This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer File: 5U9enM9-t26XkK6VM_5KhMiy_Lw.cer (raw, json) Hash identifier: I4Gy/CCAA49bfYsEspvjQtWEElf/HtrM7BgxsXaWoxg= Subject key identifier: E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3DDF Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:21:08 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329222 IP: 102.212.144.0/22 IP: 2c0f:ec0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 05 Jan 2026 00:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15839 (0x3ddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:21:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36CACCCAF, serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:88:6c:80:ef:b5:3d:13:03:d6:7d:25:65:5d: 23:3d:6a:a0:8c:14:29:00:cd:34:5f:2e:99:a0:ba: 8b:29:5a:c2:e6:96:ca:cd:43:97:3a:c9:ac:3f:fd: 60:43:4b:9c:a5:90:eb:56:a4:2b:17:9c:ab:e1:3d: d4:49:4c:9f:1f:ca:86:81:79:03:02:ee:49:6e:13: 21:17:8f:6a:4a:4c:ab:db:4e:b2:76:db:23:39:14: 74:cc:34:0e:1d:ad:ef:a5:14:a7:b4:d2:a8:85:45: f2:8c:95:6c:8d:f4:1c:de:ba:33:c5:75:19:5f:c9: 62:8d:f2:88:b4:99:1f:54:07:e3:20:b3:65:23:d9: 3a:82:38:01:8b:bd:cf:c5:2f:0a:31:e2:6b:2a:58: a7:20:e6:27:6b:dc:b3:8f:50:eb:88:2d:55:f6:e4: cd:82:e5:66:60:88:a4:51:bf:27:c6:42:a6:0a:d4: 43:71:cd:31:cb:cd:8e:58:8a:f9:a6:1b:c0:fd:b5: 30:df:9c:ec:64:d8:e0:35:2a:8d:1b:41:d8:4e:b7: e3:96:be:5b:7c:5b:5a:7d:15:d3:a4:f3:f7:33:30: 88:71:ad:42:89:dc:19:78:14:e0:b7:53:64:2d:2b: cc:47:e1:e1:b0:23:42:d2:99:ee:79:5b:18:58:05: 67:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329222 sbgp-ipAddrBlock: critical IPv4: 102.212.144.0/22 IPv6: 2c0f:ec0::/32 Signature Algorithm: sha256WithRSAEncryption af:e5:de:e6:d7:29:86:84:e3:37:c6:fa:08:d0:9a:39:1c:84: f0:e0:d2:e5:9c:70:4c:0f:4b:49:24:3d:48:68:95:80:33:50: 63:ea:2d:a6:66:8e:77:8c:ab:31:3f:4d:75:f7:35:60:1b:30: 65:02:b2:7a:d3:d4:ef:73:af:3b:08:c2:f1:cf:0a:55:94:73: fb:ea:64:0c:1e:4f:90:43:45:9a:37:36:29:4c:f1:45:e2:74: 23:9e:43:33:bf:0d:dd:a4:67:8b:30:16:51:e3:fa:a0:c2:cc: 9a:c1:1a:bf:fa:13:8d:76:f6:ca:04:ec:21:01:18:f6:1d:e6: 51:6e:a2:40:c1:a3:82:64:c1:a3:8d:23:d0:eb:7e:08:a9:0f: e4:f7:fd:67:6e:79:bc:be:87:59:f0:a2:48:77:93:eb:1b:2c: d3:b2:be:8d:83:fe:3a:4c:70:f8:7a:16:ce:fd:2a:d0:5c:6d: 75:4e:3a:a9:49:4e:fa:a7:27:4a:db:81:0a:a7:71:b1:3a:bd: f7:6e:71:08:45:6a:4b:c3:6f:c9:2e:57:2f:4e:dc:d0:e8:ec: e4:ea:9c:98:92:a3:01:0c:62:2e:f3:72:b2:4f:a5:70:4f:7f: 44:1b:76:51:be:25:33:83:d3:8a:8a:f9:f6:33:d0:5c:7b:ae: cc:0b:2e:29 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPd8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDIxMDhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkNBQ0NDQUYxMTAvBgNVBAUTKEU1NEY1RTlDQ0Y3RUI3NkU5NzkwQUU5 NTMzRkU0QTg0QzhCMkZDQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpiGyA77U9EwPWfSVlXSM9aqCMFCkAzTRfLpmguospWsLmlsrNQ5c6yaw//WBD S5ylkOtWpCsXnKvhPdRJTJ8fyoaBeQMC7kluEyEXj2pKTKvbTrJ22yM5FHTMNA4d re+lFKe00qiFRfKMlWyN9BzeujPFdRlfyWKN8oi0mR9UB+Mgs2Uj2TqCOAGLvc/F Lwox4msqWKcg5idr3LOPUOuILVX25M2C5WZgiKRRvyfGQqYK1ENxzTHLzY5Yivmm G8D9tTDfnOxk2OA1Ko0bQdhOt+OWvlt8W1p9FdOk8/czMIhxrUKJ3Bl4FOC3U2Qt K8xH4eGwI0LSme55WxhYBWdfAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU5U9enM9+ t26XkK6VM/5KhMiy/LwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDQUNDQy9EQzY0N0I0MjZDMzAx MUVGOTFEQjhCQkU3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Q0FDQ0MvREM2NDdCNDI2QzMwMTFFRjkxREI4QkJFNzYyRTk1MUEvNVU5ZW5N OS10MjZYa0s2Vk1fNUtoTWl5X0x3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBgYwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm1JAwDQQCAAIwBwMF ACwPDsAwDQYJKoZIhvcNAQELBQADggEBAK/l3ubXKYaE4zfG+gjQmjkchPDg0uWc cEwPS0kkPUholYAzUGPqLaZmjneMqzE/TXX3NWAbMGUCsnrT1O9zrzsIwvHPClWU c/vqZAweT5BDRZo3NilM8UXidCOeQzO/Dd2kZ4swFlHj+qDCzJrBGr/6E4129soE 7CEBGPYd5lFuokDBo4JkwaONI9DrfgipD+T3/Wdueby+h1nwokh3k+sbLNOyvo2D /jpMcPh6Fs79KtBcbXVOOqlJTvqnJ0rbgQqncbE6vfducQhFakvDb8kuVy9O3NDo 7OTqnJiSowEMYi7zcrJPpXBPf0QbdlG+JTOD04qK+fYz0Fx7rswLLik= -----END CERTIFICATE-----Generated at Sat Jan 3 02:25:02 2026 by rpki-client