This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer File: Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer (raw, json) Hash identifier: 0s1B3am95X5iE9l9mvl05LS+9FrjRbgaUUOV9+UaWYU= Subject key identifier: 1B:2E:71:DA:04:AE:09:10:39:45:11:7F:90:76:C7:F8:E1:99:24:3C Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CF7 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:44:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328583 IP: 102.36.140.0/22 IP: 102.206.220.0/22 IP: 102.213.148.0/22 IP: 2c0f:6140::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15607 (0x3cf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:44:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36AC9F1AF, serialNumber=1B2E71DA04AE09103945117F9076C7F8E199243C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:6f:fc:97:18:e1:13:ef:37:9e:75:36:1b: 65:90:f1:5f:99:6e:c1:60:5b:5a:44:86:24:dc:15: 3d:49:5d:ea:e6:f5:02:34:31:d2:0e:c5:06:4d:4a: 25:f7:5c:2b:7a:b1:84:db:3d:74:3b:36:8b:7a:7c: ed:68:4c:15:58:70:da:07:88:b7:9e:a9:c2:d8:a4: 42:e5:11:16:ac:d9:85:65:20:0d:86:8d:4f:be:de: 81:3b:25:10:d6:6e:f3:d8:01:ec:90:2c:b9:94:62: 3d:00:59:92:15:32:5a:0f:2f:b8:e4:ba:d1:bf:69: fc:71:76:f0:62:44:9c:3d:42:d9:6b:74:d5:66:c6: 72:d2:d5:b4:cf:39:23:7b:d8:b1:18:3d:be:3b:08: f6:0b:f6:db:a7:7b:2c:c6:21:f1:d4:f2:b7:8a:74: f9:d5:a0:fd:f2:19:03:7f:79:a7:eb:41:0a:be:f9: 75:1c:c3:b8:46:03:42:89:b4:18:bb:63:65:5b:6b: 6b:0d:b9:13:83:27:8a:d4:b3:ae:4f:b3:70:43:9e: 33:95:51:38:12:a4:dd:eb:ec:a0:de:a1:8a:7e:ec: cb:97:3b:a2:1d:da:95:ff:5b:b6:b2:24:11:d9:00: 7f:bc:ba:ed:63:74:fa:01:6e:e7:e8:e6:f6:57:67: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2E:71:DA:04:AE:09:10:39:45:11:7F:90:76:C7:F8:E1:99:24:3C X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328583 sbgp-ipAddrBlock: critical IPv4: 102.36.140.0/22 102.206.220.0/22 102.213.148.0/22 IPv6: 2c0f:6140::/32 Signature Algorithm: sha256WithRSAEncryption 0a:64:af:b0:f3:32:e0:e5:fb:1f:b2:d6:91:8d:b7:ac:99:4c: 74:1f:02:d5:61:4a:e3:f2:35:1d:92:1a:a2:0f:d2:65:62:d0: 58:81:51:85:46:a7:5b:ed:d4:b0:1e:bc:4c:28:2b:2c:59:49: 77:44:af:c1:fc:1b:f0:3e:a1:6e:cb:49:7b:ad:81:13:8d:6a: 9d:e4:8a:4f:07:e8:6b:5f:d8:47:83:4d:11:23:f9:95:7a:01: 4e:79:5f:95:c2:d1:65:c8:a1:22:8d:3a:1e:9b:48:fa:7c:7a: 6d:7e:92:e1:90:9f:34:0e:bb:bf:f4:2b:11:68:7f:25:ee:c5: b7:69:74:91:f0:c0:12:04:85:4f:df:56:56:6d:5a:81:10:ca: 20:69:d5:01:4b:dc:3c:ed:c6:cc:9f:89:b3:f1:3c:91:7e:c0: 75:05:1b:c0:d6:77:04:04:6f:27:1f:ce:8b:83:95:74:d9:d4: 30:cc:c3:eb:87:52:43:ac:d5:7c:4b:c5:b6:c2:d5:20:5e:78: 5c:a9:ad:aa:c6:8f:20:ba:42:17:9d:e6:38:15:3c:c7:b1:bc: 54:ed:a0:c3:09:d0:62:37:c1:1a:ae:44:81:2d:b4:60:00:a8: e9:ee:31:6c:19:3f:d8:38:0d:fe:79:50:63:fc:98:06:8c:4c: 6b:b1:de:d5 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICPPcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzQ0MjBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkFDOUYxQUYxMTAvBgNVBAUTKDFCMkU3MURBMDRBRTA5MTAzOTQ1MTE3 RjkwNzZDN0Y4RTE5OTI0M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfqm/8lxjhE+83nnU2G2WQ8V+ZbsFgW1pEhiTcFT1JXerm9QI0MdIOxQZNSiX3 XCt6sYTbPXQ7Not6fO1oTBVYcNoHiLeeqcLYpELlERas2YVlIA2GjU++3oE7JRDW bvPYAeyQLLmUYj0AWZIVMloPL7jkutG/afxxdvBiRJw9QtlrdNVmxnLS1bTPOSN7 2LEYPb47CPYL9tuneyzGIfHU8reKdPnVoP3yGQN/eafrQQq++XUcw7hGA0KJtBi7 Y2Vba2sNuRODJ4rUs65Ps3BDnjOVUTgSpN3r7KDeoYp+7MuXO6Id2pX/W7ayJBHZ AH+8uu1jdPoBbufo5vZXZ/xrAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUGy5x2gSu CRA5RRF/kHbH+OGZJDwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBQzlGMS85MUQyNDBBNjY5NzMx MUVGQUZBQzI3Nzg3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QUM5RjEvOTFEMjQwQTY2OTczMTFFRkFGQUMyNzc4NzYyRTk1MUEvR3k1eDJn U3VDUkE1UlJGX2tIYkgtT0daSkR3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA4cwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJmJIwDBAJmztwDBAJm 1ZQwDQQCAAIwBwMFACwPYUAwDQYJKoZIhvcNAQELBQADggEBAApkr7DzMuDl+x+y 1pGNt6yZTHQfAtVhSuPyNR2SGqIP0mVi0FiBUYVGp1vt1LAevEwoKyxZSXdEr8H8 G/A+oW7LSXutgRONap3kik8H6Gtf2EeDTREj+ZV6AU55X5XC0WXIoSKNOh6bSPp8 em1+kuGQnzQOu7/0KxFofyXuxbdpdJHwwBIEhU/fVlZtWoEQyiBp1QFL3Dztxsyf ibPxPJF+wHUFG8DWdwQEbycfzouDlXTZ1DDMw+uHUkOs1XxLxbbC1SBeeFyprarG jyC6Qhed5jgVPMexvFTtoMMJ0GI3wRquRIEttGAAqOnuMWwZP9g4Df55UGP8mAaM TGux3tU= -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:52 2026 by rpki-client