This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer File: zkYtttkR7mTZxEy4EI0T4DxaZNU.cer (raw, json) Hash identifier: 5Pnb8eGId5bQ87N/GMQpX1f42mabAEYPSuvlHjrP0NU= Subject key identifier: CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36DB Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Mon 17 Nov 2025 08:22:09 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 328479 IP: 102.69.232.0/22 IP: 2c0f:ed78::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14043 (0x36db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 17 08:22:09 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F3679532AF, serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:3e:ad:e1:b0:72:6a:30:56:f3:3a:55:d2: b0:71:ef:1c:09:37:9f:39:6e:84:e9:81:15:5b:a9: 14:31:69:1c:03:e5:71:0c:52:9d:e4:62:ff:05:31: ca:d6:83:ef:19:af:cb:df:ec:9d:7e:9c:80:16:67: e0:96:ee:ad:68:11:eb:89:70:68:a5:3f:de:e9:fb: 29:a6:e9:0c:58:67:70:05:87:3b:d3:db:3f:dc:24: ad:ba:ee:b2:41:eb:94:3b:4f:5a:e1:67:fe:0d:4d: fe:a9:57:2d:51:cc:2e:1d:ab:df:76:42:a2:5e:7a: 3f:f7:dc:00:84:c6:86:cd:23:76:1c:4d:7d:41:ba: 2b:5e:a8:4a:85:23:67:71:a2:f7:e0:15:a3:df:df: de:1a:bb:ca:89:f6:6c:a7:54:0a:71:25:ab:52:a7: bf:ed:da:77:5d:ca:9f:13:0f:4e:f6:81:56:59:3b: 57:2c:2e:21:1f:b9:22:7b:c4:1e:fb:2b:ad:be:bb: 2d:c2:34:91:fe:5f:44:2e:2d:14:6a:f8:2b:ab:a6: f0:c0:3a:55:c2:d4:f0:65:63:c1:02:48:6d:d4:82: 64:57:07:5b:b7:95:aa:9c:b7:14:ad:e8:bf:2e:9f: 03:63:52:86:f2:df:7d:74:67:fe:7e:14:0e:77:2a: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328479 sbgp-ipAddrBlock: critical IPv4: 102.69.232.0/22 IPv6: 2c0f:ed78::/32 Signature Algorithm: sha256WithRSAEncryption 9f:67:06:24:3c:21:3a:88:00:81:56:05:24:e8:ce:e7:3a:15: ca:37:55:7d:44:cb:3c:c9:32:95:08:00:7d:21:f6:30:02:20: 53:2c:d6:e8:f0:96:69:42:55:79:3b:76:89:bd:83:64:92:8c: 96:1b:97:7a:af:2d:9b:d8:86:ad:93:07:cd:40:b6:9c:ba:8c: fb:61:74:07:ca:dc:92:41:87:1c:07:35:a8:ca:61:fc:d6:b6: 5b:4a:78:4f:52:a4:2f:18:12:15:9a:ed:0f:03:ef:94:00:3d: 6d:e9:21:bf:66:15:a0:18:f4:b5:e1:2a:64:ac:f3:d7:33:bd: 52:26:bf:4a:ca:02:31:65:85:93:02:98:92:e1:58:27:28:36: e8:7b:c4:ac:b8:91:74:c5:1b:61:f1:77:d1:30:8c:67:9d:8c: d2:b5:e4:77:24:cb:d5:b5:83:76:9e:66:89:4c:8c:0d:38:b9: 6b:f0:db:a8:cd:9d:f0:1d:8c:04:e5:0a:bb:11:8a:0e:2d:15: 75:09:82:f5:43:50:9c:b2:f7:73:40:2d:01:e0:94:b1:18:0e: b3:20:aa:bc:01:76:5b:56:73:48:31:5f:3b:bc:ab:02:0a:70: aa:1b:1f:b8:2e:e8:2b:75:8a:ad:07:97:fd:61:7a:02:ea:0f: a1:88:cc:f9 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICNtswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMTcwODIyMDlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjc5NTMyQUYxMTAvBgNVBAUTKENFNDYyREI2RDkxMUVFNjREOUM0NENC ODEwOEQxM0UwM0M1QTY0RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaHz6t4bByajBW8zpV0rBx7xwJN585boTpgRVbqRQxaRwD5XEMUp3kYv8FMcrW g+8Zr8vf7J1+nIAWZ+CW7q1oEeuJcGilP97p+ymm6QxYZ3AFhzvT2z/cJK267rJB 65Q7T1rhZ/4NTf6pVy1RzC4dq992QqJeej/33ACExobNI3YcTX1BuiteqEqFI2dx ovfgFaPf394au8qJ9mynVApxJatSp7/t2nddyp8TD072gVZZO1csLiEfuSJ7xB77 K62+uy3CNJH+X0QuLRRq+CurpvDAOlXC1PBlY8ECSG3UgmRXB1u3laqctxSt6L8u nwNjUoby3310Z/5+FA53KnAFAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUzkYtttkR 7mTZxEy4EI0T4DxaZNUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3OTUzMi83REQ0NTYwNEMzOEUx MUYwOEJGNkIzQzdEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Nzk1MzIvN0RENDU2MDRDMzhFMTFGMDhCRjZCM0M3REFFNEVDOUMvemtZdHR0 a1I3bVRaeEV5NEVJMFQ0RHhhWk5VLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAx8wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmRegwDQQCAAIwBwMF ACwP7XgwDQYJKoZIhvcNAQELBQADggEBAJ9nBiQ8ITqIAIFWBSTozuc6Fco3VX1E yzzJMpUIAH0h9jACIFMs1ujwlmlCVXk7dom9g2SSjJYbl3qvLZvYhq2TB81Atpy6 jPthdAfK3JJBhxwHNajKYfzWtltKeE9SpC8YEhWa7Q8D75QAPW3pIb9mFaAY9LXh KmSs89czvVImv0rKAjFlhZMCmJLhWCcoNuh7xKy4kXTFG2Hxd9EwjGedjNK15Hck y9W1g3aeZolMjA04uWvw26jNnfAdjATlCrsRig4tFXUJgvVDUJyy93NALQHglLEY DrMgqrwBdltWc0gxXzu8qwIKcKobH7gu6Ct1iq0Hl/1hegLqD6GIzPk= -----END CERTIFICATE-----Generated at Mon Dec 8 16:18:31 2025 by rpki-client