This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer File: sOM0w8FyGlubyhiSUD6QUkaIKTo.cer (raw, json) Hash identifier: 0zWew2wPD6cGhTggkB4IqSMY9xFV7yfMUt5KIAHD5YM= Subject key identifier: B0:E3:34:C3:C1:72:1A:5B:9B:CA:18:92:50:3E:90:52:46:88:29:3A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3703 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Fri 28 Nov 2025 09:21:11 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 329667 IP: 102.206.40.0/22 IP: 2c0f:41a0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14083 (0x3703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 28 09:21:11 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36B4C8AAF, serialNumber=B0E334C3C1721A5B9BCA1892503E90524688293A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:f3:ed:33:61:e0:c6:f6:9f:ae:34:dd:8f: 21:00:bc:3c:25:92:3b:c2:dc:03:6a:8a:a8:84:f4: 0d:87:3a:0f:8f:d4:f4:39:8c:e6:2e:31:92:4a:2b: ed:b9:7a:db:58:db:ce:24:c3:4d:8b:41:14:05:34: 56:7d:49:6a:31:3a:12:0a:2c:c5:99:3b:22:24:22: 95:19:29:de:19:7c:40:e6:6c:d2:2f:40:92:af:e8: 6c:ac:33:e0:75:80:4a:d1:b2:d8:da:f9:10:8c:27: a1:8a:03:3f:1a:ac:a4:77:06:44:de:b0:cf:85:79: b6:46:97:8d:a0:4b:60:fd:a7:8b:2f:9c:b1:b5:7e: 81:02:a4:e2:af:5e:e9:64:52:8a:5a:c8:e3:25:8f: ff:d3:52:f1:cd:68:03:f5:66:5b:f9:90:c3:51:9b: c5:b7:6f:1e:12:b8:99:54:b1:b0:34:da:5a:b3:8b: a7:f4:ef:38:d2:b7:3b:4c:6b:99:ce:6d:f9:0a:43: 44:45:33:09:27:b1:d8:24:1c:8c:22:e7:7c:4d:b5: f7:16:9a:8e:5c:8c:1f:11:df:46:32:f8:7a:53:c6: 20:d0:01:ff:0a:a3:e9:e5:d0:5d:ae:26:97:65:86: 35:59:df:e0:8a:2b:35:ad:28:72:e9:c6:a7:87:20: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E3:34:C3:C1:72:1A:5B:9B:CA:18:92:50:3E:90:52:46:88:29:3A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329667 sbgp-ipAddrBlock: critical IPv4: 102.206.40.0/22 IPv6: 2c0f:41a0::/32 Signature Algorithm: sha256WithRSAEncryption 37:3e:b5:08:e8:21:9c:03:a3:c5:08:54:7c:11:2b:63:82:9b: 0e:ee:a2:45:61:d5:3c:83:a1:97:99:05:1a:d1:10:97:76:3d: 4c:53:a9:b2:98:5b:bc:2a:37:05:0d:34:3b:17:76:1a:8d:d9: 6a:92:ea:98:61:32:33:89:77:bf:3a:5b:55:2b:7a:d2:fb:a4: bc:22:27:56:f8:5f:a1:03:e5:72:79:dc:8d:bf:56:57:a4:c7: 48:08:77:e1:94:c3:5c:b5:c7:ea:a0:ba:44:2b:e3:86:84:3b: 33:33:16:b2:66:03:12:a1:58:e9:be:81:78:c1:07:6e:99:03: cc:a2:42:1a:54:5d:eb:27:40:ce:bd:2b:70:4f:ca:ed:43:53: 4b:8d:ac:23:40:df:8c:df:c6:7c:15:bd:60:48:16:86:1c:94: e0:24:26:06:c7:03:73:87:42:36:62:53:06:24:43:83:e4:57: d1:9f:84:70:19:65:f4:42:af:57:f7:f0:e3:38:69:e4:70:27: 78:de:3e:91:20:5a:94:f3:02:e4:8b:7b:61:03:a1:8d:29:ae: 0b:8c:22:c5:37:46:2e:4c:7d:57:10:a5:eb:f1:f0:d3:f4:51: 97:21:01:d8:e5:0c:5b:a7:d4:e3:fb:15:53:6e:0f:76:b1:a1: 45:e2:96:bd -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICNwMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMjgwOTIxMTFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkI0QzhBQUYxMTAvBgNVBAUTKEIwRTMzNEMzQzE3MjFBNUI5QkNBMTg5 MjUwM0U5MDUyNDY4ODI5M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC80PPtM2HgxvafrjTdjyEAvDwlkjvC3ANqiqiE9A2HOg+P1PQ5jOYuMZJKK+25 ettY284kw02LQRQFNFZ9SWoxOhIKLMWZOyIkIpUZKd4ZfEDmbNIvQJKv6GysM+B1 gErRstja+RCMJ6GKAz8arKR3BkTesM+FebZGl42gS2D9p4svnLG1foECpOKvXulk UopayOMlj//TUvHNaAP1Zlv5kMNRm8W3bx4SuJlUsbA02lqzi6f07zjStztMa5nO bfkKQ0RFMwknsdgkHIwi53xNtfcWmo5cjB8R30Yy+HpTxiDQAf8Ko+nl0F2uJpdl hjVZ3+CKKzWtKHLpxqeHICevAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUsOM0w8Fy GlubyhiSUD6QUkaIKTowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCNEM4QS84RjdCODBBMkNDM0Ix MUYwOUU0RjRFRTNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QjRDOEEvOEY3QjgwQTJDQzNCMTFGMDlFNEY0RUUzREFFNEVDOUMvc09NMHc4 RnlHbHVieWhpU1VENlFVa2FJS1RvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB8MwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmzigwDQQCAAIwBwMF ACwPQaAwDQYJKoZIhvcNAQELBQADggEBADc+tQjoIZwDo8UIVHwRK2OCmw7uokVh 1TyDoZeZBRrREJd2PUxTqbKYW7wqNwUNNDsXdhqN2WqS6phhMjOJd786W1UretL7 pLwiJ1b4X6ED5XJ53I2/Vlekx0gId+GUw1y1x+qgukQr44aEOzMzFrJmAxKhWOm+ gXjBB26ZA8yiQhpUXesnQM69K3BPyu1DU0uNrCNA34zfxnwVvWBIFoYclOAkJgbH A3OHQjZiUwYkQ4PkV9GfhHAZZfRCr1f38OM4aeRwJ3jePpEgWpTzAuSLe2EDoY0p rguMIsU3Ri5MfVcQpevx8NP0UZchAdjlDFun1OP7FVNuD3axoUXilr0= -----END CERTIFICATE-----Generated at Mon Dec 8 16:18:35 2025 by rpki-client