This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer File: UJrkB4CHuVMUvanvade7dIgcL94.cer (raw, json) Hash identifier: 1eelaWwBdLx6K34zb53zQlMwenCiVJW3y2vPICh2vb8= Subject key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 386D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:51:10 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.208.216.0/22 IP: 2c0f:8c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 07:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14445 (0x386d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:51:10 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3630501AF, serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:3c:b2:7b:5a:98:22:a5:12:f5:5b:c8:f2: cf:46:58:26:49:4e:15:0a:c7:e8:9a:06:37:1b:e1: 6b:3c:04:22:d5:0e:66:cc:9f:16:6c:ad:37:bc:a9: 32:22:2b:b8:18:c4:74:e0:a5:cd:e5:d1:65:5a:4b: 6d:23:98:a3:c3:a4:b0:bb:78:4f:92:ea:3c:d5:e6: ad:ab:51:fe:ed:71:06:e9:a6:7f:44:53:29:2e:9c: 68:70:5b:64:27:0e:0f:92:f0:40:ba:5b:e9:a8:80: 11:34:52:ca:25:5a:58:40:30:e1:17:06:e6:c7:a1: ac:dd:13:4c:7f:77:b5:d4:9d:9c:76:a1:9b:86:70: 05:10:d9:82:3d:c2:2a:e2:f2:06:e8:64:bf:3c:ee: a4:e6:42:50:da:19:30:f1:a7:a8:8a:26:a9:ac:d5: 39:8b:08:5a:9a:c9:51:a4:19:21:6b:6c:60:11:7e: 91:01:40:81:a4:9e:1a:83:b2:46:a5:5a:c9:58:d8: 49:b7:c0:02:c3:78:a6:2f:4e:f7:1a:0b:4d:77:bf: ad:07:5e:1b:ae:c3:5a:15:c7:d4:95:0b:0b:a7:56: 1c:da:b9:e3:3d:35:60:1a:20:6e:2a:eb:a0:dc:9f: 3b:91:62:63:35:14:61:7d:a3:1b:51:66:62:05:87: 75:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft sbgp-ipAddrBlock: critical IPv4: 102.208.216.0/22 IPv6: 2c0f:8c0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:ae:cd:28:02:b6:a1:87:95:58:04:61:4d:29:46:cf:46:42: ce:b2:f4:71:55:86:c0:3c:b9:29:5a:d3:dc:e7:35:2f:e2:11: 58:2a:94:f1:ce:07:98:f7:06:c0:51:8d:09:af:09:cb:9f:e7: 6f:20:28:09:81:e4:6e:e0:41:9c:0b:11:c0:04:76:c4:71:8f: 30:c8:fc:e1:b7:e2:93:cb:2c:7d:e8:23:f7:cb:9d:95:76:c0: cc:fb:47:24:c1:ba:c9:5b:15:00:cb:e6:1f:ea:42:7f:f3:d4: 75:dc:c0:ba:e5:66:96:31:9d:25:f5:b1:7e:2e:c4:18:8d:58: 75:48:58:70:d0:47:ad:ce:3b:a3:0d:c9:cf:aa:90:52:3d:c4: 31:7c:e5:92:d6:63:0d:23:fd:25:76:a5:ac:50:2c:85:08:54: 1b:2c:2d:97:73:18:a8:28:8f:18:00:e2:b4:45:cb:99:b2:65: c0:da:a3:94:79:72:44:58:79:9f:2a:01:8b:05:0b:b7:ed:2c: 72:78:04:41:bf:be:8f:66:77:5e:69:25:01:92:af:de:0c:70: 35:85:a4:22:70:8d:83:c7:44:20:e9:04:7c:4d:40:4b:9c:a4: dd:e1:bc:6f:11:98:38:5b:d6:7a:17:99:34:47:81:59:94:61: 2b:33:85:5a -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICOG0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDUxMTBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjMwNTAxQUYxMTAvBgNVBAUTKDUwOUFFNDA3ODA4N0I5NTMxNEJEQTlF RjY5RDdCQjc0ODgxQzJGREUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDddDyye1qYIqUS9VvI8s9GWCZJThUKx+iaBjcb4Ws8BCLVDmbMnxZsrTe8qTIi K7gYxHTgpc3l0WVaS20jmKPDpLC7eE+S6jzV5q2rUf7tcQbppn9EUykunGhwW2Qn Dg+S8EC6W+mogBE0UsolWlhAMOEXBubHoazdE0x/d7XUnZx2oZuGcAUQ2YI9wiri 8gboZL887qTmQlDaGTDxp6iKJqms1TmLCFqayVGkGSFrbGARfpEBQIGknhqDskal WslY2Em3wALDeKYvTvcaC013v60HXhuuw1oVx9SVCwunVhzaueM9NWAaIG4q66Dc nzuRYmM1FGF9oxtRZmIFh3X9AgMBAAGjggL+MIIC+jAdBgNVHQ4EFgQUUJrkB4CH uVMUvanvade7dIgcL94wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzMDUwMS9EODE1NkQxMDdBNkYx MUVGQUI2MzdCNDQ3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MzA1MDEvRDgxNTZEMTA3QTZGMTFFRkFCNjM3QjQ0NzYyRTk1MUEvVUpya0I0 Q0h1Vk1VdmFudmFkZTdkSWdjTDk0Lm1mdDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC AAEwBgMEAmbQ2DANBAIAAjAHAwUALA8IwDANBgkqhkiG9w0BAQsFAAOCAQEAmq7N KAK2oYeVWARhTSlGz0ZCzrL0cVWGwDy5KVrT3Oc1L+IRWCqU8c4HmPcGwFGNCa8J y5/nbyAoCYHkbuBBnAsRwAR2xHGPMMj84bfik8ssfegj98udlXbAzPtHJMG6yVsV AMvmH+pCf/PUddzAuuVmljGdJfWxfi7EGI1YdUhYcNBHrc47ow3Jz6qQUj3EMXzl ktZjDSP9JXalrFAshQhUGywtl3MYqCiPGADitEXLmbJlwNqjlHlyRFh5nyoBiwUL t+0scngEQb++j2Z3XmklAZKv3gxwNYWkInCNg8dEIOkEfE1AS5yk3eG8bxGYOFvW eheZNEeBWZRhKzOFWg== -----END CERTIFICATE-----Generated at Thu Jan 1 09:11:37 2026 by rpki-client