This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer File: yDmJhjJn0TZLxz9143zW0rf-yYc.cer (raw, json) Hash identifier: AuEJTXNEZV7ogGRxWyHGXBolEzI1KWL/Y9zvYOAxoqw= Subject key identifier: C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 37DC Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:24:14 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329633 IP: 102.204.125.0/24 IP: 2c0f:39c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14300 (0x37dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:24:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F361F0D8AF, serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:15:97:d0:80:89:5c:da:85:cd:c2:c8:6e: e7:4f:35:c3:10:64:3a:57:4e:63:fb:32:16:df:12: 7c:f6:97:a2:6c:fb:6c:ba:80:f0:9a:d2:96:6e:bd: ed:cf:b6:9c:4a:b8:25:92:00:63:40:44:00:36:17: 17:8f:3b:b5:49:32:a2:65:f1:98:92:42:bb:fb:45: 55:c3:06:cf:93:1a:05:5b:c9:53:fb:79:57:34:dd: d6:49:5a:12:00:20:5c:3f:71:4c:6a:61:be:ea:db: 6d:0c:c5:81:bf:92:7f:84:2d:a0:bb:7c:bf:81:e9: 68:b9:ac:9b:91:29:26:a1:0e:b5:e5:68:34:2a:f7: 50:d4:c5:b7:63:62:ac:b8:f9:fc:c0:48:2f:59:29: 6e:99:f6:8b:4a:6e:71:29:57:45:e7:c1:a3:f8:e6: e6:fe:19:57:78:4b:87:a0:51:0f:98:01:50:ed:54: 10:93:c9:8d:b2:7d:2e:66:99:e4:cd:11:c9:6f:b5: ce:42:8f:55:30:45:7d:ef:99:7b:6a:0a:20:a0:ce: 8b:83:b6:f2:a2:29:5f:9e:4e:aa:43:c3:a6:e8:3f: a0:d8:58:43:8c:ab:2c:cc:6c:8d:44:2d:af:8c:59: 7d:59:5f:97:8b:61:63:4b:dd:82:36:af:01:ca:d2: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329633 sbgp-ipAddrBlock: critical IPv4: 102.204.125.0/24 IPv6: 2c0f:39c0::/32 Signature Algorithm: sha256WithRSAEncryption 09:6b:71:8c:cf:bc:71:05:72:4b:26:d6:f6:ea:78:35:45:89: 54:1a:94:ad:a2:d7:25:52:02:5b:c2:27:84:22:4d:c6:20:43: f5:4f:22:c0:1e:cc:e0:7b:58:6f:e8:e6:ae:34:d2:34:7b:01: f0:61:0f:06:46:58:85:e0:7b:5f:ed:70:b9:8d:46:5f:07:a8: 06:51:11:a0:bd:61:6f:38:94:aa:66:5f:77:7a:91:42:4c:40: 7e:23:ee:a9:67:0d:99:b6:1d:3c:6d:b1:51:1c:64:bd:a3:09: f9:1f:36:b4:87:7e:f6:24:09:25:38:26:51:d2:c2:8f:c6:4e: 18:70:33:e9:6b:8c:b0:3d:d8:ce:9c:23:6c:1d:4c:46:5e:df: 60:6a:fd:52:8c:0d:60:ca:06:f8:af:64:f9:e5:2c:b4:3d:58: 95:29:1d:bb:d8:8e:89:ef:6d:62:80:60:ea:a6:94:b6:7e:c0: cc:d8:ae:1a:71:5a:60:24:17:47:ca:ab:50:43:e1:2b:e3:e8: fa:e2:3a:9a:d2:cd:3b:5d:a9:bd:4a:aa:f2:b0:29:e1:87:0c: 71:8d:f9:3b:ef:23:85:ac:fc:b0:18:90:9d:e1:1b:d0:73:bd: 20:d9:24:4d:91:07:c7:92:ac:80:1f:84:7e:0d:b4:f3:41:0d: 8a:06:93:68 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICN9wwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDI0MTRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjFGMEQ4QUYxMTAvBgNVBAUTKEM4Mzk4OTg2MzI2N0QxMzY0QkM3M0Y3 NUUzN0NENkQyQjdGRUM5ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7WhWX0ICJXNqFzcLIbudPNcMQZDpXTmP7MhbfEnz2l6Js+2y6gPCa0pZuve3P tpxKuCWSAGNARAA2FxePO7VJMqJl8ZiSQrv7RVXDBs+TGgVbyVP7eVc03dZJWhIA IFw/cUxqYb7q220MxYG/kn+ELaC7fL+B6Wi5rJuRKSahDrXlaDQq91DUxbdjYqy4 +fzASC9ZKW6Z9otKbnEpV0XnwaP45ub+GVd4S4egUQ+YAVDtVBCTyY2yfS5mmeTN Eclvtc5Cj1UwRX3vmXtqCiCgzouDtvKiKV+eTqpDw6boP6DYWEOMqyzMbI1ELa+M WX1ZX5eLYWNL3YI2rwHK0sOFAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUyDmJhjJn 0TZLxz9143zW0rf+yYcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxRjBEOC9ERkI4OEY4MEEzQkMx MUYwQUM4MjcyRTVEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MUYwRDgvREZCODhGODBBM0JDMTFGMEFDODI3MkU1REFFNEVDOUMveURtSmhq Sm4wVFpMeHo5MTQzelcwcmYteVljLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB6EwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABmzH0wDQQCAAIwBwMF ACwPOcAwDQYJKoZIhvcNAQELBQADggEBAAlrcYzPvHEFcksm1vbqeDVFiVQalK2i 1yVSAlvCJ4QiTcYgQ/VPIsAezOB7WG/o5q400jR7AfBhDwZGWIXge1/tcLmNRl8H qAZREaC9YW84lKpmX3d6kUJMQH4j7qlnDZm2HTxtsVEcZL2jCfkfNrSHfvYkCSU4 JlHSwo/GThhwM+lrjLA92M6cI2wdTEZe32Bq/VKMDWDKBvivZPnlLLQ9WJUpHbvY jonvbWKAYOqmlLZ+wMzYrhpxWmAkF0fKq1BD4Svj6PriOprSzTtdqb1KqvKwKeGH DHGN+TvvI4Ws/LAYkJ3hG9BzvSDZJE2RB8eSrIAfhH4NtPNBDYoGk2g= -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:01 2026 by rpki-client