This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer File: zES432VSaGhWOxfptlH5NdVgDNA.cer (raw, json) Hash identifier: eFPCbj/4MmAwK3FQ/gPBs/xBbWJYxrcrbDkUbB+yxHY= Subject key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 38F0 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:11:28 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328677 IP: 102.222.188.0/22 IP: 2c0f:5d00::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14576 (0x38f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:11:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F363FCC8AF, serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:78:d9:79:05:77:c8:55:99:44:6a:13:59:05: 70:27:35:e4:00:40:b8:f1:f9:4d:2c:89:88:45:b7: 44:c9:dd:33:de:5a:a1:67:f3:98:39:e4:9e:5f:0e: 5a:8a:a5:3a:5d:c3:da:d9:fc:16:6d:96:03:8b:00: 0e:a8:79:5d:2b:2e:07:d9:6f:ed:28:5d:f4:b5:ad: 8e:1a:fa:bf:9f:8c:47:db:a9:8a:63:04:db:9a:bf: d6:69:e0:2c:c2:b3:d8:dd:59:2c:c8:c9:93:89:2f: 1d:29:e8:c5:f1:11:08:a4:38:7f:18:17:df:0b:70: 2e:d4:c6:83:f7:ad:e1:d8:ce:a4:aa:0b:76:b4:e5: 1a:61:ce:c1:2c:c9:70:3a:0c:63:01:7e:d4:32:b9: 14:41:7a:c2:b5:97:ac:a6:a9:22:19:db:31:99:0a: 37:34:da:86:c9:11:c8:dc:53:50:5c:a6:55:3c:2e: ed:ec:e5:bc:97:c8:d8:97:9d:0b:a4:f8:15:c6:5c: 3d:c1:d3:86:f9:67:03:ba:2d:06:7e:fd:b2:c9:d4: 53:67:77:5b:ca:dc:ea:ae:12:b1:09:c2:47:ec:ff: 3c:88:a7:45:68:ef:89:a1:11:83:10:0c:b8:71:2a: 18:0e:d3:58:1f:7c:15:8a:bb:af:e6:6f:ae:e8:c5: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328677 sbgp-ipAddrBlock: critical IPv4: 102.222.188.0/22 IPv6: 2c0f:5d00::/32 Signature Algorithm: sha256WithRSAEncryption 64:ac:fe:be:5a:e8:b6:50:3f:e5:75:59:55:b7:42:0d:a0:93: 59:76:f8:93:75:b8:8f:d9:b0:10:27:ce:c2:b9:d4:24:f2:f9: 8c:9d:df:b3:b1:38:fa:12:89:14:ec:89:22:55:bd:a3:b2:3e: ee:87:b9:71:b7:5f:8c:f3:fe:19:f6:1c:55:64:95:59:10:b2: 92:e4:84:1e:3a:3a:44:02:10:c6:8d:aa:21:c0:a4:40:a1:27: 25:34:88:fa:dc:37:ba:9f:02:3c:e7:70:84:c9:43:83:2b:72: 95:da:9b:2d:21:a8:6c:11:fe:eb:15:c8:2c:d4:24:1e:06:9e: f4:90:84:f0:a6:c1:e0:5b:98:77:43:c0:bf:c8:82:88:d6:50: dc:47:c8:e6:f2:1d:8d:d2:b9:d9:7b:40:ab:2a:b5:5a:1a:b1: 60:d2:49:1b:5c:f1:e6:9d:ac:1d:7d:54:eb:fb:82:91:46:0b: 58:d3:ac:ed:2c:b2:d8:7f:ab:8d:f5:05:36:57:c0:06:5f:de: d3:77:1a:17:59:d9:e1:d9:79:e6:49:35:aa:eb:9a:a8:36:41: 18:45:4e:4e:ab:6d:64:19:11:ac:57:c6:05:1e:3b:71:d9:dc: 8f:4e:1b:a3:bd:19:8d:fe:1f:31:74:7c:6d:bf:3d:8a:44:b7: 22:e6:07:65 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOPAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTExMjhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjNGQ0M4QUYxMTAvBgNVBAUTKENDNDRCOERGNjU1MjY4Njg1NjNCMTdF OUI2NTFGOTM1RDU2MDBDRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbeNl5BXfIVZlEahNZBXAnNeQAQLjx+U0siYhFt0TJ3TPeWqFn85g55J5fDlqK pTpdw9rZ/BZtlgOLAA6oeV0rLgfZb+0oXfS1rY4a+r+fjEfbqYpjBNuav9Zp4CzC s9jdWSzIyZOJLx0p6MXxEQikOH8YF98LcC7UxoP3reHYzqSqC3a05RphzsEsyXA6 DGMBftQyuRRBesK1l6ymqSIZ2zGZCjc02obJEcjcU1BcplU8Lu3s5byXyNiXnQuk +BXGXD3B04b5ZwO6LQZ+/bLJ1FNnd1vK3OquErEJwkfs/zyIp0Vo74mhEYMQDLhx KhgO01gffBWKu6/mb67oxWE3AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUzES432VS aGhWOxfptlH5NdVgDNAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzRkNDOC9DMkUxMkE4QUNDRjIx MUVBOEI3QzQxMzNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2M0ZDQzgvQzJFMTJBOEFDQ0YyMTFFQThCN0M0MTMzRjhBRUEyMjgvekVTNDMy VlNhR2hXT3hmcHRsSDVOZFZnRE5BLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA+UwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3rwwDQQCAAIwBwMF ACwPXQAwDQYJKoZIhvcNAQELBQADggEBAGSs/r5a6LZQP+V1WVW3Qg2gk1l2+JN1 uI/ZsBAnzsK51CTy+Yyd37OxOPoSiRTsiSJVvaOyPu6HuXG3X4zz/hn2HFVklVkQ spLkhB46OkQCEMaNqiHApEChJyU0iPrcN7qfAjzncITJQ4MrcpXamy0hqGwR/usV yCzUJB4GnvSQhPCmweBbmHdDwL/IgojWUNxHyObyHY3Sudl7QKsqtVoasWDSSRtc 8eadrB19VOv7gpFGC1jTrO0ssth/q431BTZXwAZf3tN3GhdZ2eHZeeZJNarrmqg2 QRhFTk6rbWQZEaxXxgUeO3HZ3I9OG6O9GY3+HzF0fG2/PYpEtyLmB2U= -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:52 2026 by rpki-client