This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer File: Peh56gnhe4ORxyjbem-nsnOQS3o.cer (raw, json) Hash identifier: /1Cor7TEn+5SRDHG5AkEZAv920zrq3HLs07XhHDGXIU= Subject key identifier: 3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3DA4 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:11:52 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328720 IP: 102.222.108.0/22 IP: 2c0f:7400::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 11:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15780 (0x3da4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:11:52 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E6D28AF, serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:87:c4:e8:46:34:4f:2f:86:d8:ae:75:b4: 3a:b3:ce:71:83:00:d8:1e:c4:c1:3f:9b:e7:d8:c2: fa:eb:88:7c:01:5a:6e:cf:28:6a:f8:29:0d:3a:66: 7a:15:38:eb:2b:ea:38:14:2b:b3:2a:a1:0c:6a:eb: 0f:e4:9a:47:5e:91:7b:39:83:28:65:1d:53:5f:ae: 52:04:85:6a:b4:0c:90:b8:fc:b2:d8:e7:da:fc:f2: 13:4f:3b:8d:72:1e:7f:0d:ce:80:a5:4b:0a:4a:fe: 89:05:80:03:11:7d:36:a8:03:9b:20:76:89:b1:f7: 3b:b4:17:33:aa:7e:cf:15:3f:6c:ab:f8:6d:18:9b: da:0d:26:3e:2d:55:ce:93:0e:f0:37:d6:6c:c0:81: f4:fa:f4:9a:42:f1:d5:a0:ed:ba:4b:af:f9:34:ea: e6:a5:80:08:12:05:8a:82:9c:76:f3:6d:bd:2f:fb: f9:82:87:c4:a7:1f:c6:36:30:9d:02:41:f4:da:8a: bc:33:40:77:db:48:5e:fc:9d:3b:9a:82:ea:60:03: 17:7a:99:c9:f7:5c:54:10:1a:ea:52:ed:10:88:99: cc:c6:0a:ef:f5:28:cb:98:f3:e3:75:0a:c5:6a:d2: f5:c5:19:26:19:11:3f:32:93:87:ac:b6:cb:b5:a4: ae:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328720 sbgp-ipAddrBlock: critical IPv4: 102.222.108.0/22 IPv6: 2c0f:7400::/32 Signature Algorithm: sha256WithRSAEncryption be:9c:96:4d:c1:04:e7:eb:f3:3d:05:10:72:11:68:b0:bb:84: 51:ca:d2:58:62:3a:c1:dd:34:68:cc:83:c0:91:86:03:33:56: 08:20:ae:1e:25:0e:a5:5a:bd:18:13:3b:fe:4f:7b:6c:aa:00: d4:a4:c9:db:65:23:39:33:69:64:78:fc:51:66:f7:18:c8:fd: 4d:ac:fa:bc:4e:52:26:99:af:4c:25:b3:a2:a7:b6:7f:4e:fa: 36:58:26:6a:98:db:fb:78:92:f1:8f:b7:97:2d:17:83:21:55: 5e:ad:3a:b3:cc:68:77:32:10:de:3c:7e:17:ee:3e:9b:d2:10: 6b:a9:8b:79:c7:f8:0e:6e:54:31:37:9a:48:fd:c5:ec:89:c0: 6a:2b:3b:d4:f5:97:d4:96:ad:f8:4a:83:d3:e5:ec:1b:c0:7f: fa:df:55:de:03:5a:ec:b4:73:9a:92:fe:77:b9:e3:37:d2:eb: 48:7d:81:4d:1d:a1:a3:87:95:12:dc:fb:f4:90:8e:15:2f:48: a1:ac:4f:73:c8:31:75:d7:c5:0d:f0:92:5e:0f:05:8e:8e:ea: ad:b0:13:73:80:16:cb:bc:f1:cf:09:5a:b8:6d:de:79:37:71: 5b:fe:f1:bc:8a:36:1b:10:0c:8c:aa:cf:de:1a:36:5a:2a:05: 72:ee:86:f0 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPaQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDExNTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkU2RDI4QUYxMTAvBgNVBAUTKDNERTg3OUVBMDlFMTdCODM5MUM3MjhE QjdBNkZBN0IyNzM5MDRCN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfqofE6EY0Ty+G2K51tDqzznGDANgexME/m+fYwvrriHwBWm7PKGr4KQ06ZnoV OOsr6jgUK7MqoQxq6w/kmkdekXs5gyhlHVNfrlIEhWq0DJC4/LLY59r88hNPO41y Hn8NzoClSwpK/okFgAMRfTaoA5sgdomx9zu0FzOqfs8VP2yr+G0Ym9oNJj4tVc6T DvA31mzAgfT69JpC8dWg7bpLr/k06ualgAgSBYqCnHbzbb0v+/mCh8SnH8Y2MJ0C QfTairwzQHfbSF78nTuagupgAxd6mcn3XFQQGupS7RCImczGCu/1KMuY8+N1CsVq 0vXFGSYZET8yk4estsu1pK5pAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUPeh56gnh e4ORxyjbem+nsnOQS3owHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFNkQyOC8wMTkyQTdGMkVBMUQx MUVCQjhCNjlBMEJEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTZEMjgvMDE5MkE3RjJFQTFEMTFFQkI4QjY5QTBCRDhBMDE0Q0UvUGVoNTZn bmhlNE9SeHlqYmVtLW5zbk9RUzNvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBBAwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3mwwDQQCAAIwBwMF ACwPdAAwDQYJKoZIhvcNAQELBQADggEBAL6clk3BBOfr8z0FEHIRaLC7hFHK0lhi OsHdNGjMg8CRhgMzVgggrh4lDqVavRgTO/5Pe2yqANSkydtlIzkzaWR4/FFm9xjI /U2s+rxOUiaZr0wls6Kntn9O+jZYJmqY2/t4kvGPt5ctF4MhVV6tOrPMaHcyEN48 fhfuPpvSEGupi3nH+A5uVDE3mkj9xeyJwGorO9T1l9SWrfhKg9Pl7BvAf/rfVd4D Wuy0c5qS/ne54zfS60h9gU0doaOHlRLc+/SQjhUvSKGsT3PIMXXXxQ3wkl4PBY6O 6q2wE3OAFsu88c8JWrht3nk3cVv+8byKNhsQDIyqz94aNloqBXLuhvA= -----END CERTIFICATE-----Generated at Mon Jan 12 22:44:52 2026 by rpki-client