This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer File: rhKLIvUdxljVXiFW669z1satdio.cer (raw, json) Hash identifier: O5laSHoLGAaQIoh5wusnWmpB8Bg73polovP/+X4zuBU= Subject key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39B9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:42:29 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328426 IP: 102.130.240.0/21 IP: 2c0f:1780::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14777 (0x39b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:42:29 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:ba:ee:02:93:0d:55:40:39:dc:df:26:8a: 0a:c4:a1:7c:1b:71:74:ae:95:df:e8:03:8c:ee:8f: 3f:e4:6d:85:7e:fc:26:7e:46:cf:d4:1c:e3:2d:44: b0:2c:65:ef:34:e4:c2:66:08:d1:76:5a:ce:4d:cf: 6e:2c:1d:b0:0e:6b:ca:18:c0:61:2c:80:d6:33:43: 3c:cb:1c:e8:f1:6f:6c:35:15:9c:fb:df:79:e4:ef: 7f:ce:cb:d4:90:b1:07:95:b5:dd:4d:61:b8:01:2c: 5b:0e:e3:1b:d8:73:24:6f:81:4a:df:12:1c:27:34: 7f:41:03:6e:00:c0:2d:ae:58:df:1d:bc:2a:cd:61: 4c:ca:c0:1c:bc:13:4c:af:1a:68:04:bc:4d:0c:76: b0:95:95:41:c8:bf:94:2f:1c:1a:1e:e1:dd:c5:e6: 75:a3:15:50:c2:21:9d:31:66:1a:c7:3a:ab:34:95: 1c:58:90:3b:bb:2a:63:0d:8b:9a:fd:65:4b:9e:f2: 06:30:01:e7:60:cc:41:7b:eb:54:e1:b5:60:14:18: 9b:7c:9b:a4:b0:c6:04:79:ba:fa:7c:41:ba:e5:65: 8a:e5:02:85:ce:a9:1e:f6:db:e8:1e:85:f5:11:34: 5a:04:9e:ec:1b:91:9e:44:b1:21:40:28:4d:3d:45: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328426 sbgp-ipAddrBlock: critical IPv4: 102.130.240.0/21 IPv6: 2c0f:1780::/32 Signature Algorithm: sha256WithRSAEncryption 3d:ef:fa:d2:01:63:dc:30:9e:1f:76:79:c9:51:16:89:c1:dc: f4:58:99:90:9d:2d:fd:03:99:d3:c7:3c:7e:10:08:d6:a9:5e: 2e:9a:e9:36:6a:37:d0:27:84:62:8f:c6:e9:b2:4a:a2:83:0d: 03:bd:16:bf:e9:c5:d3:88:0a:a6:3f:a2:7a:9d:f1:85:cb:46: fe:21:45:ee:ad:f9:ba:3c:64:f3:2e:c2:21:c5:03:0e:0a:82: 36:c0:b1:b9:33:af:6d:9c:ee:88:4c:47:1e:42:d2:7b:b5:a2: a7:51:2d:02:6b:24:3a:94:07:12:c0:b4:d2:e3:cb:84:0a:2c: f7:21:7d:38:1b:b8:6b:99:ae:7f:01:59:77:d4:4d:c6:93:61: 25:85:2c:b8:b5:95:c4:8a:c7:ff:ef:7c:55:1e:d1:4c:73:dc: fb:0d:ff:a9:8f:e9:60:53:97:5a:1e:ad:03:c9:49:64:93:13: 4b:32:72:71:04:cc:51:47:0b:00:71:d3:ef:74:ad:f6:79:a3: 78:95:41:c7:98:9a:fd:13:e1:eb:0b:fc:70:9c:28:7b:77:01: e8:0a:c0:61:ad:6d:01:7e:09:0d:39:5a:70:77:48:9f:74:33: 3b:db:69:00:73:ca:77:27:51:7a:92:3a:72:69:ff:70:7a:fc: c4:0c:b1:68 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICObkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTQyMjlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjU2Qjk1QUYxMTAvBgNVBAUTKEFFMTI4QjIyRjUxREM2NThENTVFMjE1 NkVCQUY3M0Q2QzZBRDc2MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMR7ruApMNVUA53N8migrEoXwbcXSuld/oA4zujz/kbYV+/CZ+Rs/UHOMtRLAs Ze805MJmCNF2Ws5Nz24sHbAOa8oYwGEsgNYzQzzLHOjxb2w1FZz733nk73/Oy9SQ sQeVtd1NYbgBLFsO4xvYcyRvgUrfEhwnNH9BA24AwC2uWN8dvCrNYUzKwBy8E0yv GmgEvE0MdrCVlUHIv5QvHBoe4d3F5nWjFVDCIZ0xZhrHOqs0lRxYkDu7KmMNi5r9 ZUue8gYwAedgzEF761ThtWAUGJt8m6SwxgR5uvp8QbrlZYrlAoXOqR722+gehfUR NFoEnuwbkZ5EsSFAKE09RXMJAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUrhKLIvUd xljVXiFW669z1satdiowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1NkI5NS82MjQxMkFDMENBMjYx MUVEOTJFOUM5OEZGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NTZCOTUvNjI0MTJBQzBDQTI2MTFFRDkyRTlDOThGRjEyMjI0NjgvcmhLTEl2 VWR4bGpWWGlGVzY2OXoxc2F0ZGlvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAuowLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBANmgvAwDQQCAAIwBwMF ACwPF4AwDQYJKoZIhvcNAQELBQADggEBAD3v+tIBY9wwnh92eclRFonB3PRYmZCd Lf0DmdPHPH4QCNapXi6a6TZqN9AnhGKPxumySqKDDQO9Fr/pxdOICqY/onqd8YXL Rv4hRe6t+bo8ZPMuwiHFAw4KgjbAsbkzr22c7ohMRx5C0nu1oqdRLQJrJDqUBxLA tNLjy4QKLPchfTgbuGuZrn8BWXfUTcaTYSWFLLi1lcSKx//vfFUe0Uxz3PsN/6mP 6WBTl1oerQPJSWSTE0sycnEEzFFHCwBx0+90rfZ5o3iVQceYmv0T4esL/HCcKHt3 AegKwGGtbQF+CQ05WnB3SJ90MzvbaQBzyncnUXqSOnJp/3B6/MQMsWg= -----END CERTIFICATE-----Generated at Sun Jan 25 15:19:42 2026 by rpki-client