This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer File: v2DdGbZCZae1tFPwFbi4pgtCmM8.cer (raw, json) Hash identifier: T4rcXrc/n7qOaywx6ZUmP+lpY+ymYcWEc8MEtdJW/9s= Subject key identifier: BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D43 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:56:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329157 IP: 102.214.96.0/22 IP: 2c0f:4d80::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15683 (0x3d43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:56:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B86D4AF, serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:41:e2:05:2a:4c:eb:a6:f4:bd:af:35:11:1a: 37:ae:12:3a:af:83:9d:0f:cc:23:86:29:55:fd:a3: 60:dd:9f:17:e8:5d:f1:fc:ea:d1:cd:d1:23:5e:6b: 80:7f:14:91:fa:38:7f:91:2f:96:83:60:ed:09:25: 78:bf:7e:56:01:83:0f:8a:f3:8f:c4:38:60:51:e7: 0f:85:8f:e7:8d:71:e1:d6:ec:31:6f:b3:f1:8b:b2: 62:c1:4a:61:91:c2:2f:4d:93:80:b2:f2:26:0a:e2: 8d:40:db:9f:00:bc:85:b9:c6:02:37:9e:af:94:d5: 91:57:bc:90:b1:d1:5d:18:8b:61:60:92:26:98:86: 26:29:7d:7e:cc:a0:bc:97:9e:60:d2:b3:f0:c6:34: ef:d6:65:f9:98:65:29:2d:76:98:84:a1:60:c4:58: e2:cf:7e:75:63:c4:4e:72:9b:fb:74:bd:cf:f0:7f: 80:00:c5:91:15:12:aa:2f:19:f4:f6:c0:80:1e:42: 73:2b:40:af:4a:6f:83:f2:d2:47:38:a5:10:6d:b2: 19:50:4f:75:65:db:f1:eb:ee:8f:75:eb:40:f4:59: 54:87:90:d8:64:f9:05:d7:58:4c:ca:3c:12:62:9c: 57:d8:a9:ea:6b:a3:1c:62:67:56:cb:3e:ae:e8:48: 34:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329157 sbgp-ipAddrBlock: critical IPv4: 102.214.96.0/22 IPv6: 2c0f:4d80::/32 Signature Algorithm: sha256WithRSAEncryption 0e:00:a0:6f:72:26:20:03:9b:40:e5:02:b2:47:cf:92:3d:b7: ac:b6:16:70:94:39:20:0d:e2:3c:21:90:31:2a:3c:37:7c:1e: 85:07:e0:e8:bb:50:3a:d0:7e:80:88:0b:35:7b:f7:53:5c:11: 41:4d:68:46:8c:aa:75:7f:d1:56:28:cc:32:f7:0a:06:d2:9b: f7:f4:33:2a:59:ee:21:ff:a0:72:ee:f5:6e:10:0b:34:6b:c0: 94:e1:5d:e7:60:9b:0b:9e:4b:53:a7:94:a5:f8:63:0a:32:21: 3c:36:bf:44:b2:b6:6b:e8:07:5a:7f:aa:7f:36:66:7e:1b:c7: 00:bc:71:8e:43:68:2d:1c:44:28:f5:ad:67:e8:09:52:69:fa: d2:e2:df:b2:4f:0a:89:08:71:b0:0c:7a:1a:28:99:13:2a:d2: e5:db:df:ca:7b:9e:8b:6b:43:79:e7:62:58:f5:79:fb:e3:a2: 69:43:c1:9e:ca:ec:84:f1:f7:f3:9b:b8:f0:ad:b3:11:6d:42: ea:9a:49:ef:e8:05:0e:69:ff:41:bd:c8:48:44:32:f7:c4:4a: ba:7b:8a:1b:44:7a:ed:9c:c3:52:a1:fd:dc:d8:18:07:2c:72: 0b:46:1a:d1:85:e2:d2:81:1d:27:ec:f2:78:2c:64:9a:57:ff: 82:7c:83:dd -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPUMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzU2MjBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkI4NkQ0QUYxMTAvBgNVBAUTKEJGNjBERDE5QjY0MjY1QTdCNUI0NTNG MDE1QjhCOEE2MEI0Mjk4Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdQeIFKkzrpvS9rzURGjeuEjqvg50PzCOGKVX9o2DdnxfoXfH86tHN0SNea4B/ FJH6OH+RL5aDYO0JJXi/flYBgw+K84/EOGBR5w+Fj+eNceHW7DFvs/GLsmLBSmGR wi9Nk4Cy8iYK4o1A258AvIW5xgI3nq+U1ZFXvJCx0V0Yi2FgkiaYhiYpfX7MoLyX nmDSs/DGNO/WZfmYZSktdpiEoWDEWOLPfnVjxE5ym/t0vc/wf4AAxZEVEqovGfT2 wIAeQnMrQK9Kb4Py0kc4pRBtshlQT3Vl2/Hr7o9160D0WVSHkNhk+QXXWEzKPBJi nFfYqeproxxiZ1bLPq7oSDRJAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUv2DdGbZC Zae1tFPwFbi4pgtCmM8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCODZENC9BMTc2RUFEODA5MjUx MUVGODZDQ0VERjUwMDcwMDFCMS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Qjg2RDQvQTE3NkVBRDgwOTI1MTFFRjg2Q0NFREY1MDA3MDAxQjEvdjJEZEdi WkNaYWUxdEZQd0ZiaTRwZ3RDbU04Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBcUwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm1mAwDQQCAAIwBwMF ACwPTYAwDQYJKoZIhvcNAQELBQADggEBAA4AoG9yJiADm0DlArJHz5I9t6y2FnCU OSAN4jwhkDEqPDd8HoUH4Oi7UDrQfoCICzV791NcEUFNaEaMqnV/0VYozDL3CgbS m/f0MypZ7iH/oHLu9W4QCzRrwJThXedgmwueS1OnlKX4YwoyITw2v0SytmvoB1p/ qn82Zn4bxwC8cY5DaC0cRCj1rWfoCVJp+tLi37JPCokIcbAMehoomRMq0uXb38p7 notrQ3nnYlj1efvjomlDwZ7K7ITx9/ObuPCtsxFtQuqaSe/oBQ5p/0G9yEhEMvfE Srp7ihtEeu2cw1Kh/dzYGAcscgtGGtGF4tKBHSfs8ngsZJpX/4J8g90= -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:31 2026 by rpki-client