This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer File: Rd8OHH-lNNrKIJKaup5jKPur-1E.cer (raw, json) Hash identifier: 8UEdFoSmfqOK0AvNa0ta/f6oOJ8goWOpsZQsaZ6PLV0= Subject key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3ED0 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:59:53 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329121 IP: 102.214.232.0/22 IP: 2c0f:7080::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 09 Jan 2026 00:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16080 (0x3ed0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:59:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36EE1C1AF, serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:f4:8a:29:ad:6f:82:15:02:67:9a:3f:33: 6e:b3:1e:2a:53:11:13:11:8b:78:0c:ee:46:31:cb: 28:4c:b0:4e:59:e2:b4:22:50:2a:02:b1:a0:75:4a: df:01:e8:b0:29:cb:3e:94:84:3b:33:5a:44:72:96: 7a:0b:a1:b2:d0:80:db:5e:b5:81:26:91:18:07:14: 63:e9:13:f1:5d:e5:8f:e2:7a:c3:b6:c9:8a:36:68: 92:f4:cb:c9:24:db:e4:8b:cb:8e:80:6d:ce:34:92: b7:ef:1e:95:7d:37:e8:b9:a5:f8:be:78:c9:96:04: c3:3e:44:e6:e3:71:67:16:e2:f2:92:e4:29:7a:68: d4:6d:b2:0e:b3:75:db:7e:30:5d:2b:29:76:58:5d: 25:79:1f:81:8b:ee:68:89:b0:1b:a1:ee:ea:81:a7: f1:99:af:5a:86:6b:35:c3:28:f0:78:33:04:86:2f: db:53:a1:9d:ca:2f:f1:1c:60:63:be:d1:0c:27:46: 5e:2a:2d:69:de:ea:93:fe:67:5b:11:78:a0:62:9b: 4f:e3:cc:51:cc:57:60:2d:69:d7:46:09:35:98:e0: 2b:85:3b:8b:c7:4f:86:94:d9:cd:9f:c4:90:55:f3: e2:be:43:b2:12:ad:59:10:b3:08:4f:94:b3:38:d7: a7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329121 sbgp-ipAddrBlock: critical IPv4: 102.214.232.0/22 IPv6: 2c0f:7080::/32 Signature Algorithm: sha256WithRSAEncryption bd:ef:06:aa:ac:34:45:2f:72:c5:dd:26:e0:c4:8b:02:51:7d: 4d:ab:bd:c1:49:18:bf:02:6a:db:dd:05:d2:ab:7f:0b:d7:a4: c9:37:c8:aa:eb:e5:ef:7e:97:a2:31:28:dd:f9:b1:cb:ea:25: 89:f5:b0:a8:a9:20:ab:54:55:06:a6:43:05:ed:87:83:09:cf: 9e:38:9b:44:37:48:b1:de:cc:6b:c4:ce:5e:80:49:d8:91:cc: f8:3d:c8:8c:16:b4:6e:d1:43:8e:17:6c:57:7f:62:92:37:f9: a3:32:b4:71:ef:b8:95:37:9b:28:e3:20:42:c2:0e:4c:ea:b6: 8b:f7:1b:d1:4c:86:46:38:51:4f:1c:73:3e:02:c8:75:30:3b: 55:6b:f7:b7:b4:e8:99:92:05:3a:8f:86:ea:59:8d:45:a6:19: fc:95:6e:36:e3:c8:14:5f:ca:04:f9:6c:bc:1b:88:ca:30:a2: e5:31:3e:22:b4:cd:76:cf:24:0d:e1:68:3e:4d:54:ad:bc:58: 59:5f:8f:36:e4:73:6b:35:a6:6a:86:d3:8f:a3:8f:ea:0e:8d: 02:ef:20:58:21:25:71:b4:99:55:bf:c9:3e:d2:fa:16:f6:fd: 44:21:ec:a9:b7:e3:78:c9:0f:f7:39:02:2a:d6:b7:95:84:56: 80:78:a1:3d -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPtAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDU5NTNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkVFMUMxQUYxMTAvBgNVBAUTKDQ1REYwRTFDN0ZBNTM0REFDQTIwOTI5 QUJBOUU2MzI4RkJBQkZCNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnP/SKKa1vghUCZ5o/M26zHipTERMRi3gM7kYxyyhMsE5Z4rQiUCoCsaB1St8B 6LApyz6UhDszWkRylnoLobLQgNtetYEmkRgHFGPpE/Fd5Y/iesO2yYo2aJL0y8kk 2+SLy46Abc40krfvHpV9N+i5pfi+eMmWBMM+RObjcWcW4vKS5Cl6aNRtsg6zddt+ MF0rKXZYXSV5H4GL7miJsBuh7uqBp/GZr1qGazXDKPB4MwSGL9tToZ3KL/EcYGO+ 0QwnRl4qLWne6pP+Z1sReKBim0/jzFHMV2AtaddGCTWY4CuFO4vHT4aU2c2fxJBV 8+K+Q7ISrVkQswhPlLM416e1AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQURd8OHH+l NNrKIJKaup5jKPur+1EwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFRTFDMS8wNTBCRTFENjM1QjMx MUVEOTcyMUUzRjBGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RUUxQzEvMDUwQkUxRDYzNUIzMTFFRDk3MjFFM0YwRjEyMjI0NjgvUmQ4T0hI LWxOTnJLSUpLYXVwNWpLUHVyLTFFLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBaEwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm1ugwDQQCAAIwBwMF ACwPcIAwDQYJKoZIhvcNAQELBQADggEBAL3vBqqsNEUvcsXdJuDEiwJRfU2rvcFJ GL8CatvdBdKrfwvXpMk3yKrr5e9+l6IxKN35scvqJYn1sKipIKtUVQamQwXth4MJ z544m0Q3SLHezGvEzl6ASdiRzPg9yIwWtG7RQ44XbFd/YpI3+aMytHHvuJU3myjj IELCDkzqtov3G9FMhkY4UU8ccz4CyHUwO1Vr97e06JmSBTqPhupZjUWmGfyVbjbj yBRfygT5bLwbiMowouUxPiK0zXbPJA3haD5NVK28WFlfjzbkc2s1pmqG04+jj+oO jQLvIFghJXG0mVW/yT7S+hb2/UQh7Km343jJD/c5AirWt5WEVoB4oT0= -----END CERTIFICATE-----Generated at Wed Jan 7 06:58:29 2026 by rpki-client