This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer File: GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer (raw, json) Hash identifier: Z1aF3BhMj3rNyz3mTZJjcxE7ALbChDeM24IOI9/hSIQ= Subject key identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B83 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:49:40 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.211.187.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15235 (0x3b83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:49:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3683B5BAF, serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:23:61:ac:f7:c8:d4:3d:44:57:08:10:cf: 74:0b:89:e8:96:af:cd:57:de:35:db:6e:c7:8d:0a: f2:39:00:bc:82:a7:ea:5f:5c:83:ac:9a:2f:0d:b9: 21:97:59:36:12:3a:4a:1a:21:8c:ae:09:7a:eb:eb: 57:90:dd:66:30:72:44:e4:50:de:b4:c8:70:db:d8: 5b:76:17:2d:21:74:85:3d:94:89:dc:f9:72:25:36: 80:51:31:5c:d4:2d:42:44:3c:f0:74:91:56:e2:47: 7e:24:63:d3:9a:7b:52:82:b8:86:f7:f0:db:9f:6c: f3:5b:8d:15:29:88:1f:dd:9b:d9:93:cd:e0:98:ea: 4f:bf:1b:9a:92:b3:08:11:51:c4:8a:90:e1:d4:6c: 17:93:10:7f:0c:98:04:2e:36:29:a2:96:11:f7:af: 75:44:f9:2f:d6:6e:0a:40:5b:c9:42:75:78:40:d5: 46:ce:04:e6:73:20:74:8b:87:f7:fd:ec:dd:4a:09: 08:e0:3d:0b:9d:a6:f0:c8:65:13:d9:21:d6:2e:e8: a0:9b:b3:a4:1e:ce:dc:cb:62:22:26:d4:41:dc:6c: 22:6e:75:98:b8:b1:d4:4c:ce:68:78:59:ae:75:2d: 40:8f:e8:d2:79:75:32:d9:34:9b:fd:b5:1b:e7:b3: 7c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft sbgp-ipAddrBlock: critical IPv4: 102.211.187.0/24 Signature Algorithm: sha256WithRSAEncryption 31:fc:1b:03:8a:ef:69:fc:fa:e7:e2:c1:7f:ab:e3:66:da:dc: 3c:39:16:b8:aa:e0:59:1a:27:a7:f1:ae:f5:42:84:eb:b4:5f: e0:11:b2:1c:ba:2c:b5:5b:43:a9:1e:12:f0:93:1b:8f:b1:37: 61:a0:1b:f7:dc:fb:86:50:3e:21:a6:67:8f:06:04:81:9c:68: 54:a2:8e:18:4a:8a:ce:c0:b7:f6:b8:30:79:2e:fb:ef:20:5c: 7b:1c:35:4f:ec:92:c4:4f:ca:ab:67:e6:74:a3:f6:5c:84:12: 26:39:8a:ec:27:cc:ed:df:a8:e8:fc:fe:41:b5:86:0f:0f:2d: 5e:53:e7:dd:d7:bf:b7:81:49:8a:a2:65:3e:e0:be:00:f2:88: 24:43:3b:cd:f8:ca:9b:77:da:f8:e3:cc:69:d6:1d:34:99:38: d9:4c:c9:cf:20:5c:61:46:b3:50:89:2b:89:ff:33:fb:21:53: e0:d2:90:0c:36:e9:6f:f3:d7:e0:f7:40:92:f8:50:7d:92:ce: 7b:02:56:ac:16:33:f0:ed:f0:67:68:ab:2a:b7:54:32:76:56: 97:81:e4:94:9f:09:cc:22:99:f4:5b:2c:49:9d:0d:f5:ba:19: c9:cc:a6:02:4b:dc:e6:2c:cb:3f:34:c6:b2:23:72:b8:47:b7: 9f:cb:6b:67 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgICO4MwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjQ5NDBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjgzQjVCQUYxMTAvBgNVBAUTKDE4MzUwNzJBMjJFRjlEOUM3Q0I4QjVB MzZDNjlFN0MzOTgxMzNDNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ0iNhrPfI1D1EVwgQz3QLieiWr81X3jXbbseNCvI5ALyCp+pfXIOsmi8NuSGX WTYSOkoaIYyuCXrr61eQ3WYwckTkUN60yHDb2Ft2Fy0hdIU9lInc+XIlNoBRMVzU LUJEPPB0kVbiR34kY9Oae1KCuIb38NufbPNbjRUpiB/dm9mTzeCY6k+/G5qSswgR UcSKkOHUbBeTEH8MmAQuNimilhH3r3VE+S/WbgpAW8lCdXhA1UbOBOZzIHSLh/f9 7N1KCQjgPQudpvDIZRPZIdYu6KCbs6QeztzLYiIm1EHcbCJudZi4sdRMzmh4Wa51 LUCP6NJ5dTLZNJv9tRvns3yJAgMBAAGjggLvMIIC6zAdBgNVHQ4EFgQUGDUHKiLv nZx8uLWjbGnnw5gTPGEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4M0I1Qi83QzNCRUYwODM1RDUx MUVFOUM4OUMzNDM0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODNCNUIvN0MzQkVGMDgzNUQ1MTFFRTlDODlDMzQzNEFEOUU2RkMvR0RVSEtp THZuWng4dUxXamJHbm53NWdUUEdFLm1mdDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGbTuzANBgkqhkiG9w0BAQsFAAOCAQEAMfwbA4rvafz65+LBf6vjZtrc PDkWuKrgWRonp/Gu9UKE67Rf4BGyHLostVtDqR4S8JMbj7E3YaAb99z7hlA+IaZn jwYEgZxoVKKOGEqKzsC39rgweS777yBcexw1T+ySxE/Kq2fmdKP2XIQSJjmK7CfM 7d+o6Pz+QbWGDw8tXlPn3de/t4FJiqJlPuC+APKIJEM7zfjKm3fa+OPMadYdNJk4 2UzJzyBcYUazUIkrif8z+yFT4NKQDDbpb/PX4PdAkvhQfZLOewJWrBYz8O3wZ2ir KrdUMnZWl4HklJ8JzCKZ9FssSZ0N9boZycymAkvc5izLPzTGsiNyuEe3n8trZw== -----END CERTIFICATE-----Generated at Thu Jan 1 21:01:30 2026 by rpki-client