This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/5hfTT1TsLbm6WEBc2glDH9OB8xY.cer File: 5hfTT1TsLbm6WEBc2glDH9OB8xY.cer (raw, json) Hash identifier: dfWJ/DuCUGgrMn0du5CPkRl5O6B/rcMWcPrzLU3iL2A= Subject key identifier: E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A50 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:06:06 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328386 IP: 102.130.72.0/21 IP: 2c0f:ece8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14928 (0x3a50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:06:06 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3664674AF, serialNumber=E617D34F54EC2DB9BA58405CDA09431FD381F316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:33:54:4f:77:c0:9b:86:9c:a9:c5:56:43: c8:d4:c3:6f:3b:35:0d:c5:20:2c:cc:70:85:48:1e: 54:34:61:cf:2e:4c:0e:b5:9e:42:7e:28:16:23:56: d9:99:fa:0e:73:28:f8:40:b6:c2:c3:83:1b:78:52: e9:a5:69:94:69:9f:29:54:f8:38:d5:f2:5b:7d:e5: d1:f5:07:8d:11:8a:d0:6b:52:3b:81:7f:76:ab:3b: 84:b4:b3:ee:fc:db:7f:e1:46:89:b2:8f:c9:61:aa: f1:f8:e9:ac:36:41:e1:2e:d4:1e:94:e6:da:6b:1b: 75:1e:b4:d3:0c:15:e9:a0:f4:36:8f:f9:ff:76:87: 58:de:3e:b4:7d:c6:48:73:09:5c:0c:1d:93:6f:de: ba:32:b5:3f:37:63:dc:11:86:e4:b7:59:e8:a0:cc: bd:ca:db:bd:fa:33:a9:59:17:d8:2a:8f:11:a8:60: a3:f6:45:1e:0c:cf:51:b7:60:21:b0:6c:f5:e0:f9: 63:03:82:4a:fb:74:09:b0:f4:c4:bc:b5:77:a7:34: 32:ba:4e:69:55:3f:b8:80:c4:80:f6:98:cb:21:00: 62:1d:67:77:fd:10:ec:42:91:8d:e5:55:95:d0:69: 2f:bd:16:e1:13:38:d1:b9:22:e9:95:d1:b6:04:21: fe:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:17:D3:4F:54:EC:2D:B9:BA:58:40:5C:DA:09:43:1F:D3:81:F3:16 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664674/657AADAE501D11EB849EAF47F8AEA228/5hfTT1TsLbm6WEBc2glDH9OB8xY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328386 sbgp-ipAddrBlock: critical IPv4: 102.130.72.0/21 IPv6: 2c0f:ece8::/32 Signature Algorithm: sha256WithRSAEncryption 7d:71:de:66:83:6a:f7:e7:6e:2c:47:45:90:8e:97:f6:d9:74: 47:8c:47:55:75:5a:d4:1c:ab:20:69:8c:96:9c:d8:f3:16:5c: 3b:8d:9d:bc:77:12:e6:4a:f9:e5:b9:38:3c:73:96:ff:d0:2e: 2b:61:0f:c6:27:0d:50:b9:77:9e:47:b1:01:5e:0e:5d:07:66: 8c:e8:99:38:65:91:1c:c8:6f:4c:af:6c:02:f2:e5:b7:98:0f: ca:54:eb:51:2d:ac:b3:f7:13:77:40:43:a7:e1:52:a0:08:be: db:fc:11:68:bc:59:74:51:45:8b:88:9c:27:8d:3c:f5:8a:75: 0c:3f:45:cd:5a:67:dc:11:18:66:7f:b5:f9:a5:8e:53:00:1a: 06:7f:14:c3:7d:38:9b:81:5e:09:13:4e:fa:28:a5:d1:4f:43: 73:25:5a:a8:74:cf:0f:a9:3c:6b:b5:bc:17:9c:eb:d8:95:1c: 84:1f:d1:c8:a5:09:9a:7e:94:d3:20:47:c6:49:11:4c:0f:1a: 12:85:72:ea:b7:3c:b5:dc:df:08:9b:d2:aa:30:d5:83:1c:cf: 55:67:63:97:90:9a:ea:08:46:94:31:32:86:3c:8e:1b:49:78: eb:16:c0:28:d7:0a:36:ae:f9:5f:b0:7a:26:f6:7e:90:a9:d2: c1:9c:dd:69 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOlAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjA2MDZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjY0Njc0QUYxMTAvBgNVBAUTKEU2MTdEMzRGNTRFQzJEQjlCQTU4NDA1 Q0RBMDk0MzFGRDM4MUYzMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCtTNUT3fAm4acqcVWQ8jUw287NQ3FICzMcIVIHlQ0Yc8uTA61nkJ+KBYjVtmZ +g5zKPhAtsLDgxt4UumlaZRpnylU+DjV8lt95dH1B40RitBrUjuBf3arO4S0s+78 23/hRomyj8lhqvH46aw2QeEu1B6U5tprG3UetNMMFemg9DaP+f92h1jePrR9xkhz CVwMHZNv3roytT83Y9wRhuS3WeigzL3K2736M6lZF9gqjxGoYKP2RR4Mz1G3YCGw bPXg+WMDgkr7dAmw9MS8tXenNDK6TmlVP7iAxID2mMshAGIdZ3f9EOxCkY3lVZXQ aS+9FuETONG5IumV0bYEIf5FAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU5hfTT1Ts Lbm6WEBc2glDH9OB8xYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2NDY3NC82NTdBQURBRTUwMUQx MUVCODQ5RUFGNDdGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NjQ2NzQvNjU3QUFEQUU1MDFEMTFFQjg0OUVBRjQ3RjhBRUEyMjgvNWhmVFQx VHNMYm02V0VCYzJnbERIOU9COHhZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAsIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBANmgkgwDQQCAAIwBwMF ACwP7OgwDQYJKoZIhvcNAQELBQADggEBAH1x3maDavfnbixHRZCOl/bZdEeMR1V1 WtQcqyBpjJac2PMWXDuNnbx3EuZK+eW5ODxzlv/QLithD8YnDVC5d55HsQFeDl0H ZozomThlkRzIb0yvbALy5beYD8pU61EtrLP3E3dAQ6fhUqAIvtv8EWi8WXRRRYuI nCeNPPWKdQw/Rc1aZ9wRGGZ/tfmljlMAGgZ/FMN9OJuBXgkTTvoopdFPQ3MlWqh0 zw+pPGu1vBec69iVHIQf0cilCZp+lNMgR8ZJEUwPGhKFcuq3PLXc3wib0qow1YMc z1VnY5eQmuoIRpQxMoY8jhtJeOsWwCjXCjau+V+weib2fpCp0sGc3Wk= -----END CERTIFICATE-----Generated at Fri Jan 2 16:55:55 2026 by rpki-client