This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer File: 9d_2SjnYAHBE12ccvKqh4WFXRaA.cer (raw, json) Hash identifier: R/1iNrJj8yBwQ25cDhW2HRdyoPd6duwYghQ9cawToLc= Subject key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EA1 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:52:07 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329255 IP: 102.204.176.0/22 IP: 102.208.190.0/24 IP: 102.213.176.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 12 Jan 2026 00:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16033 (0x3ea1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:52:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:fc:b5:ab:37:35:2e:e7:b8:cd:3d:30:f3: 43:df:16:97:ed:f0:5c:1d:f4:5b:42:80:ee:7a:1d: d5:a8:85:be:01:5b:37:dd:72:c3:06:4f:ed:0f:fe: 5c:3f:20:86:59:d0:c4:a7:17:da:1d:a7:74:92:91: da:6a:ba:5e:3b:5a:55:cf:6d:b1:0e:53:3d:6c:93: bc:d4:d2:8f:fc:74:5d:32:45:8a:14:7f:6a:80:68: 57:a0:6c:62:58:e7:ce:18:93:44:d7:9b:2c:40:0e: f8:c3:38:ee:89:e6:e7:71:a9:e5:63:a8:e9:e9:c4: d8:63:8d:9f:cf:4e:0b:94:0e:09:cb:2b:42:93:ee: 57:8f:0f:eb:a3:0f:3d:66:85:25:15:71:22:b3:2a: 9b:3a:f5:38:29:e0:f9:40:2c:41:46:53:42:55:a7: 16:1d:ad:39:5c:7f:8e:7b:c4:e7:4b:fe:41:d4:1e: 81:d6:cb:11:7a:be:18:f7:de:81:cd:64:e9:a9:db: c1:d8:38:49:46:f9:b6:a9:65:c3:f5:ec:51:ba:20: 4c:98:5d:c3:3d:8b:fc:a8:fe:61:c4:bf:1e:b9:59: 82:c3:4f:6b:c4:09:9f:a3:ab:c9:9b:9d:b1:14:b7: bc:f2:25:2d:19:f8:19:8d:26:b4:f5:bf:22:96:c5: 8a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329255 sbgp-ipAddrBlock: critical IPv4: 102.204.176.0/22 102.208.190.0/24 102.213.176.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:5e:b0:39:3a:0a:47:ff:95:93:c9:5d:2c:fe:50:9b:3d:fa: 79:d7:ed:45:b3:fd:f1:75:eb:37:4c:01:c3:46:5a:00:a9:b5: ee:cf:af:69:33:9f:38:25:b4:34:27:86:09:20:b8:ca:5d:6f: 8e:bd:97:2d:81:45:c1:19:fd:7d:b2:ce:8a:5e:55:a6:b3:4c: a2:ca:7f:e5:51:ee:fa:9f:90:86:90:cd:0f:e8:9f:11:ae:38: 7f:3d:49:87:1e:8d:76:b9:c5:71:5e:ff:f8:be:4f:97:73:69: a4:15:a9:f8:88:54:43:c7:8c:89:89:09:c3:09:a5:d2:93:75: cc:e1:73:4d:ec:a3:e7:b6:bc:c7:8e:01:a2:c8:11:2f:27:af: 85:a6:fd:84:7f:ab:26:3e:4d:67:a2:81:47:9f:91:8e:00:d0: ac:73:3b:15:42:92:65:f6:8d:43:ef:48:55:5f:9f:ce:3c:ca: f6:10:d8:b8:cf:88:95:a8:a2:35:8a:1e:5f:f3:bd:73:97:b0: d0:14:b6:74:be:4d:c4:a9:a1:5a:0b:07:3d:d6:8c:2b:01:8a: bf:49:a4:6a:80:ae:a7:43:08:54:18:58:8b:de:f0:8b:25:eb: b2:b7:3d:4c:3f:b2:c3:7b:17:e2:38:29:d8:75:c6:fd:78:5f: e0:31:af:22 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgICPqEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDUyMDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkU2Qjc3QUYxMTAvBgNVBAUTKEY1REZGNjRBMzlEODAwNzA0NEQ3Njcx Q0JDQUFBMUUxNjE1NzQ1QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC09/y1qzc1Lue4zT0w80PfFpft8Fwd9FtCgO56HdWohb4BWzfdcsMGT+0P/lw/ IIZZ0MSnF9odp3SSkdpqul47WlXPbbEOUz1sk7zU0o/8dF0yRYoUf2qAaFegbGJY 584Yk0TXmyxADvjDOO6J5udxqeVjqOnpxNhjjZ/PTguUDgnLK0KT7lePD+ujDz1m hSUVcSKzKps69Tgp4PlALEFGU0JVpxYdrTlcf457xOdL/kHUHoHWyxF6vhj33oHN ZOmp28HYOElG+bapZcP17FG6IEyYXcM9i/yo/mHEvx65WYLDT2vECZ+jq8mbnbEU t7zyJS0Z+BmNJrT1vyKWxYoRAgMBAAGjggMXMIIDEzAdBgNVHQ4EFgQU9d/2SjnY AHBE12ccvKqh4WFXRaAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFNkI3Ny8zQ0ZGQTM4MDQyQ0Ix MUVGOEI5QTM3QUU3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTZCNzcvM0NGRkEzODA0MkNCMTFFRjhCOUEzN0FFNzYyRTk1MUEvOWRfMlNq bllBSEJFMTJjY3ZLcWg0V0ZYUmFBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBicwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAJmzLADBABm0L4DBABm 1bAwDQYJKoZIhvcNAQELBQADggEBABxesDk6Ckf/lZPJXSz+UJs9+nnX7UWz/fF1 6zdMAcNGWgCpte7Pr2kznzgltDQnhgkguMpdb469ly2BRcEZ/X2yzopeVaazTKLK f+VR7vqfkIaQzQ/onxGuOH89SYcejXa5xXFe//i+T5dzaaQVqfiIVEPHjImJCcMJ pdKTdczhc03so+e2vMeOAaLIES8nr4Wm/YR/qyY+TWeigUefkY4A0KxzOxVCkmX2 jUPvSFVfn848yvYQ2LjPiJWoojWKHl/zvXOXsNAUtnS+TcSpoVoLBz3WjCsBir9J pGqArqdDCFQYWIve8Isl67K3PUw/ssN7F+I4Kdh1xv14X+AxryI= -----END CERTIFICATE-----Generated at Sat Jan 10 03:57:22 2026 by rpki-client