This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer File: saGqcslle0DmFrw3PhPPk7Ip6z8.cer (raw, json) Hash identifier: 4PmT/uB26eyCifb6PysZOHxCGE0Yap088467SMifUfM= Subject key identifier: B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A40 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:03:56 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328676 IP: 102.207.204.0/22 IP: 102.214.44.0/23 IP: 102.223.7.0/24 IP: 2c0f:31c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14912 (0x3a40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:03:56 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F366372CAF, serialNumber=B1A1AA72C9657B40E616BC373E13CF93B229EB3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7f:56:d6:62:7c:0d:8c:71:c4:4b:2d:af:5e: 9b:7b:a3:ad:c3:a5:f1:1e:9a:ab:67:9d:5e:6e:2f: e4:4e:0f:01:ab:34:fb:4a:e0:f9:04:2f:70:fc:eb: 36:55:f9:bb:af:25:7e:4f:4e:02:da:47:87:9b:c4: a9:23:a7:69:9a:d9:d8:80:d4:44:12:ca:f2:31:9c: 46:46:f0:ec:a3:36:4e:49:54:5b:65:83:84:69:c7: cb:f1:1c:1f:77:31:40:28:6a:8c:cf:b6:70:19:88: d7:11:5e:0b:9d:f0:17:09:6a:30:f6:f8:b9:b6:f3: cc:de:29:f7:43:5f:e1:5e:34:85:12:5e:d0:e6:62: 5d:cc:86:59:0f:81:7c:e4:ac:04:40:e6:c2:6a:15: a6:ab:a5:bf:bc:21:c7:0a:f0:d7:02:1a:94:88:5b: 43:5d:37:cb:fb:a7:c6:ec:00:e5:64:27:67:fa:c7: ab:32:f4:11:c5:85:98:b8:72:6e:f5:0d:7c:95:8c: 36:69:48:f5:b7:16:95:42:50:06:5c:4d:6c:e9:d6: e7:aa:68:fc:f8:ee:ec:d1:74:ce:03:bf:14:ae:6f: cc:19:26:17:80:46:e9:07:b2:ed:8f:37:0f:e0:22: 3c:27:ba:c0:b4:7c:c0:fe:0b:05:e8:50:f7:33:65: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328676 sbgp-ipAddrBlock: critical IPv4: 102.207.204.0/22 102.214.44.0/23 102.223.7.0/24 IPv6: 2c0f:31c0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:89:de:18:b0:d8:85:17:37:e9:8b:9e:a6:9d:8c:ba:ce:86: 45:ab:21:c6:cc:1c:29:4e:09:4c:37:ac:1e:8a:43:c6:b2:17: a1:ba:3c:57:6c:e9:ba:cc:5f:d8:1f:dd:9d:3a:c9:8f:5f:0c: c9:64:6a:e2:cd:a2:dd:d7:04:cb:b0:50:0b:a4:e6:70:d0:42: ca:a9:7d:d9:08:d7:11:2b:17:11:f2:be:dc:53:48:02:86:92: c6:f3:8d:d8:c2:ef:6c:d9:f7:14:20:51:69:1c:bf:3f:19:b5: 85:0d:67:3b:ab:4c:ff:88:c2:a1:24:58:f7:37:83:0d:61:58: 43:e9:f7:12:25:cd:57:37:9a:55:ee:68:e8:07:eb:dc:09:8b: a1:04:7b:36:0d:bd:8c:ed:6b:b0:fb:4a:8f:2e:38:6b:a1:75: 3f:56:90:5d:2f:eb:23:b0:2c:b1:d2:b2:42:07:45:c5:62:fa: 46:86:db:3b:49:93:93:7d:31:a1:01:1f:c4:2f:63:2e:c1:69: 17:b0:06:19:25:cc:36:1d:bd:c3:dd:7b:4e:6b:cc:b4:e1:f9: 83:4c:83:7f:bf:bc:34:db:8c:59:0a:af:1b:b1:79:3f:da:ad: 35:b7:a1:68:e7:f6:e0:0f:00:87:43:cb:05:5a:64:58:b4:80: f0:54:55:34 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICOkAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjAzNTZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjYzNzJDQUYxMTAvBgNVBAUTKEIxQTFBQTcyQzk2NTdCNDBFNjE2QkMz NzNFMTNDRjkzQjIyOUVCM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDif1bWYnwNjHHESy2vXpt7o63DpfEemqtnnV5uL+RODwGrNPtK4PkEL3D86zZV +buvJX5PTgLaR4ebxKkjp2ma2diA1EQSyvIxnEZG8OyjNk5JVFtlg4Rpx8vxHB93 MUAoaozPtnAZiNcRXgud8BcJajD2+Lm288zeKfdDX+FeNIUSXtDmYl3MhlkPgXzk rARA5sJqFaarpb+8IccK8NcCGpSIW0NdN8v7p8bsAOVkJ2f6x6sy9BHFhZi4cm71 DXyVjDZpSPW3FpVCUAZcTWzp1ueqaPz47uzRdM4DvxSub8wZJheARukHsu2PNw/g IjwnusC0fMD+CwXoUPczZYfDAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUsaGqcsll e0DmFrw3PhPPk7Ip6z8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2MzcyQy81RjIxN0MzNDY1N0Yx MUVEOTY0QUVGODVGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NjM3MkMvNUYyMTdDMzQ2NTdGMTFFRDk2NEFFRjg1RjEyMjI0Njgvc2FHcWNz bGxlMERtRnJ3M1BoUFBrN0lwNno4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA+QwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJmz8wDBAFm1iwDBABm 3wcwDQQCAAIwBwMFACwPMcAwDQYJKoZIhvcNAQELBQADggEBAIuJ3hiw2IUXN+mL nqadjLrOhkWrIcbMHClOCUw3rB6KQ8ayF6G6PFds6brMX9gf3Z06yY9fDMlkauLN ot3XBMuwUAuk5nDQQsqpfdkI1xErFxHyvtxTSAKGksbzjdjC72zZ9xQgUWkcvz8Z tYUNZzurTP+IwqEkWPc3gw1hWEPp9xIlzVc3mlXuaOgH69wJi6EEezYNvYzta7D7 So8uOGuhdT9WkF0v6yOwLLHSskIHRcVi+kaG2ztJk5N9MaEBH8QvYy7BaRewBhkl zDYdvcPde05rzLTh+YNMg3+/vDTbjFkKrxuxeT/arTW3oWjn9uAPAIdDywVaZFi0 gPBUVTQ= -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:49 2026 by rpki-client