This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer File: 7CqGNogipH8Tl9jc5XNMUwJyyWU.cer (raw, json) Hash identifier: yE6xB3y9EmzOduVfNE/zwBoHd3S0TFIZbWJPJBGgC0M= Subject key identifier: EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A9B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:03 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328638 IP: 102.141.64.0/19 IP: 102.207.180.0/22 IP: 102.216.104.0/22 IP: 102.221.220.0/22 IP: 154.65.112.0/20 IP: 196.6.112.0/21 IP: 2c0f:f0a0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 15 Jan 2026 00:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15003 (0x3a9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:17:03 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F366DC11AF, serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c5:ca:1c:78:a4:03:ef:b5:28:0e:18:d0:06: ba:cf:49:c3:2a:9a:41:67:49:10:e8:97:8a:bd:94: a1:3d:c4:d9:8b:24:e2:76:9f:cb:45:cd:0f:be:75: d2:ac:5d:1a:58:5a:1b:42:3b:63:8f:b7:4e:24:01: 53:15:b2:12:97:b9:63:6c:db:ec:c0:82:36:f6:e5: 6b:f4:a3:e1:80:e9:1d:a8:dd:a6:3e:9e:20:49:9e: 69:ff:49:b3:2b:3c:c5:64:db:4a:53:8a:b7:8f:07: b8:4f:59:22:0b:63:7c:68:3b:fc:6d:28:66:6f:30: 1d:9c:15:6c:d2:e4:22:0f:48:7d:d5:ff:98:f2:92: 7f:e2:b7:75:96:48:45:22:8f:b3:d1:39:fd:75:19: 54:a9:d4:58:34:95:a0:08:2e:12:55:87:a7:b0:8e: e6:45:e3:5c:9b:ce:7d:b1:42:95:9a:ce:98:94:6f: b5:80:5a:ba:96:6f:d4:22:c8:e3:81:2a:a1:06:f5: 22:0b:68:42:46:cb:33:cf:9c:e2:de:e4:5e:6e:12: 34:ad:a3:dc:18:1d:31:05:0f:a5:b5:47:44:0b:05: 35:37:55:8e:78:71:d4:8c:79:97:c6:63:79:3c:06: 2f:25:99:54:60:83:e9:cc:b6:cf:b3:6a:a3:f3:7e: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328638 sbgp-ipAddrBlock: critical IPv4: 102.141.64.0/19 102.207.180.0/22 102.216.104.0/22 102.221.220.0/22 154.65.112.0/20 196.6.112.0/21 IPv6: 2c0f:f0a0::/32 Signature Algorithm: sha256WithRSAEncryption 26:61:02:f7:b5:1c:0c:54:61:c1:07:df:37:30:f0:f4:fa:41: df:5f:39:bb:ae:8f:5e:bc:ac:e8:8b:23:6d:12:43:67:01:a9: 7a:7e:5d:b2:47:4c:ff:22:d8:2c:18:1d:27:70:84:b9:fa:65: 86:4a:47:fd:59:ee:a1:1d:96:14:71:85:12:85:50:e8:b1:5c: b4:fb:b4:cc:e5:80:23:a1:24:26:a1:b7:07:8a:2d:03:e1:76: bb:62:52:68:a0:3f:50:f5:1f:89:b6:e0:7e:0f:a4:b9:38:ab: 0e:4d:18:78:09:02:f9:81:00:67:a0:37:1c:c2:25:4c:e0:63: 47:c1:c3:a0:20:e5:d2:c0:fb:ad:51:f5:3e:6b:14:1e:2a:6a: f9:6f:5a:1f:af:5b:e0:26:56:b6:9c:95:73:0d:35:10:78:ff: 88:41:36:d0:0e:2c:71:ed:91:69:67:de:64:ce:06:aa:d6:1d: 2d:ca:79:df:df:de:b0:75:89:03:bf:a4:f0:47:a2:83:fe:d5: 5c:49:a3:37:f2:71:1e:b8:4e:45:b5:5b:3c:4b:4a:4d:cf:ba: fb:76:3f:c3:18:56:be:66:4f:f0:b3:de:2d:95:0e:d2:3f:c2: 16:0f:e4:ce:42:63:9e:5f:fb:df:fb:42:20:52:14:a3:14:c5: 0b:fa:b8:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgICOpswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjE3MDNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjZEQzExQUYxMTAvBgNVBAUTKEVDMkE4NjM2ODgyMkE0N0YxMzk3RDhE Q0U1NzM0QzUzMDI3MkM5NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQxcoceKQD77UoDhjQBrrPScMqmkFnSRDol4q9lKE9xNmLJOJ2n8tFzQ++ddKs XRpYWhtCO2OPt04kAVMVshKXuWNs2+zAgjb25Wv0o+GA6R2o3aY+niBJnmn/SbMr PMVk20pTirePB7hPWSILY3xoO/xtKGZvMB2cFWzS5CIPSH3V/5jykn/it3WWSEUi j7PROf11GVSp1Fg0laAILhJVh6ewjuZF41ybzn2xQpWazpiUb7WAWrqWb9QiyOOB KqEG9SILaEJGyzPPnOLe5F5uEjSto9wYHTEFD6W1R0QLBTU3VY54cdSMeZfGY3k8 Bi8lmVRgg+nMts+zaqPzfjtFAgMBAAGjggM4MIIDNDAdBgNVHQ4EFgQU7CqGNogi pH8Tl9jc5XNMUwJyyWUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2REMxMS84QTg3OTg3ODk2Nzgx MUVBQTQ5MzcyNUFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NkRDMTEvOEE4Nzk4Nzg5Njc4MTFFQUE0OTM3MjVBRjhBRUEyMjgvN0NxR05v Z2lwSDhUbDlqYzVYTk1Vd0p5eVdVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA74wTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDBAVmjUADBAJmz7QDBAJm 2GgDBAJm3dwDBASaQXADBAPEBnAwDQQCAAIwBwMFACwP8KAwDQYJKoZIhvcNAQEL BQADggEBACZhAve1HAxUYcEH3zcw8PT6Qd9fObuuj168rOiLI20SQ2cBqXp+XbJH TP8i2CwYHSdwhLn6ZYZKR/1Z7qEdlhRxhRKFUOixXLT7tMzlgCOhJCahtweKLQPh drtiUmigP1D1H4m24H4PpLk4qw5NGHgJAvmBAGegNxzCJUzgY0fBw6Ag5dLA+61R 9T5rFB4qavlvWh+vW+AmVraclXMNNRB4/4hBNtAOLHHtkWln3mTOBqrWHS3Ked/f 3rB1iQO/pPBHooP+1VxJozfycR64TkW1WzxLSk3Puvt2P8MYVr5mT/Cz3i2VDtI/ whYP5M5CY55f+9/7QiBSFKMUxQv6uEI= -----END CERTIFICATE-----Generated at Tue Jan 13 08:08:57 2026 by rpki-client