This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer File: 3XSZqMjBKrZ-FetJKAimku1LWfQ.cer (raw, json) Hash identifier: Im3Bube6A/onzzP+QvrBMU0Bt86bocgjjFe7tnlyxSk= Subject key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A02 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:54:44 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328732 IP: 102.209.232.0/22 IP: 102.216.220.0/22 IP: 102.221.216.0/22 IP: 2c0f:e9a8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14850 (0x3a02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:54:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F365C79EAF, serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b9:86:ad:c3:be:e3:19:86:fc:7a:62:48:f5: 37:9c:c2:cd:31:ec:2d:98:eb:77:0f:b3:2a:c3:90: 46:d8:d9:e4:99:6c:43:a1:09:96:ff:82:dd:d1:e9: df:1e:81:73:a1:80:9f:39:cf:f0:56:cd:58:f3:f6: bf:4a:0b:71:a6:7e:61:d4:53:a7:12:a5:96:75:41: 1d:79:1d:1b:ff:c8:14:04:c1:f0:49:70:8d:6b:de: 7e:cd:9c:6c:59:b3:17:ad:97:50:00:cf:81:30:c4: 16:d7:3c:2a:a1:81:58:b7:9b:33:cd:c0:a3:4f:b4: 45:8f:81:a2:f2:2c:9a:a1:bb:2d:d4:79:8d:57:d6: 89:20:92:7e:de:ac:dc:04:8c:14:fa:f9:2a:a1:c5: db:d0:ea:e3:43:06:ba:26:ad:bf:29:c8:b3:13:60: 26:e0:49:f3:a2:87:7e:7a:82:c4:70:fa:4c:bb:22: e5:95:dd:2b:19:3b:f2:16:1e:9d:1f:a3:3c:8c:ad: 23:69:2f:af:ed:e1:2b:79:2f:ab:00:8d:d3:35:03: 64:62:93:4f:74:17:29:26:4b:4d:cd:2c:21:98:bb: ce:cb:38:09:5f:4e:a8:9c:53:52:a5:13:41:6b:82: 29:5e:d4:5e:d6:e7:e3:cc:0c:22:fc:b2:2d:46:0f: 09:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328732 sbgp-ipAddrBlock: critical IPv4: 102.209.232.0/22 102.216.220.0/22 102.221.216.0/22 IPv6: 2c0f:e9a8::/32 Signature Algorithm: sha256WithRSAEncryption 6f:9c:3c:17:b4:aa:01:3a:51:ea:26:f9:18:0c:df:6b:28:35: 47:25:7b:29:f0:1b:78:32:84:09:6d:59:c4:c3:c8:4d:64:16: e5:2e:b4:16:18:83:fc:09:32:7f:94:f3:d3:06:54:05:96:8a: 1b:a2:22:2e:04:c6:b0:52:b1:5b:20:23:2d:b0:f5:09:bb:81: 9f:6d:9a:10:1d:0d:44:66:a7:11:68:27:50:05:99:ff:5a:2a: 4b:1c:58:fe:7f:c8:a1:22:55:24:28:36:82:73:f3:4a:8c:fc: e7:21:8d:a3:f1:dd:ae:8e:b4:2f:d7:53:10:7b:43:9f:7e:65: bf:dd:a1:3b:69:4c:2b:a6:54:b5:0b:f7:10:21:3b:66:a1:af: 68:0a:f9:ec:fa:1e:61:80:7d:3b:7f:68:84:7c:2b:51:d2:12: 8c:0d:38:95:9c:52:f2:2b:c8:5f:a3:42:c5:52:98:d7:22:71: 6c:36:90:90:14:4e:4e:ef:fa:f4:72:69:55:07:89:3e:b8:cd: 0c:3a:5d:b2:57:96:7f:df:f7:23:65:51:a9:e1:a1:b5:f9:c1: 0a:d2:ed:3b:de:11:d7:60:1f:a1:08:6c:49:78:2a:07:45:6e: 44:fc:54:b3:90:bc:96:1a:aa:80:8c:cf:e3:3e:4a:02:e6:ae: 39:50:f2:98 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICOgIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTU0NDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjVDNzlFQUYxMTAvBgNVBAUTKERENzQ5OUE4QzhDMTJBQjY3RTE1RUI0 OTI4MDhBNjkyRUQ0QjU5RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDguYatw77jGYb8emJI9Tecws0x7C2Y63cPsyrDkEbY2eSZbEOhCZb/gt3R6d8e gXOhgJ85z/BWzVjz9r9KC3GmfmHUU6cSpZZ1QR15HRv/yBQEwfBJcI1r3n7NnGxZ sxetl1AAz4EwxBbXPCqhgVi3mzPNwKNPtEWPgaLyLJqhuy3UeY1X1okgkn7erNwE jBT6+SqhxdvQ6uNDBromrb8pyLMTYCbgSfOih356gsRw+ky7IuWV3SsZO/IWHp0f ozyMrSNpL6/t4St5L6sAjdM1A2Rik090FykmS03NLCGYu87LOAlfTqicU1KlE0Fr gile1F7W5+PMDCL8si1GDwmlAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU3XSZqMjB KrZ+FetJKAimku1LWfQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1Qzc5RS8xRkMzNEJFNkJFREEx MUVCOEY1Q0UyNDNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NUM3OUUvMUZDMzRCRTZCRURBMTFFQjhGNUNFMjQzRjhBRUEyMjgvM1hTWnFN akJLclotRmV0SktBaW1rdTFMV2ZRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBBwwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJm0egDBAJm2NwDBAJm 3dgwDQQCAAIwBwMFACwP6agwDQYJKoZIhvcNAQELBQADggEBAG+cPBe0qgE6Ueom +RgM32soNUcleynwG3gyhAltWcTDyE1kFuUutBYYg/wJMn+U89MGVAWWihuiIi4E xrBSsVsgIy2w9Qm7gZ9tmhAdDURmpxFoJ1AFmf9aKkscWP5/yKEiVSQoNoJz80qM /OchjaPx3a6OtC/XUxB7Q59+Zb/doTtpTCumVLUL9xAhO2ahr2gK+ez6HmGAfTt/ aIR8K1HSEowNOJWcUvIryF+jQsVSmNcicWw2kJAUTk7v+vRyaVUHiT64zQw6XbJX ln/f9yNlUanhobX5wQrS7TveEddgH6EIbEl4KgdFbkT8VLOQvJYaqoCMz+M+SgLm rjlQ8pg= -----END CERTIFICATE-----Generated at Sun Jan 11 22:48:16 2026 by rpki-client