This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer File: B7h9lPBEiTVmQTOd5pFkR32P-kM.cer (raw, json) Hash identifier: 4kxwPITHq75jnbi9ltyt0qUw6Vm0AvXxOtYhtBAONAw= Subject key identifier: 07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F58 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:23:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328427 IP: 102.68.136.0/22 IP: 2c0f:16c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 10 Jan 2026 15:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16216 (0x3f58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:23:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FE1EAAF, serialNumber=07B87D94F04489356641339DE69164477D8FFA43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:4c:20:5b:a2:7e:d8:5d:87:5a:c7:16:20: 39:75:e2:4f:ce:4a:be:24:2f:88:c6:52:28:eb:ef: 11:99:1b:6b:ba:ec:79:6b:62:47:bd:5c:ba:ea:b8: 9e:8d:c3:6c:53:69:f9:f8:b5:2d:53:f6:00:d8:5d: 36:9f:1c:35:e4:cd:41:04:91:32:f6:9c:aa:c6:6b: eb:28:04:00:d2:86:4b:74:e9:f5:04:2a:75:ac:14: b5:ee:bf:f7:6a:96:87:f5:e2:12:5d:d6:22:0e:2b: 1c:61:51:8e:b8:76:3b:5c:6f:35:c9:93:6a:18:e6: f8:0d:ef:cb:32:12:47:bf:85:2c:85:5b:a4:fa:89: 30:6e:60:db:7e:3b:18:b6:1e:65:9e:67:97:7b:b7: f3:c8:ac:4c:e3:6c:de:44:14:d4:fc:9b:fa:a1:e3: f7:68:12:02:2d:17:e1:de:af:fc:95:f6:0b:e7:bc: b2:00:ca:3d:83:29:fd:68:26:44:8b:cb:f7:92:27: 86:f1:26:e5:8e:14:a4:b1:0d:e0:b3:22:d0:15:fd: f9:2e:8a:7b:0f:66:75:f6:98:6c:23:5f:90:76:15: 79:36:2d:0b:5d:7d:1c:a5:cb:1c:0e:db:7d:8b:f8: 1c:19:9e:ef:b5:5b:1e:cf:25:02:26:cf:23:51:49: 81:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328427 sbgp-ipAddrBlock: critical IPv4: 102.68.136.0/22 IPv6: 2c0f:16c0::/32 Signature Algorithm: sha256WithRSAEncryption c6:f4:b1:76:74:ad:18:91:0c:6e:60:2f:a3:64:7b:24:d6:81: 78:1d:f1:bf:21:9d:9a:fa:02:07:bd:3b:0d:28:13:04:08:36: ea:95:90:0e:1b:91:24:32:92:4a:9c:a2:9c:51:30:be:06:73: d5:d7:11:6d:c8:da:57:78:1c:a4:54:fd:c8:05:25:e3:6b:99: aa:b5:cb:b7:24:2a:c8:8f:fa:1d:92:87:71:15:19:c6:d6:3d: cc:c7:7c:98:93:b6:d3:36:e7:6e:55:3d:cd:fd:f5:2d:90:78: d3:82:df:19:25:97:de:f3:de:3d:3c:e6:89:a9:9f:88:69:ef: 13:61:22:b5:24:32:b3:ad:94:ed:f8:ab:56:14:49:92:52:e5: cf:db:0a:56:0f:d5:4d:8c:1c:9c:43:b0:6c:ec:0b:f4:a1:af: 6f:55:e1:c4:a3:1c:52:2c:76:86:5f:6b:b8:1a:18:56:0b:b4: 19:e9:33:65:fd:58:13:2d:a2:74:d2:34:8d:b3:1b:ba:07:f2: 09:25:6a:ed:3c:f4:27:bf:34:c0:d3:4c:13:21:11:d9:d7:8e: 6d:12:a1:cc:c4:bb:ef:42:a3:98:e2:fc:31:a5:1c:30:b8:98: b2:de:33:00:b9:a8:52:bc:71:af:17:9f:a6:c7:be:1f:e9:25: 4c:75:48:85 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICP1gwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTIzMTVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkZFMUVBQUYxMTAvBgNVBAUTKDA3Qjg3RDk0RjA0NDg5MzU2NjQxMzM5 REU2OTE2NDQ3N0Q4RkZBNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWqkwgW6J+2F2HWscWIDl14k/OSr4kL4jGUijr7xGZG2u67HlrYke9XLrquJ6N w2xTafn4tS1T9gDYXTafHDXkzUEEkTL2nKrGa+soBADShkt06fUEKnWsFLXuv/dq lof14hJd1iIOKxxhUY64djtcbzXJk2oY5vgN78syEke/hSyFW6T6iTBuYNt+Oxi2 HmWeZ5d7t/PIrEzjbN5EFNT8m/qh4/doEgItF+Her/yV9gvnvLIAyj2DKf1oJkSL y/eSJ4bxJuWOFKSxDeCzItAV/fkuinsPZnX2mGwjX5B2FXk2LQtdfRylyxwO232L +BwZnu+1Wx7PJQImzyNRSYG7AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUB7h9lPBE iTVmQTOd5pFkR32P+kMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGRTFFQS8wNzgxQzc3MDgwNkYx MUVFQURDOUVENTg0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RkUxRUEvMDc4MUM3NzA4MDZGMTFFRUFEQzlFRDU4NEFEOUU2RkMvQjdoOWxQ QkVpVFZtUVRPZDVwRmtSMzJQLWtNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAuswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmRIgwDQQCAAIwBwMF ACwPFsAwDQYJKoZIhvcNAQELBQADggEBAMb0sXZ0rRiRDG5gL6NkeyTWgXgd8b8h nZr6Age9Ow0oEwQINuqVkA4bkSQykkqcopxRML4Gc9XXEW3I2ld4HKRU/cgFJeNr maq1y7ckKsiP+h2Sh3EVGcbWPczHfJiTttM2525VPc399S2QeNOC3xkll97z3j08 5ompn4hp7xNhIrUkMrOtlO34q1YUSZJS5c/bClYP1U2MHJxDsGzsC/Shr29V4cSj HFIsdoZfa7gaGFYLtBnpM2X9WBMtonTSNI2zG7oH8gklau089Ce/NMDTTBMhEdnX jm0SoczEu+9Co5ji/DGlHDC4mLLeMwC5qFK8ca8Xn6bHvh/pJUx1SIU= -----END CERTIFICATE-----Generated at Thu Jan 8 23:59:48 2026 by rpki-client