This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer File: NSunHRHXakg8nsebSWRvi0XYOLo.cer (raw, json) Hash identifier: iQoMmhv7LDJexc/RHcIHBizOpiIInZxwPWDfpP3Gab8= Subject key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 388B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:56:17 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327726 IP: 154.72.4.0/22 IP: 2c0f:f700::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 08 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14475 (0x388b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:56:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3633396AF, serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cd:73:d8:c3:c8:f3:b9:b9:c6:a4:c5:e3:ba: 6d:79:a6:56:a6:c3:bb:f2:53:33:ac:ec:a5:fb:3e: a2:58:79:86:a9:75:d5:97:f5:52:6f:70:6b:f6:73: 67:6e:07:45:15:12:f0:98:0d:3e:90:f5:ad:32:fa: 44:5d:37:0d:6d:a6:37:d0:b6:82:5d:48:76:f4:d9: 03:2c:9f:11:b4:c7:1c:ab:4f:23:a5:4b:cf:01:c1: c1:12:ee:18:91:cd:4c:c6:79:fe:37:d5:2b:e2:b7: 52:60:75:73:cd:12:ac:bb:ab:6c:d0:66:fe:fb:e3: e0:d9:e3:cc:8c:77:95:c6:0b:ca:89:0a:11:aa:1b: 48:47:a0:27:1d:ad:d6:48:e5:fc:38:d2:6f:30:e1: 79:9b:1f:95:32:a2:ab:3d:e2:be:59:fa:be:78:6e: 5a:b1:64:7c:38:67:89:d0:9a:ad:72:ed:9f:61:86: 1f:87:cc:07:67:e0:e0:57:4e:c5:cd:81:1d:22:c9: 29:c1:da:61:97:3b:fa:9d:7b:55:16:46:81:c4:b6: 3d:21:97:04:04:68:5d:e0:67:c9:b3:48:f7:05:23: 73:cd:5f:88:1f:c9:68:b0:5d:69:96:6b:c0:93:92: 1b:f9:0d:4e:ca:43:c8:f2:89:1c:52:18:1a:46:57: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327726 sbgp-ipAddrBlock: critical IPv4: 154.72.4.0/22 IPv6: 2c0f:f700::/32 Signature Algorithm: sha256WithRSAEncryption 9c:cc:34:37:00:6a:a0:68:59:2a:18:f3:32:08:46:a1:b3:e7: d4:39:56:91:ad:36:59:a4:f0:55:05:dd:d2:c8:67:2a:49:81: 26:7d:e2:65:c4:6c:cc:55:96:a4:52:d5:08:84:91:0f:3e:5d: 8e:bc:60:dd:f8:80:26:d0:e1:42:bf:74:b9:58:c6:ce:6c:f2: 57:c7:50:24:b3:11:5f:72:d2:fb:8b:d8:3d:43:95:c6:da:08: d3:d6:2e:49:b6:8f:11:7c:6c:c0:da:4f:0e:51:67:81:58:ac: b5:27:c5:b7:f4:44:cb:e0:d2:3a:d1:b1:e4:0b:e7:a0:d4:32: 48:8f:5e:46:15:04:fb:b7:90:ef:4d:e1:63:04:0a:56:63:78: d4:0a:a7:c9:4c:89:30:67:2b:39:2d:f3:df:e3:84:0e:68:f7: 40:77:7f:36:c5:d7:53:33:28:6c:ee:0c:37:79:95:ef:e0:77: 33:08:1c:c9:83:63:68:bb:8f:08:0d:81:03:2b:99:90:2b:9e: 00:ae:af:95:3d:5e:db:c3:04:de:77:5c:82:c7:68:11:d6:22: 18:0c:1b:bc:c6:41:6d:8a:90:37:2c:3a:64:98:b1:38:a1:1a: f3:aa:1d:bc:48:f5:26:10:98:d7:d5:2d:8d:a5:ee:08:e3:fe: fd:90:9e:96 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOIswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDU2MTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjMzMzk2QUYxMTAvBgNVBAUTKDM1MkJBNzFEMTFENzZBNDgzQzlFQzc5 QjQ5NjQ2RjhCNDVEODM4QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLzXPYw8jzubnGpMXjum15plamw7vyUzOs7KX7PqJYeYapddWX9VJvcGv2c2du B0UVEvCYDT6Q9a0y+kRdNw1tpjfQtoJdSHb02QMsnxG0xxyrTyOlS88BwcES7hiR zUzGef431Svit1JgdXPNEqy7q2zQZv774+DZ48yMd5XGC8qJChGqG0hHoCcdrdZI 5fw40m8w4XmbH5Uyoqs94r5Z+r54blqxZHw4Z4nQmq1y7Z9hhh+HzAdn4OBXTsXN gR0iySnB2mGXO/qde1UWRoHEtj0hlwQEaF3gZ8mzSPcFI3PNX4gfyWiwXWmWa8CT khv5DU7KQ8jyiRxSGBpGV6MfAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUNSunHRHX akg8nsebSWRvi0XYOLowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzMzM5Ni9GQzU2NzUwODA2Nzcx MUVDOUQxNjNENUFEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MzMzOTYvRkM1Njc1MDgwNjc3MTFFQzlEMTYzRDVBRDhBMDE0Q0UvTlN1bkhS SFhha2c4bnNlYlNXUnZpMFhZT0xvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAC4wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKaSAQwDQQCAAIwBwMF ACwP9wAwDQYJKoZIhvcNAQELBQADggEBAJzMNDcAaqBoWSoY8zIIRqGz59Q5VpGt Nlmk8FUF3dLIZypJgSZ94mXEbMxVlqRS1QiEkQ8+XY68YN34gCbQ4UK/dLlYxs5s 8lfHUCSzEV9y0vuL2D1DlcbaCNPWLkm2jxF8bMDaTw5RZ4FYrLUnxbf0RMvg0jrR seQL56DUMkiPXkYVBPu3kO9N4WMEClZjeNQKp8lMiTBnKzkt89/jhA5o90B3fzbF 11MzKGzuDDd5le/gdzMIHMmDY2i7jwgNgQMrmZArngCur5U9XtvDBN53XILHaBHW IhgMG7zGQW2KkDcsOmSYsTihGvOqHbxI9SYQmNfVLY2l7gjj/v2QnpY= -----END CERTIFICATE-----Generated at Tue Jan 6 07:43:33 2026 by rpki-client