This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer File: zXRmXLHPyFlppqWrpHLD6irSVc4.cer (raw, json) Hash identifier: 2mUSxxkbqQ3EKLpujjWWwHuL5UZEjZ/Vhj3Rv8SUA/s= Subject key identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C5C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:21:30 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328777 IP: 102.221.92.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15452 (0x3c5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:21:30 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F369BFA8AF, serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:0c:9b:54:e4:f1:76:65:88:97:08:c4:30: 9c:6e:7b:5f:92:cb:a6:86:67:eb:94:a8:3d:fc:f8: b8:7f:e1:50:8f:71:c2:2b:f0:81:14:65:bd:e8:01: af:66:88:36:25:4e:c7:f3:f6:1a:c5:cf:14:35:8d: b2:8e:ac:74:49:7a:29:23:69:69:8a:c5:f6:ff:f8: 5d:fe:3c:97:29:ea:4f:d8:ce:1c:e3:11:d2:45:50: 45:13:7a:be:89:1c:42:bd:22:0c:73:0d:3e:10:0e: 2a:16:10:b9:d0:0e:c2:6c:47:af:86:e5:7c:04:32: 57:38:5e:a8:49:97:06:ac:8a:52:bb:d3:19:95:6a: 76:9c:5f:a6:f1:a9:b9:4a:9d:f5:b6:ba:d1:e6:76: c6:54:12:ad:0a:26:5e:32:4f:c0:f1:39:60:8d:d9: 46:db:4c:b1:82:35:c5:b2:26:5b:ae:98:ec:ce:1c: 7d:bb:7f:a0:17:a4:fb:e1:99:fd:ad:81:7c:6b:69: 6e:1b:ff:90:aa:43:7d:e3:c4:09:66:5d:33:1b:d4: 90:ca:37:8c:f6:1e:25:f0:4f:6a:4e:b3:d2:d9:80: ce:20:5b:c0:09:8f:6f:1b:7f:fe:a3:e8:2b:45:ce: 6c:a2:d9:77:fd:8a:55:8a:15:fb:ee:fd:73:b6:d3: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328777 sbgp-ipAddrBlock: critical IPv4: 102.221.92.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:61:4b:09:1c:1d:a9:cc:e8:df:fb:7f:a0:0e:6f:44:aa:7e: 3e:03:ce:f9:9f:db:4d:58:b5:37:79:a9:78:4c:de:ca:76:d7: 8c:97:3c:b9:64:41:1d:25:f8:b2:61:4f:8e:a1:71:60:c6:7b: 46:03:51:0c:6c:d3:f9:66:94:d4:08:26:c6:48:61:34:ff:da: 2b:9e:21:71:5e:78:e8:96:6c:91:14:f4:02:07:ff:44:47:75: bb:8d:21:1a:da:41:68:9d:48:b9:09:eb:1b:37:d9:2e:37:e0: f9:38:9d:49:6b:04:d7:67:5c:ee:97:eb:6e:b2:85:aa:b7:5a: 2a:fa:d0:50:fd:cf:a9:ef:df:d4:58:1e:be:2e:a8:5e:08:53: 3d:03:d4:e7:a3:a7:69:d9:40:af:64:3c:9a:3f:88:2f:80:06: 97:17:fe:9a:c8:32:d9:e6:89:10:f1:ae:2b:05:92:aa:bb:8e: 16:98:50:94:0d:82:54:81:72:72:8b:0a:ac:af:05:ad:cb:d0: d0:75:0b:ff:9c:8a:27:3c:58:e3:32:8b:97:07:23:b5:b1:08: 18:28:2f:c0:19:fc:b1:5e:06:23:28:31:ee:54:98:41:fc:0f: 96:75:f4:a8:14:59:d8:cf:dd:07:fa:c4:69:0d:0b:39:71:4b: b2:14:82:bd -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICPFwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzIxMzBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjlCRkE4QUYxMTAvBgNVBAUTKENENzQ2NjVDQjFDRkM4NTk2OUE2QTVB QkE0NzJDM0VBMkFEMjU1Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1QwybVOTxdmWIlwjEMJxue1+Sy6aGZ+uUqD38+Lh/4VCPccIr8IEUZb3oAa9m iDYlTsfz9hrFzxQ1jbKOrHRJeikjaWmKxfb/+F3+PJcp6k/YzhzjEdJFUEUTer6J HEK9IgxzDT4QDioWELnQDsJsR6+G5XwEMlc4XqhJlwasilK70xmVanacX6bxqblK nfW2utHmdsZUEq0KJl4yT8DxOWCN2UbbTLGCNcWyJluumOzOHH27f6AXpPvhmf2t gXxraW4b/5CqQ33jxAlmXTMb1JDKN4z2HiXwT2pOs9LZgM4gW8AJj28bf/6j6CtF zmyi2Xf9ilWKFfvu/XO20985AgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUzXRmXLHP yFlppqWrpHLD6irSVc4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5QkZBOC9GQkJGRTI3RUIyMjEx MUVGOEJEQTcwNUM3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OUJGQTgvRkJCRkUyN0VCMjIxMTFFRjhCREE3MDVDNzYyRTk1MUEvelhSbVhM SFB5RmxwcHFXcnBITEQ2aXJTVmM0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBEkwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3VwwDQYJKoZIhvcN AQELBQADggEBAJ5hSwkcHanM6N/7f6AOb0Sqfj4Dzvmf201YtTd5qXhM3sp214yX PLlkQR0l+LJhT46hcWDGe0YDUQxs0/lmlNQIJsZIYTT/2iueIXFeeOiWbJEU9AIH /0RHdbuNIRraQWidSLkJ6xs32S434Pk4nUlrBNdnXO6X626yhaq3Wir60FD9z6nv 39RYHr4uqF4IUz0D1Oejp2nZQK9kPJo/iC+ABpcX/prIMtnmiRDxrisFkqq7jhaY UJQNglSBcnKLCqyvBa3L0NB1C/+ciic8WOMyi5cHI7WxCBgoL8AZ/LFeBiMoMe5U mEH8D5Z19KgUWdjP3Qf6xGkNCzlxS7IUgr0= -----END CERTIFICATE-----Generated at Sun Jan 25 04:21:00 2026 by rpki-client