This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer File: 5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer (raw, json) Hash identifier: dhdUxHe0uOgxFyBohtJUBx+j1ggERzRTAm/nN6RfNts= Subject key identifier: E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C07 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:09:07 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329303 IP: 102.207.92.0/23 IP: 102.211.132.0/22 IP: 2c0f:1440::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15367 (0x3c07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:09:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3695083AF, serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:d8:cb:f3:92:07:4b:70:16:b0:89:3e:c5: 1f:88:9f:b4:72:cf:01:97:b1:17:86:59:3e:7e:f4: ae:5f:f1:e9:43:98:16:8e:50:d7:1f:57:d1:61:ac: b4:ea:4d:ff:88:5c:53:0f:c4:5d:f6:3d:ea:66:66: 5d:ff:be:d2:c9:50:00:40:8d:49:3c:6a:76:e1:11: 83:7f:b7:c9:b5:67:2b:de:fc:28:bc:34:9c:62:7f: 2a:22:94:77:3e:d9:0f:04:f6:f8:71:92:4b:3a:8e: da:05:06:e5:fa:00:06:5a:d7:e1:0d:7f:e0:54:39: 9f:5a:77:0a:ea:29:5d:e6:c4:53:6e:f3:dd:1e:e4: 92:05:4d:b5:7f:8a:45:eb:f5:fa:f1:5a:68:12:73: dd:1c:47:7f:25:10:c3:ab:15:6c:55:4f:f7:65:2d: a9:2a:a1:72:bb:3e:96:ad:9f:16:2b:55:6b:f5:b2: 9e:24:43:b3:a3:c8:68:07:58:24:37:94:c4:88:ae: b7:b5:90:62:d4:e7:ae:d5:26:1e:8e:23:d7:80:19: ce:c7:62:94:91:b9:cc:a0:f1:83:ea:e6:f6:ab:6d: 50:b5:a9:fa:e2:e2:cd:9c:07:b8:cd:89:0f:d5:14: 80:a5:ad:30:bb:aa:01:cd:d4:51:d3:0c:ba:a6:32: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329303 sbgp-ipAddrBlock: critical IPv4: 102.207.92.0/23 102.211.132.0/22 IPv6: 2c0f:1440::/32 Signature Algorithm: sha256WithRSAEncryption 37:d1:bf:9f:e4:46:47:4e:9d:4a:3f:89:f2:28:82:27:61:b6: 6b:6b:ee:fe:d8:11:b6:6c:47:db:9e:44:7d:0f:60:8b:ac:c8: 88:b5:35:fa:b4:25:e4:e3:dd:41:89:23:23:08:3d:61:e0:6b: ff:62:71:34:81:60:8c:03:fb:11:10:06:d6:cf:32:1a:3d:c8: ec:76:54:4c:04:5b:5c:3e:d3:8d:69:6a:7a:6e:b7:60:fb:2a: d0:12:a7:2b:32:fc:9d:35:0f:d7:ff:61:96:12:9f:33:be:bc: 49:1f:19:4e:78:3a:be:cf:5c:80:4e:2c:7b:78:af:2e:69:c0: fc:df:b8:7a:18:b6:3a:5d:9e:6e:d6:b4:db:9f:b8:a4:42:01: 37:93:36:45:fa:ab:dc:9f:a7:96:98:e7:1b:b3:33:21:51:54: c4:1d:7c:a7:ed:fd:78:31:92:e6:87:2a:c5:15:a0:c1:7c:b7: 0e:47:5f:2a:59:1e:71:82:02:9f:ff:1b:b3:5b:e6:74:13:ce: 4e:87:83:1e:f2:3e:47:e0:8d:f7:49:fd:fe:a5:5c:e2:bd:ec: 29:46:c9:32:ab:6c:83:e3:de:56:af:16:fc:20:50:25:5d:5b: 0b:eb:38:5a:de:2b:a0:98:41:82:c2:a5:f2:c4:c7:81:1d:b7: 48:d4:0f:5f -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICPAcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzA5MDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjk1MDgzQUYxMTAvBgNVBAUTKEU1MTAzRUQxMTlFNjQ3OUJCMDM2QjdD M0Y0OERDQzlFNjJDMTc0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2ldjL85IHS3AWsIk+xR+In7RyzwGXsReGWT5+9K5f8elDmBaOUNcfV9FhrLTq Tf+IXFMPxF32PepmZl3/vtLJUABAjUk8anbhEYN/t8m1Zyve/Ci8NJxifyoilHc+ 2Q8E9vhxkks6jtoFBuX6AAZa1+ENf+BUOZ9adwrqKV3mxFNu890e5JIFTbV/ikXr 9frxWmgSc90cR38lEMOrFWxVT/dlLakqoXK7PpatnxYrVWv1sp4kQ7OjyGgHWCQ3 lMSIrre1kGLU567VJh6OI9eAGc7HYpSRucyg8YPq5varbVC1qfri4s2cB7jNiQ/V FIClrTC7qgHN1FHTDLqmMjkNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU5RA+0Rnm R5uwNrfD9I3MnmLBdCQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5NTA4My8wRkE0MUM2RTg2MjIx MUVGOEZDQkQ3NTg3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTUwODMvMEZBNDFDNkU4NjIyMTFFRjhGQ0JENzU4NzYyRTk1MUEvNVJBLTBS bm1SNXV3TnJmRDlJM01ubUxCZENRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBlcwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAFmz1wDBAJm04QwDQQC AAIwBwMFACwPFEAwDQYJKoZIhvcNAQELBQADggEBADfRv5/kRkdOnUo/ifIogidh tmtr7v7YEbZsR9ueRH0PYIusyIi1Nfq0JeTj3UGJIyMIPWHga/9icTSBYIwD+xEQ BtbPMho9yOx2VEwEW1w+041panput2D7KtASpysy/J01D9f/YZYSnzO+vEkfGU54 Or7PXIBOLHt4ry5pwPzfuHoYtjpdnm7WtNufuKRCATeTNkX6q9yfp5aY5xuzMyFR VMQdfKft/XgxkuaHKsUVoMF8tw5HXypZHnGCAp//G7Nb5nQTzk6Hgx7yPkfgjfdJ /f6lXOK97ClGyTKrbIPj3lavFvwgUCVdWwvrOFreK6CYQYLCpfLEx4Edt0jUD18= -----END CERTIFICATE-----Generated at Mon Jan 12 01:22:34 2026 by rpki-client