This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer File: 7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer (raw, json) Hash identifier: cHhRhxhK9Ib50Ha56JhL8lslxs0w9Vy0ztaVgltDlkU= Subject key identifier: ED:F8:D8:DA:B4:B2:E6:68:95:4A:40:BA:56:DD:21:C6:45:28:39:DC Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3865 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:49:16 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328763 IP: 102.221.0.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14437 (0x3865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:49:16 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362F418AF, serialNumber=EDF8D8DAB4B2E668954A40BA56DD21C6452839DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:88:ea:a5:c4:23:35:b3:4e:68:cc:ff:44: dc:a8:aa:3e:01:30:4e:a5:6b:6d:e5:a5:9b:80:1f: 9f:3e:8a:99:d4:ac:7a:3a:ed:83:3c:7e:69:9f:c6: ae:f1:19:8c:f5:c3:9c:d0:da:f7:0e:46:1c:5c:71: e4:fb:98:c6:57:a2:c6:78:bd:bb:8a:38:4c:86:0e: 63:a6:a3:75:01:6c:7e:71:d5:c7:69:26:76:70:02: 46:9c:46:c9:3a:e4:c0:1c:bc:b9:47:22:0a:df:56: 7d:64:47:05:12:8a:46:67:ee:e2:4d:39:85:24:86: ab:82:19:5f:b1:80:0b:21:01:36:fc:de:cd:f0:bd: 49:4c:a0:b3:38:bc:1c:43:8a:28:24:fe:a1:3b:cb: d3:ac:33:90:67:b5:36:c2:00:68:82:8a:59:ac:31: bf:e1:1d:c2:87:5f:2b:09:0b:7b:83:20:d8:29:a9: 63:8b:78:ec:51:1c:da:bc:20:5d:31:bc:9e:eb:a1: 7e:10:22:71:6f:67:00:a6:1d:ad:4d:a4:13:72:f3: c8:26:33:e0:c5:c2:b8:49:f3:ef:ac:f8:7e:10:cd: 31:aa:7f:51:4c:39:61:4d:a8:94:63:f6:80:44:d9: 92:85:11:21:6d:04:ef:c2:f9:a7:cc:86:fd:10:2d: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F8:D8:DA:B4:B2:E6:68:95:4A:40:BA:56:DD:21:C6:45:28:39:DC X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328763 sbgp-ipAddrBlock: critical IPv4: 102.221.0.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:76:54:15:89:c7:6c:14:3f:b9:44:92:4d:91:9f:cf:12:90: e3:f6:23:82:07:ba:42:e5:63:bf:b3:94:c0:f2:63:94:db:c2: 7b:90:2b:f0:7b:20:71:0f:b1:e2:47:d3:84:14:c6:15:68:78: d2:33:3a:f0:c0:5e:f0:bb:cb:87:57:0d:87:89:61:dd:48:cc: c2:6e:c0:c5:dc:54:9c:d9:2f:fa:f7:0c:1e:9c:34:7a:53:09: b5:29:10:ba:71:d6:5c:e5:b8:f8:2c:e6:75:08:cb:a5:ae:fb: 9b:ae:4c:7e:56:52:f7:85:62:e1:84:bc:09:0c:6e:ee:9c:2b: e9:86:d0:b1:7d:1a:08:94:eb:68:b5:bb:e9:0f:90:b9:32:e0: 6d:74:7b:3a:64:21:22:aa:e4:8c:81:cb:c0:fe:7e:b8:6b:6a: 01:79:43:ae:39:ad:f1:b1:e2:e8:3f:81:88:ee:cc:29:85:13: 8e:60:b4:7b:73:dc:d2:44:43:f9:7b:05:86:af:24:f7:18:7b: 54:66:a3:6f:1f:30:7a:e9:71:8b:e5:95:8a:d1:08:b3:72:09: 50:74:fb:c6:2e:88:f8:31:07:bc:72:1e:b6:cb:90:8d:ff:53: 1b:e8:f3:98:69:9a:86:11:b0:54:1f:92:05:b6:49:82:af:67: 78:40:40:d4 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICOGUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDQ5MTZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjJGNDE4QUYxMTAvBgNVBAUTKEVERjhEOERBQjRCMkU2Njg5NTRBNDBC QTU2REQyMUM2NDUyODM5REMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1XIjqpcQjNbNOaMz/RNyoqj4BME6la23lpZuAH58+ipnUrHo67YM8fmmfxq7x GYz1w5zQ2vcORhxcceT7mMZXosZ4vbuKOEyGDmOmo3UBbH5x1cdpJnZwAkacRsk6 5MAcvLlHIgrfVn1kRwUSikZn7uJNOYUkhquCGV+xgAshATb83s3wvUlMoLM4vBxD iigk/qE7y9OsM5BntTbCAGiCilmsMb/hHcKHXysJC3uDINgpqWOLeOxRHNq8IF0x vJ7roX4QInFvZwCmHa1NpBNy88gmM+DFwrhJ8++s+H4QzTGqf1FMOWFNqJRj9oBE 2ZKFESFtBO/C+afMhv0QLfjPAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQU7fjY2rSy 5miVSkC6Vt0hxkUoOdwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyRjQxOC81QjAxNDY1OEYxNjYx MUVDOUZDQjIxQzFGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MkY0MTgvNUIwMTQ2NThGMTY2MTFFQzlGQ0IyMUMxRjEyMjI0NjgvN2ZqWTJy U3k1bWlWU2tDNlZ0MGh4a1VvT2R3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBDswHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3QAwDQYJKoZIhvcN AQELBQADggEBAAp2VBWJx2wUP7lEkk2Rn88SkOP2I4IHukLlY7+zlMDyY5TbwnuQ K/B7IHEPseJH04QUxhVoeNIzOvDAXvC7y4dXDYeJYd1IzMJuwMXcVJzZL/r3DB6c NHpTCbUpELpx1lzluPgs5nUIy6Wu+5uuTH5WUveFYuGEvAkMbu6cK+mG0LF9GgiU 62i1u+kPkLky4G10ezpkISKq5IyBy8D+frhragF5Q645rfGx4ug/gYjuzCmFE45g tHtz3NJEQ/l7BYavJPcYe1Rmo28fMHrpcYvllYrRCLNyCVB0+8YuiPgxB7xyHrbL kI3/Uxvo85hpmoYRsFQfkgW2SYKvZ3hAQNQ= -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:57 2026 by rpki-client