This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1UBLBG1uzW10FBvTrkknuMYH7mI.cer File: 1UBLBG1uzW10FBvTrkknuMYH7mI.cer (raw, json) Hash identifier: +3vaMxD+PDXPG+uZp5t4OVRqEFQvknAx62h2s8fbolQ= Subject key identifier: D5:40:4B:04:6D:6E:CD:6D:74:14:1B:D3:AE:49:27:B8:C6:07:EE:62 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CF9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:44:40 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328548 IP: 102.23.192.0/20 IP: 102.213.116.0/22 IP: 2c0f:380::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15609 (0x3cf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:44:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36AD16CAF, serialNumber=D5404B046D6ECD6D74141BD3AE4927B8C607EE62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:64:b3:b1:8b:3b:43:d9:bb:42:c6:5a:ee: 46:cf:05:89:78:cb:4d:17:6a:d4:f6:d2:f3:ff:a6: 21:b8:24:69:96:ef:75:50:c3:74:4a:dc:02:ef:5b: 5f:60:76:79:c4:b4:23:0f:ba:d5:4e:2e:90:2f:cd: db:4b:6c:fd:96:fe:49:93:06:3e:58:83:01:bc:5f: 26:ad:e5:27:77:f3:4d:7e:95:51:07:94:c2:b2:c3: 17:d1:d9:0a:f7:76:16:cf:d5:8f:5e:ff:59:4d:4d: 5d:d7:14:05:08:4b:50:d8:d2:4b:f9:91:bc:68:58: 48:53:5d:c9:17:c6:44:a2:db:98:ec:22:fe:ba:28: a3:22:d7:5e:56:c4:0a:c6:68:4a:e3:ed:5e:0b:60: 25:8c:c1:7b:f0:8f:de:d1:e8:d9:d2:8e:15:4a:45: 62:c2:b8:4b:7c:5d:c8:18:e9:87:9c:cf:a9:81:c5: 54:6c:44:ba:2d:7a:00:36:15:40:34:ff:a5:03:40: af:58:ba:47:9e:f1:11:81:b8:db:5e:64:fa:b5:6a: ba:66:ea:90:fe:00:b8:a4:0a:51:e9:98:77:62:4f: 41:81:1f:6d:31:66:61:01:36:f4:e2:3c:1f:be:ff: e6:30:3f:fd:c6:a0:d0:b3:96:2b:dc:1b:7a:7f:00: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:40:4B:04:6D:6E:CD:6D:74:14:1B:D3:AE:49:27:B8:C6:07:EE:62 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328548 sbgp-ipAddrBlock: critical IPv4: 102.23.192.0/20 102.213.116.0/22 IPv6: 2c0f:380::/32 Signature Algorithm: sha256WithRSAEncryption 23:54:29:a7:b1:b0:cc:f0:4b:87:10:cd:e7:0b:e9:b8:cd:93: 8a:b0:26:59:37:f5:23:95:04:9b:ba:1e:b9:0b:31:8c:a0:c2: ac:ad:b4:2e:e8:76:05:85:b1:65:47:4b:53:c1:e1:1b:aa:c6: 77:51:de:88:84:4e:d3:a7:4e:e0:e5:72:68:e6:db:4c:34:0a: 72:56:3f:41:8c:f8:19:2b:ec:43:f7:e1:60:54:ba:3b:b2:14: c7:d9:c8:35:e3:a5:2e:dc:4c:b2:05:7d:2f:f8:e4:94:c9:83: f9:4d:9a:fb:d4:30:ec:60:a7:c2:23:18:c6:48:b3:a2:ee:16: cd:ae:42:ea:90:62:8f:48:2b:81:f2:ca:3b:45:1e:50:e6:41: 37:0d:8b:41:8d:45:88:66:8e:77:04:68:56:b7:a2:30:40:0e: 39:d1:ce:99:27:32:d4:ec:fc:b5:84:e2:6a:4b:73:1f:a5:15: 94:dc:13:25:13:6f:d9:3e:8f:86:77:e5:15:a1:83:9f:0f:b9: 43:4f:22:63:94:e5:b4:21:b6:5b:7b:16:18:19:4a:40:aa:5c: a8:23:34:0e:62:77:4a:0e:41:fa:51:ca:47:02:77:4e:6c:6e: de:1b:af:3d:ab:c2:f3:a4:d2:53:79:6d:9f:12:6a:8e:e6:4f: 50:84:5d:36 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICPPkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzQ0NDBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkFEMTZDQUYxMTAvBgNVBAUTKEQ1NDA0QjA0NkQ2RUNENkQ3NDE0MUJE M0FFNDkyN0I4QzYwN0VFNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8fWSzsYs7Q9m7QsZa7kbPBYl4y00XatT20vP/piG4JGmW73VQw3RK3ALvW19g dnnEtCMPutVOLpAvzdtLbP2W/kmTBj5YgwG8Xyat5Sd3801+lVEHlMKywxfR2Qr3 dhbP1Y9e/1lNTV3XFAUIS1DY0kv5kbxoWEhTXckXxkSi25jsIv66KKMi115WxArG aErj7V4LYCWMwXvwj97R6NnSjhVKRWLCuEt8XcgY6Yecz6mBxVRsRLotegA2FUA0 /6UDQK9Yukee8RGBuNteZPq1arpm6pD+ALikClHpmHdiT0GBH20xZmEBNvTiPB++ /+YwP/3GoNCzlivcG3p/ANs3AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU1UBLBG1u zW10FBvTrkknuMYH7mIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBRDE2Qy81NDhCNUM4NkUyRjAx MUVGODdDMzVDODA3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QUQxNkMvNTQ4QjVDODZFMkYwMTFFRjg3QzM1QzgwNzYyRTk1MUEvMVVCTEJH MXV6VzEwRkJ2VHJra251TVlIN21JLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA2QwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBARmF8ADBAJm1XQwDQQC AAIwBwMFACwPA4AwDQYJKoZIhvcNAQELBQADggEBACNUKaexsMzwS4cQzecL6bjN k4qwJlk39SOVBJu6HrkLMYygwqyttC7odgWFsWVHS1PB4RuqxndR3oiETtOnTuDl cmjm20w0CnJWP0GM+Bkr7EP34WBUujuyFMfZyDXjpS7cTLIFfS/45JTJg/lNmvvU MOxgp8IjGMZIs6LuFs2uQuqQYo9IK4HyyjtFHlDmQTcNi0GNRYhmjncEaFa3ojBA DjnRzpknMtTs/LWE4mpLcx+lFZTcEyUTb9k+j4Z35RWhg58PuUNPImOU5bQhtlt7 FhgZSkCqXKgjNA5id0oOQfpRykcCd05sbt4brz2rwvOk0lN5bZ8Sao7mT1CEXTY= -----END CERTIFICATE-----Generated at Thu Jan 1 14:23:06 2026 by rpki-client