This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer File: zkYtttkR7mTZxEy4EI0T4DxaZNU.cer (raw, json) Hash identifier: Kkl3tOqWKxgYdUqw0+y4QJ+ELxgQSEg0eJNtAsm1Eac= Subject key identifier: CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B10 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:33:04 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328479 IP: 102.69.232.0/22 IP: 2c0f:ed78::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15120 (0x3b10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:33:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3679532AF, serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:3e:ad:e1:b0:72:6a:30:56:f3:3a:55:d2: b0:71:ef:1c:09:37:9f:39:6e:84:e9:81:15:5b:a9: 14:31:69:1c:03:e5:71:0c:52:9d:e4:62:ff:05:31: ca:d6:83:ef:19:af:cb:df:ec:9d:7e:9c:80:16:67: e0:96:ee:ad:68:11:eb:89:70:68:a5:3f:de:e9:fb: 29:a6:e9:0c:58:67:70:05:87:3b:d3:db:3f:dc:24: ad:ba:ee:b2:41:eb:94:3b:4f:5a:e1:67:fe:0d:4d: fe:a9:57:2d:51:cc:2e:1d:ab:df:76:42:a2:5e:7a: 3f:f7:dc:00:84:c6:86:cd:23:76:1c:4d:7d:41:ba: 2b:5e:a8:4a:85:23:67:71:a2:f7:e0:15:a3:df:df: de:1a:bb:ca:89:f6:6c:a7:54:0a:71:25:ab:52:a7: bf:ed:da:77:5d:ca:9f:13:0f:4e:f6:81:56:59:3b: 57:2c:2e:21:1f:b9:22:7b:c4:1e:fb:2b:ad:be:bb: 2d:c2:34:91:fe:5f:44:2e:2d:14:6a:f8:2b:ab:a6: f0:c0:3a:55:c2:d4:f0:65:63:c1:02:48:6d:d4:82: 64:57:07:5b:b7:95:aa:9c:b7:14:ad:e8:bf:2e:9f: 03:63:52:86:f2:df:7d:74:67:fe:7e:14:0e:77:2a: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328479 sbgp-ipAddrBlock: critical IPv4: 102.69.232.0/22 IPv6: 2c0f:ed78::/32 Signature Algorithm: sha256WithRSAEncryption 66:70:c6:39:01:a5:e8:d3:fd:58:37:11:9f:ee:c2:83:97:b2: 64:ea:89:20:8d:7e:b9:1c:e2:05:1a:22:e5:39:a3:78:8a:89: 9a:54:64:a8:35:06:6c:7a:84:67:e3:e9:1c:20:6e:02:6b:68: d1:70:30:7f:95:11:f2:9f:a7:4d:6c:74:58:af:aa:f6:68:38: 7e:a3:b7:96:94:72:d1:f2:19:91:7a:7a:c1:16:38:1c:b8:d2: 4f:58:db:a5:d0:79:fc:10:c6:4e:e4:e1:07:3b:f5:d3:d8:b0: 20:36:03:5e:a6:5b:62:97:d6:39:94:eb:20:53:23:67:8c:53: 26:14:29:de:c3:97:5f:f7:98:4d:da:42:d4:5e:a2:8f:a4:92: a3:66:39:29:88:d9:5c:af:55:f3:30:56:80:9c:f4:83:d0:66: 99:fa:55:fb:bb:53:b3:e1:58:a3:8e:91:9d:87:5b:f6:7a:12: 36:64:0b:e2:2f:31:76:f2:d3:88:c5:0d:99:68:b8:8c:0c:e5: 89:eb:df:0a:e4:0e:30:4b:ec:6e:b3:60:1d:dc:cb:9a:89:c3: 13:cb:70:4f:62:11:b6:6b:bf:76:5c:df:ee:2c:4e:d4:92:a1: 71:62:cb:a2:13:4e:32:2e:b3:78:92:3e:c1:37:c2:7a:32:c9: 79:a2:77:92 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOxAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjMzMDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjc5NTMyQUYxMTAvBgNVBAUTKENFNDYyREI2RDkxMUVFNjREOUM0NENC ODEwOEQxM0UwM0M1QTY0RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaHz6t4bByajBW8zpV0rBx7xwJN585boTpgRVbqRQxaRwD5XEMUp3kYv8FMcrW g+8Zr8vf7J1+nIAWZ+CW7q1oEeuJcGilP97p+ymm6QxYZ3AFhzvT2z/cJK267rJB 65Q7T1rhZ/4NTf6pVy1RzC4dq992QqJeej/33ACExobNI3YcTX1BuiteqEqFI2dx ovfgFaPf394au8qJ9mynVApxJatSp7/t2nddyp8TD072gVZZO1csLiEfuSJ7xB77 K62+uy3CNJH+X0QuLRRq+CurpvDAOlXC1PBlY8ECSG3UgmRXB1u3laqctxSt6L8u nwNjUoby3310Z/5+FA53KnAFAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUzkYtttkR 7mTZxEy4EI0T4DxaZNUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3OTUzMi83REQ0NTYwNEMzOEUx MUYwOEJGNkIzQzdEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Nzk1MzIvN0RENDU2MDRDMzhFMTFGMDhCRjZCM0M3REFFNEVDOUMvemtZdHR0 a1I3bVRaeEV5NEVJMFQ0RHhhWk5VLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAx8wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmRegwDQQCAAIwBwMF ACwP7XgwDQYJKoZIhvcNAQELBQADggEBAGZwxjkBpejT/Vg3EZ/uwoOXsmTqiSCN frkc4gUaIuU5o3iKiZpUZKg1Bmx6hGfj6RwgbgJraNFwMH+VEfKfp01sdFivqvZo OH6jt5aUctHyGZF6esEWOBy40k9Y26XQefwQxk7k4Qc79dPYsCA2A16mW2KX1jmU 6yBTI2eMUyYUKd7Dl1/3mE3aQtReoo+kkqNmOSmI2VyvVfMwVoCc9IPQZpn6Vfu7 U7PhWKOOkZ2HW/Z6EjZkC+IvMXby04jFDZlouIwM5Ynr3wrkDjBL7G6zYB3cy5qJ wxPLcE9iEbZrv3Zc3+4sTtSSoXFiy6ITTjIus3iSPsE3wnoyyXmid5I= -----END CERTIFICATE-----Generated at Sun Jan 25 07:29:30 2026 by rpki-client