This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer File: 3tjUZmQoMBoc4GZckKo0Jgr_74k.cer (raw, json) Hash identifier: bl3aDrRWH4KXOGXzOLIGlglpBPndT2Ezd7ay3fawJEo= Subject key identifier: DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CDC Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:39:51 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329481 IP: 102.208.8.0/22 IP: 2c0f:46c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 05:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15580 (0x3cdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:39:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A8A05AF, serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:1a:da:62:30:c3:47:6f:52:32:1e:40:f0: 59:2f:22:3a:77:ea:bc:c8:b4:42:f8:74:bf:3a:c3: 4f:de:dd:54:2c:e1:9c:67:7e:0e:13:71:b2:89:0b: 56:1b:5b:fa:02:c5:0d:06:e6:84:c3:7f:d0:cb:c7: 13:19:c3:a6:cd:a2:54:bf:9a:7b:65:7a:34:47:93: a9:9e:eb:36:3b:9b:9d:14:d1:1d:94:5e:88:82:5f: 91:a7:c6:6a:dd:92:4f:56:d9:37:c0:d2:84:ab:e3: ab:80:8c:de:2b:03:3d:df:77:ad:97:48:4c:4c:8d: 9b:ea:3c:fd:87:e2:fb:91:13:e3:4b:0c:53:c5:28: 28:39:3b:8b:69:fd:24:f0:bb:02:7c:c8:10:94:88: cc:6e:fd:e6:e6:23:bf:1a:46:f8:94:58:31:6e:fa: 52:b0:6e:df:08:ff:09:63:b5:78:d7:ff:56:dd:29: 7f:12:35:21:c7:5c:9f:72:04:30:d8:6a:f2:0e:99: c1:c7:48:66:00:87:61:2b:e8:c0:9b:03:96:59:32: 2e:2e:31:10:a2:55:36:a0:25:7b:a2:8d:bb:b1:db: 14:2d:ac:96:2b:1e:12:24:75:05:68:32:d6:0c:a3: 8e:be:af:fa:0e:74:5b:50:e8:ee:d5:fe:a7:68:76: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329481 sbgp-ipAddrBlock: critical IPv4: 102.208.8.0/22 IPv6: 2c0f:46c0::/32 Signature Algorithm: sha256WithRSAEncryption a0:0e:89:59:f5:66:0a:a4:57:26:a9:89:7f:76:f0:0e:11:1c: 2e:32:89:3a:b7:44:ed:58:77:13:72:46:05:7f:8b:01:50:10: 99:03:75:8a:09:cb:2d:23:e1:c4:a9:ef:e1:7b:14:3a:29:19: e6:61:0c:1d:6f:74:6b:89:96:72:7e:78:67:4d:33:1e:2e:93: f4:7a:ef:d5:14:f3:97:5b:c4:27:c2:d2:a1:18:b4:d1:b5:6e: 65:cf:7c:98:94:b6:b1:dc:6b:4c:70:d3:c2:a7:31:39:34:47: e7:9f:71:ea:27:76:f1:1d:80:25:ff:1a:c0:e2:1f:55:90:74: d9:a9:e3:cc:de:81:8b:11:6e:1a:78:e6:51:3b:86:75:0e:cd: 1d:6c:4d:09:5f:77:60:b2:44:1a:36:be:60:b7:24:2e:2b:dc: 0b:65:b4:d9:4f:ff:59:70:ab:eb:8e:41:d5:69:ff:5d:16:f4: a8:ab:85:f3:53:85:57:58:1f:fb:f7:f1:bc:f9:4c:be:41:67: 96:df:23:7b:20:98:ca:0f:bb:aa:6e:c9:1e:2c:25:9d:80:2a: 4a:ee:75:37:24:58:d9:c6:73:28:e4:c0:eb:03:cd:46:55:7e: f9:46:b6:83:d6:23:4d:b8:94:fd:ee:63:cd:7d:e2:07:35:cc: c3:a4:3c:f8 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPNwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzM5NTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkE4QTA1QUYxMTAvBgNVBAUTKERFRDhENDY2NjQyODMwMUExQ0UwNjY1 QzkwQUEzNDI2MEFGRkVGODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn+BraYjDDR29SMh5A8FkvIjp36rzItEL4dL86w0/e3VQs4Zxnfg4TcbKJC1Yb W/oCxQ0G5oTDf9DLxxMZw6bNolS/mntlejRHk6me6zY7m50U0R2UXoiCX5Gnxmrd kk9W2TfA0oSr46uAjN4rAz3fd62XSExMjZvqPP2H4vuRE+NLDFPFKCg5O4tp/STw uwJ8yBCUiMxu/ebmI78aRviUWDFu+lKwbt8I/wljtXjX/1bdKX8SNSHHXJ9yBDDY avIOmcHHSGYAh2Er6MCbA5ZZMi4uMRCiVTagJXuijbux2xQtrJYrHhIkdQVoMtYM o46+r/oOdFtQ6O7V/qdodmprAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU3tjUZmQo MBoc4GZckKo0Jgr/74kwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBOEEwNS9FRDg2ODE2ODgxNjEx MUVGOTcyRjQ3Nzk3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QThBMDUvRUQ4NjgxNjg4MTYxMTFFRjk3MkY0Nzc5NzYyRTk1MUEvM3RqVVpt UW9NQm9jNEdaY2tLbzBKZ3JfNzRrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBwkwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0AgwDQQCAAIwBwMF ACwPRsAwDQYJKoZIhvcNAQELBQADggEBAKAOiVn1ZgqkVyapiX928A4RHC4yiTq3 RO1YdxNyRgV/iwFQEJkDdYoJyy0j4cSp7+F7FDopGeZhDB1vdGuJlnJ+eGdNMx4u k/R679UU85dbxCfC0qEYtNG1bmXPfJiUtrHca0xw08KnMTk0R+efceondvEdgCX/ GsDiH1WQdNmp48zegYsRbhp45lE7hnUOzR1sTQlfd2CyRBo2vmC3JC4r3AtltNlP /1lwq+uOQdVp/10W9KirhfNThVdYH/v38bz5TL5BZ5bfI3sgmMoPu6puyR4sJZ2A KkrudTckWNnGcyjkwOsDzUZVfvlGtoPWI024lP3uY8194gc1zMOkPPg= -----END CERTIFICATE-----Generated at Thu Jan 1 09:05:30 2026 by rpki-client