This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer File: rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer (raw, json) Hash identifier: dItxsRt81WAsgiVC2E7czOf5Qo4f+5tCef9uM/yT5LY= Subject key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BBB Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:57:31 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328795 IP: 102.220.252.0/22 IP: 2c0f:3400::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15291 (0x3bbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:57:31 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F368A3D1AF, serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:89:02:1d:6e:55:8c:28:93:9e:22:ba:2f: 8f:f0:3f:c2:62:56:f2:81:9a:71:00:18:ee:17:4c: df:4a:dd:57:43:b7:46:1c:2c:b2:ba:ac:5e:75:f5: 5b:66:ba:92:9d:32:71:a7:b8:59:48:1d:60:cf:76: e1:8f:4e:ff:a3:fe:8a:9a:41:25:34:bc:56:d5:62: 16:78:78:67:7d:9a:dd:0a:33:ca:58:12:5a:b2:ea: 95:5f:b8:71:a2:b0:db:67:94:8c:95:18:54:33:2d: bb:b2:b5:1e:50:bf:43:16:d1:2c:16:bb:c3:d3:78: a6:55:e7:71:26:c9:fc:9b:ca:76:98:4f:9a:bc:dd: f0:2d:46:ba:c5:5d:b6:97:0d:b8:7b:af:aa:2c:e2: f3:8b:ea:70:e2:22:86:6b:74:40:c4:81:f3:24:a2: c5:e4:0b:a6:c2:0d:b1:0d:aa:62:2f:08:9a:2e:b2: 4f:e2:a6:28:9a:fa:f1:aa:24:6d:f5:2c:1f:09:f7: f7:3a:0b:d1:bd:b0:b1:5b:48:2b:3e:ac:ec:32:d7: 6a:58:11:f1:5d:3c:cd:f0:ff:88:73:de:a5:b5:d4: 1a:63:df:ba:13:b5:2b:d8:c3:f2:23:5b:68:bd:a6: ff:d3:2b:be:98:08:24:90:bd:79:77:52:7a:80:16: 22:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328795 sbgp-ipAddrBlock: critical IPv4: 102.220.252.0/22 IPv6: 2c0f:3400::/32 Signature Algorithm: sha256WithRSAEncryption 78:21:aa:d1:f8:ac:f7:7a:16:e5:91:13:6f:9b:bf:00:16:87: d7:8c:69:e1:f9:89:2f:94:3e:f9:49:b6:84:43:46:eb:47:fb: ac:5b:57:c6:96:27:3e:4e:8e:40:17:cf:c8:a2:53:0a:98:29: 8c:ec:16:26:49:f8:83:d9:4c:c5:70:2f:30:28:3d:86:15:2b: b1:a0:61:f9:68:fa:55:50:80:29:3a:56:85:94:88:23:7b:b0: 90:59:33:06:89:48:4f:3d:6d:e1:c7:f4:e4:08:b1:6a:f2:99: ee:99:27:e0:7c:4f:f2:62:91:6f:49:33:a1:a4:b7:ab:26:94: fc:b2:87:49:35:81:22:a8:39:c2:c9:0a:8a:60:21:45:27:7e: 8f:ec:18:9c:ab:3c:4c:a4:02:ee:d7:7d:67:b3:85:46:6a:51: 2e:0d:6d:f7:cb:37:47:f8:b3:60:15:66:39:d5:4b:6f:8b:7a: fd:ac:f4:85:e4:52:aa:66:e7:9e:83:06:7e:76:f2:d3:f2:e2: 06:ac:06:69:f3:c6:80:17:d5:0e:4f:c3:47:1f:48:2d:5d:d6: 95:da:a6:01:84:e0:23:83:3a:79:28:8d:28:f0:02:6b:f6:1a: db:48:a9:4f:37:2c:72:c9:66:ce:06:77:a8:d8:aa:9d:a5:36: d2:a2:f7:2c -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICO7swDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjU3MzFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjhBM0QxQUYxMTAvBgNVBAUTKEFFNTFEMjU3MTZEREI0Q0NBMzFCMkU5 ODVFMEE3NTI1RjdGNEI5QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJgIkCHW5VjCiTniK6L4/wP8JiVvKBmnEAGO4XTN9K3VdDt0YcLLK6rF519Vtm upKdMnGnuFlIHWDPduGPTv+j/oqaQSU0vFbVYhZ4eGd9mt0KM8pYElqy6pVfuHGi sNtnlIyVGFQzLbuytR5Qv0MW0SwWu8PTeKZV53EmyfybynaYT5q83fAtRrrFXbaX Dbh7r6os4vOL6nDiIoZrdEDEgfMkosXkC6bCDbENqmIvCJousk/ipiia+vGqJG31 LB8J9/c6C9G9sLFbSCs+rOwy12pYEfFdPM3w/4hz3qW11Bpj37oTtSvYw/IjW2i9 pv/TK76YCCSQvXl3UnqAFiKVAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUrlHSVxbd tMyjGy6YXgp1Jff0ucYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4QTNEMS83MzczMkU1NjcwMjgx MUVCQjJGOTY4MjVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OEEzRDEvNzM3MzJFNTY3MDI4MTFFQkIyRjk2ODI1RjhBRUEyMjgvcmxIU1Z4 YmR0TXlqR3k2WVhncDFKZmYwdWNZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBFswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3PwwDQQCAAIwBwMF ACwPNAAwDQYJKoZIhvcNAQELBQADggEBAHghqtH4rPd6FuWRE2+bvwAWh9eMaeH5 iS+UPvlJtoRDRutH+6xbV8aWJz5OjkAXz8iiUwqYKYzsFiZJ+IPZTMVwLzAoPYYV K7GgYflo+lVQgCk6VoWUiCN7sJBZMwaJSE89beHH9OQIsWryme6ZJ+B8T/JikW9J M6Gkt6smlPyyh0k1gSKoOcLJCopgIUUnfo/sGJyrPEykAu7XfWezhUZqUS4NbffL N0f4s2AVZjnVS2+Lev2s9IXkUqpm556DBn528tPy4gasBmnzxoAX1Q5Pw0cfSC1d 1pXapgGE4CODOnkojSjwAmv2GttIqU83LHLJZs4Gd6jYqp2lNtKi9yw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:09 2026 by rpki-client