This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer File: PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer (raw, json) Hash identifier: DK2bs/3UThC9WoBn+8GJ15yuwcAgmLDzBg6cgPo6mcg= Subject key identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 38DA Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:08:29 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327767 IP: 102.218.132.0/22 IP: 154.73.32.0/22 IP: 2c0f:f720::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14554 (0x38da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:08:29 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A6DD7AF, serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:a0:79:b9:d8:19:a8:23:cd:40:01:e1:32: d1:d7:65:14:ee:af:a9:9f:f8:69:ce:f6:f1:45:44: 09:9b:6d:35:d6:2d:b8:e7:20:c3:bc:2c:13:e2:91: 08:7d:e5:66:df:49:7d:71:1d:b4:5e:b5:9f:08:df: c5:49:34:0c:10:f2:3f:d1:71:ee:60:3d:41:ca:5f: 7f:e3:26:54:86:af:ae:4a:67:0d:be:31:de:bf:96: 70:40:86:2f:8d:be:d5:d8:52:7d:ae:64:47:f2:5b: 43:e7:25:bb:ff:f8:a2:bb:1d:b9:79:99:0e:17:7e: cf:45:c0:86:86:39:e2:91:4d:c3:b3:6e:ba:09:79: c8:01:32:f0:36:c8:14:26:f7:24:17:b1:eb:13:b6: e0:a2:24:29:1f:51:df:c6:65:f2:97:1b:73:a5:e7: c6:f4:dc:80:33:a0:f7:51:46:70:17:98:da:e1:87: 1a:88:da:54:94:e8:6b:bf:83:cf:c7:48:fd:26:ae: 9f:56:2a:6e:35:ca:07:33:9d:2e:6f:6d:ba:91:60: 3e:b2:76:bd:2b:58:d4:10:05:66:87:1b:4e:c5:a8: 15:87:c2:c7:66:e8:6c:29:52:ce:a1:ed:3e:05:5e: 14:28:5d:6d:1f:51:54:f6:12:be:26:44:a4:85:8b: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327767 sbgp-ipAddrBlock: critical IPv4: 102.218.132.0/22 154.73.32.0/22 IPv6: 2c0f:f720::/32 Signature Algorithm: sha256WithRSAEncryption 23:5f:57:6b:9f:c9:c1:c4:1b:ea:69:f8:51:61:b6:56:e4:af: 66:96:bd:c0:d6:96:f0:c0:35:58:ef:3d:24:b0:02:27:54:26: 8e:41:8f:e4:6d:43:87:f7:46:6e:4b:8a:24:c7:c8:dc:9d:a6: ec:25:eb:2b:30:31:d9:be:30:cb:1b:c7:72:2d:a4:50:ac:9f: 03:60:3b:45:b8:f5:d1:81:5b:d6:55:f5:c0:55:4d:36:ce:44: 1f:66:31:f8:56:99:6e:e2:f3:85:cb:3d:5b:6c:27:72:ac:41: d6:41:3f:9a:0c:08:04:39:30:cf:dd:c5:62:07:f1:59:2a:bd: 80:74:73:a0:30:06:17:c4:68:e4:75:00:42:79:9b:29:7f:fe: 0f:d2:24:75:d1:a8:3e:9d:37:13:a3:d4:42:31:a9:cd:68:d9: 98:0f:2d:2f:4d:26:44:21:6a:db:4f:95:dd:f3:a7:a2:f5:c1: 62:0d:e9:12:77:ac:58:c4:b7:86:20:1f:da:90:23:40:cb:93: f1:dc:95:6f:f9:fe:f0:da:ea:1f:e1:6f:90:31:ed:bd:9e:97: a3:5d:58:cb:92:a5:27:71:74:f2:93:fa:f4:2a:80:87:36:2a: 9b:49:6f:1c:98:ac:05:55:d3:d8:ca:23:37:6e:ef:2a:52:a8: 2a:81:dd:98 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICONowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTA4MjlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkE2REQ3QUYxMTAvBgNVBAUTKDNFMjI2QjIwQzJFMTc2OTg4MEZDNjhF MUREMzM1QUQxN0EwQUNFQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr66B5udgZqCPNQAHhMtHXZRTur6mf+GnO9vFFRAmbbTXWLbjnIMO8LBPikQh9 5WbfSX1xHbRetZ8I38VJNAwQ8j/Rce5gPUHKX3/jJlSGr65KZw2+Md6/lnBAhi+N vtXYUn2uZEfyW0PnJbv/+KK7Hbl5mQ4Xfs9FwIaGOeKRTcOzbroJecgBMvA2yBQm 9yQXsesTtuCiJCkfUd/GZfKXG3Ol58b03IAzoPdRRnAXmNrhhxqI2lSU6Gu/g8/H SP0mrp9WKm41ygcznS5vbbqRYD6ydr0rWNQQBWaHG07FqBWHwsdm6GwpUs6h7T4F XhQoXW0fUVT2Er4mRKSFi4MZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUPiJrIMLh dpiA/Gjh3TNa0XoKzqMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBNkRENy81Q0I3QzIyRTU4N0Yx MUU1QkY5NDI3NDlGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTZERDcvNUNCN0MyMkU1ODdGMTFFNUJGOTQyNzQ5RjhBRUEyMjgvUGlKcklN TGhkcGlBX0dqaDNUTmEwWG9LenFNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAFcwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm2oQDBAKaSSAwDQQC AAIwBwMFACwP9yAwDQYJKoZIhvcNAQELBQADggEBACNfV2ufycHEG+pp+FFhtlbk r2aWvcDWlvDANVjvPSSwAidUJo5Bj+RtQ4f3Rm5LiiTHyNydpuwl6yswMdm+MMsb x3ItpFCsnwNgO0W49dGBW9ZV9cBVTTbORB9mMfhWmW7i84XLPVtsJ3KsQdZBP5oM CAQ5MM/dxWIH8VkqvYB0c6AwBhfEaOR1AEJ5myl//g/SJHXRqD6dNxOj1EIxqc1o 2ZgPLS9NJkQhattPld3zp6L1wWIN6RJ3rFjEt4YgH9qQI0DLk/HclW/5/vDa6h/h b5Ax7b2el6NdWMuSpSdxdPKT+vQqgIc2KptJbxyYrAVV09jKIzdu7ypSqCqB3Zg= -----END CERTIFICATE-----Generated at Mon Jan 12 02:16:51 2026 by rpki-client