This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer File: DOoR1fD2WesQDyt_sejINrwlz5g.cer (raw, json) Hash identifier: RDjESaAw51ukdByHwN76dLjUI9BD+9kyeUozq7dAjRQ= Subject key identifier: 0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3DA2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:11:34 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328400 IP: 154.66.112.0/22 IP: 2c0f:ece0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15778 (0x3da2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:11:34 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36C33BBAF, serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:9a:b6:b4:59:0f:6c:1a:fb:ef:df:87:0c: cb:52:f1:48:5a:33:50:5a:9a:bc:c9:4a:a1:df:cc: d3:23:a7:31:b7:7d:eb:09:8b:a5:75:fd:85:2f:b6: 89:3a:7a:8d:f4:de:4b:df:36:a0:97:7b:98:d9:9b: 3d:db:48:f2:40:e5:49:4a:1a:c5:6d:61:de:5f:6b: 96:4a:0a:29:fc:cb:e3:03:2e:ee:3c:4d:4c:ca:4d: a4:3e:12:56:5b:6f:af:f4:aa:d0:32:06:4d:9d:f5: 25:4c:07:be:da:03:cd:cf:3b:9c:2f:ad:42:30:7e: 94:c2:d1:71:b7:d4:28:b8:c5:3f:d5:d7:88:82:5d: b6:69:4d:4c:be:f0:53:c4:d0:77:df:62:fd:2a:2b: 49:69:67:7f:d4:ff:9f:84:c8:ed:b3:b6:56:db:c7: ad:ae:06:ef:bf:28:38:3d:7b:95:b5:1a:46:44:16: e6:61:74:7d:9c:8a:b7:4f:a7:12:e3:35:20:e3:1c: 10:1c:8a:4b:87:56:e7:9b:45:d6:dc:a1:34:6b:f1: 3a:0a:a8:6a:0f:35:ad:70:fa:63:07:fe:24:35:ec: 6e:77:0f:1c:14:d0:2b:54:ae:82:63:4b:4d:7d:e4: 8d:50:9d:bf:dd:9a:1a:44:bd:3b:94:ec:05:d5:b5: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328400 sbgp-ipAddrBlock: critical IPv4: 154.66.112.0/22 IPv6: 2c0f:ece0::/32 Signature Algorithm: sha256WithRSAEncryption 50:93:10:3c:bd:f2:b6:bf:8e:75:de:b2:bf:25:cb:f5:3f:1d: b4:44:95:27:d0:3f:7c:af:3b:b0:c6:47:f2:34:c3:dc:82:37: 8c:06:ae:f9:fd:cd:57:40:44:05:e4:c8:db:fd:89:b6:54:0a: 4b:c7:b9:61:ae:07:87:f6:36:9b:07:18:e1:e6:ef:57:d5:5a: ba:af:c3:ab:77:c2:74:2a:53:60:e0:bc:05:21:6e:db:04:0c: aa:14:55:c2:62:6c:98:68:cc:ce:90:84:91:dc:45:96:d5:28: 74:f5:55:ff:de:03:7e:b7:9f:ed:cd:ee:e3:ca:c7:93:54:e7: 20:37:88:b4:16:99:ab:90:8b:ef:61:7f:fe:90:a5:1f:b3:13: 29:d8:1e:f9:97:aa:fc:ea:b4:dd:f4:87:38:03:ee:c2:a1:8c: d7:df:52:a7:f9:ff:69:51:f9:ad:55:b9:46:3c:bf:13:06:c9: 70:8a:4d:be:13:6f:0a:4d:80:95:58:05:4d:d5:6a:ab:3f:9e: 92:c2:8c:32:65:c5:6f:52:ff:32:75:66:bb:2c:a8:f8:b2:ee: d6:f3:db:d6:c1:f0:8d:ed:48:d2:0c:c5:21:22:36:cc:9f:d9: 39:06:96:59:b4:f3:60:70:51:11:6c:63:00:31:ad:64:d2:55: 51:1d:09:2e -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPaIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDExMzRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkMzM0JCQUYxMTAvBgNVBAUTKDBDRUExMUQ1RjBGNjU5RUIxMDBGMkI3 RkIxRThDODM2QkMyNUNGOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJB5q2tFkPbBr779+HDMtS8UhaM1BamrzJSqHfzNMjpzG3fesJi6V1/YUvtok6 eo303kvfNqCXe5jZmz3bSPJA5UlKGsVtYd5fa5ZKCin8y+MDLu48TUzKTaQ+ElZb b6/0qtAyBk2d9SVMB77aA83PO5wvrUIwfpTC0XG31Ci4xT/V14iCXbZpTUy+8FPE 0HffYv0qK0lpZ3/U/5+EyO2ztlbbx62uBu+/KDg9e5W1GkZEFuZhdH2cirdPpxLj NSDjHBAcikuHVuebRdbcoTRr8ToKqGoPNa1w+mMH/iQ17G53DxwU0CtUroJjS019 5I1Qnb/dmhpEvTuU7AXVtSWVAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUDOoR1fD2 WesQDyt/sejINrwlz5gwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDMzNCQi9CNkYyMTBGMkM1OUQx MUVFOUI4Q0NGQjY3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QzMzQkIvQjZGMjEwRjJDNTlEMTFFRTlCOENDRkI2Nzc1NDEyRTYvRE9vUjFm RDJXZXNRRHl0X3NlaklOcndsejVnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAtAwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKaQnAwDQQCAAIwBwMF ACwP7OAwDQYJKoZIhvcNAQELBQADggEBAFCTEDy98ra/jnXesr8ly/U/HbRElSfQ P3yvO7DGR/I0w9yCN4wGrvn9zVdARAXkyNv9ibZUCkvHuWGuB4f2NpsHGOHm71fV Wrqvw6t3wnQqU2DgvAUhbtsEDKoUVcJibJhozM6QhJHcRZbVKHT1Vf/eA363n+3N 7uPKx5NU5yA3iLQWmauQi+9hf/6QpR+zEynYHvmXqvzqtN30hzgD7sKhjNffUqf5 /2lR+a1VuUY8vxMGyXCKTb4TbwpNgJVYBU3Vaqs/npLCjDJlxW9S/zJ1ZrssqPiy 7tbz29bB8I3tSNIMxSEiNsyf2TkGllm082BwURFsYwAxrWTSVVEdCS4= -----END CERTIFICATE-----Generated at Mon Jan 12 01:22:35 2026 by rpki-client