SMVwX+3 8wYUJkTqvXwdu4o3X0i2S75IdY6aoJgM9Vdod5sR4LcDR2oN2UpmlEZ1dLLSSWwG 70vYPSE0TXRY65nZ3VaFswJCNC1B+f933+K6V9VhkoBz6D0lmUDykTmnNdIyHRHD Izc92h6DcrMs5BV+W9SiVqmZGGwTVt/xF8W0wUj0q+7EipROjqLlaxOVLDu9Lv6z tExV1exGtlA4AUIrquVzyHdYd26eKQYQ/E6L5A64Wux2u6LQsWb0541JEXjeWc7/ Ymh7cUUOpGKjCSnRttIVt+aJAgMBAAGjggL9MIIC+TAdBgNVHQ4EFgQUpz69jeko 0iBEFPgOnBKclZ18RIkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2RjE5MS8xREE1QTUxRTA3Rjcx MUU3OUNEQkIzMEFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NkYxOTEvMURBNUE1MUUwN0Y3MTFFNzlDREJCMzBBRjhBRUEyMjgvcHo2OWpl a28waUJFRlBnT25CS2NsWjE4UklrLm1mdDAtBggrBgEFBQcBBwEB/wQeMBwwCwQC AAEwBQMDAGaOMA0EAgACMAcDBQAsD/A4MA0GCSqGSIb3DQEBCwUAA4IBAQDCnbEK 1SMAlWfHGhkVBUMKktxersiU2GbvjJqDh5sNix4qANyuUSlw7G3T/XyJHXe4zslk KB+afT7M3f7ouO5nRg1M6jRL3Zzb9HovNm8gH5ZniOLu2CBt+8NMtGRebUefR/wX Ls/Myg0nvLz2OQZLiwz/aUdI/E3Uxf0xbguvURvfF7n3ilDjBS3/xCBbqWeu+y4c 5BBe+LyMV0aj8QxTM0BgqHTXpt8JqRLSlcXFvCD1CqwuelyQ342u/R1LUiolhQlf lQ8uZXaGlt6dz3UZ4ctBpuf8POeskWkbJ93Nvx5eQGeFvmtoXc414Q0SRbhUikP2 d6jSsYccBXHdBDgG -----END CERTIFICATE-----Generated at Sun Jan 25 05:58:10 2026 by rpki-client