This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer File: A_5dcm806TzhqV2UUY4SI3rD4sY.cer (raw, json) Hash identifier: gUl2TPFPKzVC9MInB60NGUDx96tqaKhj7F+lFahomFw= Subject key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D17 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:49:43 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 5536 AS: 37725 IP: 102.218.128.0/24 IP: 102.218.130.0/24 IP: 102.219.22.0/24 IP: 102.220.125.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15639 (0x3d17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:49:43 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:93:25:61:dc:00:3b:f7:1c:15:a5:e3:ea: 42:fd:68:88:1a:6b:63:93:93:08:9f:2e:7d:84:0f: 46:a0:5a:7c:88:60:cd:8c:05:60:77:44:8a:fa:15: fc:9e:44:5c:ef:64:56:f0:72:0c:0b:8e:22:28:98: 4a:f9:e9:19:7a:1f:66:d1:5c:92:07:b5:52:8d:f3: d4:01:66:11:7e:45:93:2d:41:3f:46:c5:97:91:6f: f7:82:f0:41:99:5d:f9:19:6b:6f:b4:13:ff:5f:74: a7:71:90:7a:07:99:f5:47:39:67:9c:ef:72:ca:95: a5:18:12:cb:d1:7e:cf:0d:df:a1:63:38:eb:53:7b: ed:8e:c8:40:7f:7a:3f:4a:80:77:5e:f0:b4:c6:1a: 7c:ef:14:25:84:31:27:82:18:ef:e6:f3:f9:fa:92: 86:a8:24:74:84:be:7f:5b:04:ee:34:8d:89:24:6c: a6:fb:b5:d5:d9:6c:1a:70:97:df:06:84:13:23:70: 9e:a2:38:b7:f2:1e:cc:a0:50:08:fc:61:ff:d9:89: c6:23:56:47:dc:21:96:15:74:9b:82:e9:b7:69:3c: fa:c9:bc:e9:d1:b3:7a:cb:d8:7a:d5:72:e4:c1:1d: 40:0f:59:29:47:e1:4e:39:c1:01:3d:f9:be:0b:72: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 5536 37725 sbgp-ipAddrBlock: critical IPv4: 102.218.128.0/24 102.218.130.0/24 102.219.22.0/24 102.220.125.0/24 Signature Algorithm: sha256WithRSAEncryption 84:75:65:f8:61:9d:a6:3a:05:78:67:5c:e6:0f:10:41:b2:cf: 34:72:2a:35:9d:58:d1:23:6d:c4:f2:7c:9a:f2:9f:fa:1e:b0: 0a:b0:13:43:8e:7e:b8:ea:fe:1e:14:c8:56:4a:7b:3c:09:17: e4:a1:72:50:46:bc:ed:9c:9c:95:89:0e:83:a4:c0:36:86:4c: c5:af:37:98:8d:0c:a0:13:08:44:f7:fe:9c:d2:19:f4:f0:af: a3:be:dc:2d:2e:67:44:1d:27:07:90:92:f3:69:3c:ed:65:1a: 48:2d:f6:3a:36:cf:0c:f3:5d:85:3c:99:89:ee:50:6a:13:88: c9:f9:f0:4d:47:30:e0:4d:49:6e:c7:aa:9f:16:d7:db:af:8e: cc:32:54:47:7d:d2:7b:21:b4:63:1c:79:60:26:ef:82:f5:11: 41:0e:3c:10:82:14:9d:73:41:09:aa:a8:91:7f:b2:85:ff:a1: 7c:90:fa:74:2c:be:d9:bc:7b:01:09:6d:d5:2d:6b:83:a7:ca: 42:df:39:01:4e:92:5c:77:02:f4:13:28:54:40:96:e8:07:eb: ff:ff:a7:85:4f:bc:97:58:b3:96:88:94:25:43:0d:3c:a3:b3: 15:be:cd:50:d8:f4:f0:09:48:a3:d8:12:17:41:f5:f8:11:38: 1e:fc:1e:e1 -----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgICPRcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzQ5NDNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkIzMjM0QUYxMTAvBgNVBAUTKDAzRkU1RDcyNkYzNEU5M0NFMUE5NUQ5 NDUxOEUxMjIzN0FDM0UyQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSY5MlYdwAO/ccFaXj6kL9aIgaa2OTkwifLn2ED0agWnyIYM2MBWB3RIr6Ffye RFzvZFbwcgwLjiIomEr56Rl6H2bRXJIHtVKN89QBZhF+RZMtQT9GxZeRb/eC8EGZ XfkZa2+0E/9fdKdxkHoHmfVHOWec73LKlaUYEsvRfs8N36FjOOtTe+2OyEB/ej9K gHde8LTGGnzvFCWEMSeCGO/m8/n6koaoJHSEvn9bBO40jYkkbKb7tdXZbBpwl98G hBMjcJ6iOLfyHsygUAj8Yf/ZicYjVkfcIZYVdJuC6bdpPPrJvOnRs3rL2HrVcuTB HUAPWSlH4U45wQE9+b4LchM9AgMBAAGjggMhMIIDHTAdBgNVHQ4EFgQUA/5dcm80 6TzhqV2UUY4SI3rD4sYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCMzIzNC85RTEyMUMwQzI0MTAx MUVDQjJEMDY5NTZEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QjMyMzQvOUUxMjFDMEMyNDEwMTFFQ0IyRDA2OTU2RDhBMDE0Q0UvQV81ZGNt ODA2VHpocVYyVVVZNFNJM3JENHNZLm1mdDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJ AgIVoAIDAJNdMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAZtqAAwQAZtqC AwQAZtsWAwQAZtx9MA0GCSqGSIb3DQEBCwUAA4IBAQCEdWX4YZ2mOgV4Z1zmDxBB ss80cio1nVjRI23E8nya8p/6HrAKsBNDjn646v4eFMhWSns8CRfkoXJQRrztnJyV iQ6DpMA2hkzFrzeYjQygEwhE9/6c0hn08K+jvtwtLmdEHScHkJLzaTztZRpILfY6 Ns8M812FPJmJ7lBqE4jJ+fBNRzDgTUlux6qfFtfbr47MMlRHfdJ7IbRjHHlgJu+C 9RFBDjwQghSdc0EJqqiRf7KF/6F8kPp0LL7ZvHsBCW3VLWuDp8pC3zkBTpJcdwL0 EyhUQJboB+v//6eFT7yXWLOWiJQlQw08o7MVvs1Q2PTwCUij2BIXQfX4ETge/B7h -----END CERTIFICATE-----Generated at Thu Jan 1 19:51:52 2026 by rpki-client