This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer File: 1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer (raw, json) Hash identifier: 4bq8EJdvgXcHEhbe1VpWkgUJ8VNb8Hdu5Q76zCxwHM8= Subject key identifier: D5:B8:FA:3A:AD:40:69:62:EF:AA:CA:DF:00:02:A1:CC:EF:84:B6:10 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 38E3 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:09:40 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327909 IP: 154.65.88.0/21 IP: 154.73.120.0/22 IP: 2c0f:f4e0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14563 (0x38e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:09:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F363E214AF, serialNumber=D5B8FA3AAD406962EFAACADF0002A1CCEF84B610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:e6:a7:84:c6:a2:70:4c:3d:78:a6:47:b7: b7:3e:38:ea:c7:ca:23:2a:2a:32:13:c1:3e:f1:58: 42:19:d5:03:aa:88:5e:d0:4f:2a:1c:8f:0c:a4:0f: 86:3d:e7:14:b6:8e:df:a9:70:34:5d:47:d2:6b:c6: c0:5a:88:75:57:15:9e:26:66:d9:9d:7a:f9:28:43: ac:85:13:da:9a:39:69:bd:4c:bc:38:3f:cb:08:42: 81:6e:4a:f4:dd:4e:3d:ea:f6:f3:f8:95:c8:7b:a4: f4:53:fb:d4:17:4c:bf:7f:40:bd:4d:be:02:84:3e: 89:99:f7:81:84:98:db:3e:1c:f5:24:bb:ce:1e:e0: d4:20:d1:5d:3e:14:d3:84:47:b7:dc:6e:18:3d:f7: 0a:91:04:0d:76:62:ba:6c:05:e5:52:a6:30:e6:09: 6a:78:f3:b9:0a:54:55:21:32:6b:54:af:06:b0:42: 9c:95:8a:3b:b5:f8:1d:31:f3:03:95:a2:cc:8e:35: 7d:23:25:93:29:a0:4f:fd:6a:16:cf:5c:89:04:bf: 88:ee:9c:d9:b3:2d:97:b8:f1:ff:19:72:fb:e8:8b: 54:53:39:a2:95:e9:71:b2:27:2f:24:1f:d3:f8:4b: a0:9c:74:7e:21:bf:c6:2c:4e:a7:21:10:9b:d2:8d: c3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:FA:3A:AD:40:69:62:EF:AA:CA:DF:00:02:A1:CC:EF:84:B6:10 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327909 sbgp-ipAddrBlock: critical IPv4: 154.65.88.0/21 154.73.120.0/22 IPv6: 2c0f:f4e0::/32 Signature Algorithm: sha256WithRSAEncryption 70:71:44:67:ff:a7:82:62:a7:9c:a4:e0:21:5b:86:64:b6:61: 45:18:c2:e4:ce:9f:3c:34:0e:e1:65:9d:b3:61:c4:0b:e9:12: 79:ff:d3:fe:4d:2c:cb:b4:2d:af:51:b6:a6:b0:e3:b6:af:16: 9e:cb:c9:b1:72:00:38:63:23:f5:d5:b3:61:50:9e:1a:17:20: 5d:61:d6:ca:bd:b4:a9:eb:6d:f1:02:29:f1:0f:99:25:93:94: c9:8b:c6:96:bf:c6:af:ca:5a:1e:69:38:2e:a9:9b:1b:3f:65: a2:0c:35:f4:53:3f:67:a5:15:7b:17:91:0b:be:af:66:74:a4: 4e:65:e4:a9:d4:7e:49:7f:a0:00:6b:d4:85:59:17:e0:d4:02: 7a:1d:12:fd:31:b2:7f:34:15:ba:25:60:61:fc:18:13:d0:e6: 51:7b:a2:44:c7:7c:d2:da:3c:78:8a:89:9e:0f:98:5b:28:99: 6e:48:19:56:3a:e1:06:8e:16:4c:54:78:2b:db:97:be:7c:d9: c2:3c:99:dd:4d:a4:1c:b5:25:32:cd:84:ca:20:f7:57:7d:f4: 8a:23:f1:82:7f:5c:cb:73:f9:0a:3e:28:89:bd:50:52:21:d2: 78:7f:42:70:34:40:99:a1:d5:bc:35:45:a2:18:30:68:e0:b9: af:b1:30:28 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOOMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTA5NDBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjNFMjE0QUYxMTAvBgNVBAUTKEQ1QjhGQTNBQUQ0MDY5NjJFRkFBQ0FE RjAwMDJBMUNDRUY4NEI2MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnLuanhMaicEw9eKZHt7c+OOrHyiMqKjITwT7xWEIZ1QOqiF7QTyocjwykD4Y9 5xS2jt+pcDRdR9JrxsBaiHVXFZ4mZtmdevkoQ6yFE9qaOWm9TLw4P8sIQoFuSvTd Tj3q9vP4lch7pPRT+9QXTL9/QL1NvgKEPomZ94GEmNs+HPUku84e4NQg0V0+FNOE R7fcbhg99wqRBA12YrpsBeVSpjDmCWp487kKVFUhMmtUrwawQpyViju1+B0x8wOV osyONX0jJZMpoE/9ahbPXIkEv4junNmzLZe48f8Zcvvoi1RTOaKV6XGyJy8kH9P4 S6CcdH4hv8YsTqchEJvSjcNLAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU1bj6Oq1A aWLvqsrfAAKhzO+EthAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzRTIxNC84NzFCNEREMDdENEEx MUU5QUEwOURGNkZGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2M0UyMTQvODcxQjRERDA3RDRBMTFFOUFBMDlERjZGRjhBRUEyMjgvMWJqNk9x MUFhV0x2cXNyZkFBS2h6Ty1FdGhBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAOUwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAOaQVgDBAKaSXgwDQQC AAIwBwMFACwP9OAwDQYJKoZIhvcNAQELBQADggEBAHBxRGf/p4Jip5yk4CFbhmS2 YUUYwuTOnzw0DuFlnbNhxAvpEnn/0/5NLMu0La9Rtqaw47avFp7LybFyADhjI/XV s2FQnhoXIF1h1sq9tKnrbfECKfEPmSWTlMmLxpa/xq/KWh5pOC6pmxs/ZaIMNfRT P2elFXsXkQu+r2Z0pE5l5KnUfkl/oABr1IVZF+DUAnodEv0xsn80FbolYGH8GBPQ 5lF7okTHfNLaPHiKiZ4PmFsomW5IGVY64QaOFkxUeCvbl7582cI8md1NpBy1JTLN hMog91d99Ioj8YJ/XMtz+Qo+KIm9UFIh0nh/QnA0QJmh1bw1RaIYMGjgua+xMCg= -----END CERTIFICATE-----Generated at Fri Jan 2 08:16:30 2026 by rpki-client