This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer File: 0L5n0EWzPwWlhxUQOZ5wnJj2130.cer (raw, json) Hash identifier: WNqUJcrVnSeyI3SOglCsdWQXvJHxFPWNWrsgQiE02nE= Subject key identifier: D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BB3 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:56:19 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328337 IP: 102.134.64.0/21 IP: 2c0f:ef40::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 05 Jan 2026 00:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15283 (0x3bb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:56:19 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B70EFAF, serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:d9:47:4b:2d:a2:2d:79:30:b1:f3:b4:bb: 61:4d:c8:76:4a:ab:28:01:57:7b:95:09:13:1a:7d: c4:3b:1f:da:28:32:48:b0:fb:a4:6d:dc:51:30:4e: 8a:06:1a:d1:b2:e1:75:d5:26:b3:ce:ed:f7:ad:91: 26:78:b4:06:4f:e4:56:62:ae:b8:97:63:0b:8f:c4: 17:91:78:dc:b6:c8:5c:7b:fb:ea:bb:32:34:16:66: e4:2e:3e:0d:6d:d8:35:42:f7:71:73:89:9f:39:0e: 2b:89:06:ed:54:3c:51:56:50:8d:9b:91:4d:e2:23: 0f:58:28:47:6d:e3:a2:9b:c1:34:d4:8d:a3:0f:c7: 6b:8b:27:36:9f:64:2e:03:f4:2f:b2:21:6e:f2:db: dd:d9:83:72:ba:4c:f5:c5:79:4e:f3:34:f0:62:34: 6e:a0:d6:2a:29:09:88:f0:c8:09:37:69:89:cc:52: 8a:82:b2:bc:64:19:b8:97:d1:ff:78:55:6e:12:1a: 36:0f:42:95:a3:3c:56:ca:17:09:ea:8f:86:74:00: 34:01:b5:87:62:a4:f8:47:91:1a:26:74:0d:81:a4: 81:5f:8f:15:e9:aa:35:9a:d5:ea:5f:80:cb:3f:79: ed:99:03:33:33:d4:2b:90:dd:44:a0:ab:eb:0b:16: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328337 sbgp-ipAddrBlock: critical IPv4: 102.134.64.0/21 IPv6: 2c0f:ef40::/32 Signature Algorithm: sha256WithRSAEncryption 33:7f:24:23:9f:ac:50:dc:48:2e:ce:4d:b0:1c:d2:31:b5:5d: de:6f:3c:d2:93:15:19:ec:98:04:be:4b:7f:4b:0f:a7:83:c9: ba:44:05:a2:84:8e:7b:97:55:f9:71:3a:c8:37:cf:f6:18:4a: d5:0b:a7:ab:0f:88:cf:ac:9e:ec:b1:8a:7f:0f:8a:5f:ea:5e: d2:1e:a3:08:99:93:75:49:4a:c6:2d:d9:59:14:99:80:7e:aa: 31:cc:f2:36:dc:7d:7a:5f:2f:3d:c0:1e:c2:48:7e:02:70:35: 0a:45:7e:01:6f:b4:f5:74:ad:f0:88:4b:7a:8a:0f:f0:a7:76: c0:91:47:47:ca:1e:ff:10:0d:ef:be:1c:dd:8c:08:7d:aa:ce: 18:64:d5:a5:a1:83:82:15:04:e6:d4:a6:74:5d:e0:d5:88:62: f1:28:21:c3:6d:bb:c1:92:38:a7:3f:dd:72:e0:0b:d5:a6:d9: bc:d1:63:9e:04:0d:6b:b2:94:5e:73:2f:69:c8:5c:c2:a2:71: 49:34:73:17:71:8b:fa:af:e9:0e:86:71:cf:bd:ba:5b:52:1b: de:67:74:da:5d:68:39:51:36:3a:4c:ec:24:e1:40:b4:5e:53: b6:64:95:28:10:55:c2:da:26:83:a9:d7:f2:cc:5f:37:48:01: 03:4b:59:d7 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICO7MwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjU2MTlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkI3MEVGQUYxMTAvBgNVBAUTKEQwQkU2N0QwNDVCMzNGMDVBNTg3MTUx MDM5OUU3MDlDOThGNkQ3N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiOtlHSy2iLXkwsfO0u2FNyHZKqygBV3uVCRMafcQ7H9ooMkiw+6Rt3FEwTooG GtGy4XXVJrPO7fetkSZ4tAZP5FZirriXYwuPxBeReNy2yFx7++q7MjQWZuQuPg1t 2DVC93FziZ85DiuJBu1UPFFWUI2bkU3iIw9YKEdt46KbwTTUjaMPx2uLJzafZC4D 9C+yIW7y293Zg3K6TPXFeU7zNPBiNG6g1iopCYjwyAk3aYnMUoqCsrxkGbiX0f94 VW4SGjYPQpWjPFbKFwnqj4Z0ADQBtYdipPhHkRomdA2BpIFfjxXpqjWa1epfgMs/ ee2ZAzMz1CuQ3USgq+sLFj59AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU0L5n0EWz PwWlhxUQOZ5wnJj2130wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCNzBFRi84Rjc5OEIzMjVBNjYx MUVBQkIyMTZGNEJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QjcwRUYvOEY3OThCMzI1QTY2MTFFQUJCMjE2RjRCRjhBRUEyMjgvMEw1bjBF V3pQd1dsaHhVUU9aNXduSmoyMTMwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFApEwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBANmhkAwDQQCAAIwBwMF ACwP70AwDQYJKoZIhvcNAQELBQADggEBADN/JCOfrFDcSC7OTbAc0jG1Xd5vPNKT FRnsmAS+S39LD6eDybpEBaKEjnuXVflxOsg3z/YYStULp6sPiM+snuyxin8Pil/q XtIeowiZk3VJSsYt2VkUmYB+qjHM8jbcfXpfLz3AHsJIfgJwNQpFfgFvtPV0rfCI S3qKD/CndsCRR0fKHv8QDe++HN2MCH2qzhhk1aWhg4IVBObUpnRd4NWIYvEoIcNt u8GSOKc/3XLgC9Wm2bzRY54EDWuylF5zL2nIXMKicUk0cxdxi/qv6Q6Gcc+9ultS G95ndNpdaDlRNjpM7CThQLReU7ZklSgQVcLaJoOp1/LMXzdIAQNLWdc= -----END CERTIFICATE-----Generated at Sat Jan 3 02:45:23 2026 by rpki-client