This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer File: -_THz17IYtQtyBCgQwAhG6K3xQg.cer (raw, json) Hash identifier: uHGxdzjCCJtW4fI0Cpb0hxMWsALEK8vVeySoC03XMtw= Subject key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39C7 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:44:57 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328910 IP: 102.209.40.0/22 IP: 2c0f:2100::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14791 (0x39c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:44:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:b0:51:19:a8:e1:8d:93:24:20:a6:aa:80: d4:40:32:1d:a3:87:a8:6c:b7:bf:1d:b6:8c:ed:65: 2e:43:7f:19:7a:c7:43:5c:8e:10:5c:2e:b3:ea:f5: f7:b3:cc:89:56:b0:40:46:f9:25:4d:ec:1a:9e:ba: 1d:ef:18:e9:4b:3b:8f:f4:31:f3:59:c0:41:8a:7f: 7e:66:a7:33:23:fd:69:fd:10:4f:da:d2:8a:74:bf: 02:df:ab:6a:7a:5f:cb:f7:d5:e8:4b:fd:ff:f2:66: 2a:f8:8f:a8:a4:e6:0f:38:bc:6b:e7:65:e1:f7:a8: ca:24:a1:72:bf:9a:b4:86:65:0a:a8:5e:61:d4:87: 2f:f2:2e:55:d7:6f:d6:d0:e7:70:e7:dd:ab:41:d2: 61:d2:68:18:ce:71:38:e9:79:e7:0a:e6:b3:47:a7: ad:bc:50:4b:fb:59:9e:d7:83:6a:2a:eb:28:51:51: 9c:96:7e:d4:e5:f0:85:43:13:0e:83:9f:85:82:33: d8:0f:74:37:0a:ea:c4:ea:33:76:17:42:45:56:9a: cc:c6:b9:b7:97:6b:57:8b:ee:27:00:2a:d6:69:29: 78:f6:f8:3e:39:47:b5:95:45:f9:13:23:fe:5f:19: 55:9d:2d:ce:d4:fb:36:ec:99:16:0d:d6:c5:3e:e1: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328910 sbgp-ipAddrBlock: critical IPv4: 102.209.40.0/22 IPv6: 2c0f:2100::/32 Signature Algorithm: sha256WithRSAEncryption b0:17:12:be:2b:5d:38:45:1c:49:27:05:96:7b:2d:53:03:ce: b7:f4:a2:28:e8:60:73:ad:61:67:57:62:5d:50:ac:52:5c:d8: b6:94:03:15:35:ed:7c:72:d9:de:09:15:5c:52:83:7e:ef:2d: 85:74:b1:e6:7d:26:bd:0b:80:2a:22:63:56:3b:f7:71:a0:4d: 24:a2:91:48:20:65:ed:2c:b9:cc:bd:97:91:4e:64:b4:04:5d: 9b:86:6b:c8:4d:fe:8a:c8:ab:7c:27:b3:c9:9d:2b:7a:1a:7b: f9:44:86:6a:ea:ec:e1:9b:00:68:70:60:53:71:f9:6c:42:8b: 27:44:a5:01:c7:9b:ff:dd:98:ba:b6:f1:73:3a:6e:02:91:8e: db:a3:b8:fa:75:f1:64:b1:85:89:20:f1:18:a4:01:4b:3b:72: 84:5c:ed:10:95:4f:a5:ea:73:ca:f9:24:b3:51:74:eb:be:02: 04:9c:34:8b:05:4c:9b:f1:2b:ac:c8:55:f6:7e:21:72:7e:52: 7d:0f:e2:b9:75:d6:7b:2f:b6:47:b1:4e:a8:ff:a6:7e:8f:dc: 99:1a:0b:03:a6:f3:30:f5:7b:8f:46:ac:30:8d:7c:e5:fa:ff: 42:93:2d:3e:06:cf:c0:3a:63:a6:7e:e4:b3:4a:38:bb:56:a1: db:81:34:76 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOccwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTQ0NTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjU4NTgzQUYxMTAvBgNVBAUTKEZCRjRDN0NGNUVDODYyRDQyREM4MTBB MDQzMDAyMTFCQTJCN0M1MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxL7BRGajhjZMkIKaqgNRAMh2jh6hst78dtoztZS5Dfxl6x0NcjhBcLrPq9fez zIlWsEBG+SVN7Bqeuh3vGOlLO4/0MfNZwEGKf35mpzMj/Wn9EE/a0op0vwLfq2p6 X8v31ehL/f/yZir4j6ik5g84vGvnZeH3qMokoXK/mrSGZQqoXmHUhy/yLlXXb9bQ 53Dn3atB0mHSaBjOcTjpeecK5rNHp628UEv7WZ7Xg2oq6yhRUZyWftTl8IVDEw6D n4WCM9gPdDcK6sTqM3YXQkVWmszGubeXa1eL7icAKtZpKXj2+D45R7WVRfkTI/5f GVWdLc7U+zbsmRYN1sU+4XHVAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU+/THz17I YtQtyBCgQwAhG6K3xQgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1ODU4My82RTU1ODk0MDRFNEMx MUVGQjNGMDY3QUY3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NTg1ODMvNkU1NTg5NDA0RTRDMTFFRkIzRjA2N0FGNzYyRTk1MUEvLV9USHox N0lZdFF0eUJDZ1F3QWhHNkszeFFnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBM4wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0SgwDQQCAAIwBwMF ACwPIQAwDQYJKoZIhvcNAQELBQADggEBALAXEr4rXThFHEknBZZ7LVMDzrf0oijo YHOtYWdXYl1QrFJc2LaUAxU17Xxy2d4JFVxSg37vLYV0seZ9Jr0LgCoiY1Y793Gg TSSikUggZe0sucy9l5FOZLQEXZuGa8hN/orIq3wns8mdK3oae/lEhmrq7OGbAGhw YFNx+WxCiydEpQHHm//dmLq28XM6bgKRjtujuPp18WSxhYkg8RikAUs7coRc7RCV T6Xqc8r5JLNRdOu+AgScNIsFTJvxK6zIVfZ+IXJ+Un0P4rl11nsvtkexTqj/pn6P 3JkaCwOm8zD1e49GrDCNfOX6/0KTLT4Gz8A6Y6Z+5LNKOLtWoduBNHY= -----END CERTIFICATE-----Generated at Fri Jan 2 10:10:36 2026 by rpki-client