This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer File: WNo74zGmEqquT2owY3cEBjrD3UI.cer (raw, json) Hash identifier: +qDAfSm4fF5jYSzAs5e6IRwTxTqCOXip3arOIWsuAWw= Subject key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3DDD Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:20:47 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328988 IP: 102.203.224.0/22 IP: 102.208.96.0/22 IP: 102.213.68.0/22 IP: 102.218.48.0/22 IP: 2c0f:6f00::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15837 (0x3ddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:20:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36CA351AF, serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:44:36:c0:58:ca:f6:0f:60:bd:b7:dd:15: 28:a2:f4:30:56:20:72:81:0b:7d:cd:e5:ad:38:ff: 6d:72:f2:f1:26:6d:2e:0c:43:c4:fb:e6:ca:70:cb: fc:ad:5e:c4:7a:8f:cc:19:e1:27:90:ce:da:20:76: 21:86:44:74:01:5f:5e:77:ca:ca:ab:6e:11:4f:c5: e0:34:88:6a:ba:ec:7b:6a:5c:76:9a:39:e9:25:b1: 23:1a:8d:9c:b6:2e:bd:cc:ca:2e:a1:18:90:4a:bf: 93:6e:41:74:6a:08:c0:db:20:a2:31:51:4d:e9:da: 97:2b:88:9e:56:e1:70:30:fa:24:9d:b0:04:19:45: 3f:5e:82:dd:d1:33:0f:b1:f4:9f:00:65:93:8b:72: 2c:09:2c:dc:96:71:c4:59:0c:5a:76:9c:55:61:e1: 08:80:5c:f1:f0:4a:a3:3d:09:81:19:1e:6a:a1:f5: 3c:f9:8e:7a:be:c4:08:5b:1d:d1:aa:89:f7:c1:ab: b6:41:c5:8b:e1:76:b7:d6:d7:34:db:63:0a:10:90: 05:03:95:15:51:68:d2:7a:0e:78:d2:8e:ab:55:ea: 50:03:ca:b3:74:f3:55:17:ab:c1:3d:30:9b:a9:ac: 8e:6a:4c:e6:99:25:a3:d7:8a:fd:2f:04:9f:66:aa: 52:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328988 sbgp-ipAddrBlock: critical IPv4: 102.203.224.0/22 102.208.96.0/22 102.213.68.0/22 102.218.48.0/22 IPv6: 2c0f:6f00::/32 Signature Algorithm: sha256WithRSAEncryption b6:e3:64:a1:1f:c0:ca:51:ca:d8:b5:5e:01:d4:bb:23:3c:5e: d8:b1:6c:fd:bc:fb:f0:c9:74:4a:ac:24:8a:64:50:4d:64:d2: a6:5d:9a:9e:4c:e5:8a:6a:c3:7e:88:ea:32:59:0d:32:95:6d: 11:e6:41:dc:e7:16:a3:09:da:67:61:6e:87:6b:ee:a5:21:12: f4:ce:7e:76:16:ea:08:7d:20:56:6c:ad:59:d0:a0:e9:c7:72: 46:93:99:0a:4b:53:44:26:43:2d:18:78:49:e5:83:4f:a1:dd: ca:85:c8:01:70:bd:a1:31:b8:0e:22:db:b9:e8:dc:b4:06:84: e0:ef:98:df:df:41:f4:41:fd:15:0f:ec:28:d3:b6:c1:9b:90: c0:ce:13:f7:7f:27:13:77:39:08:37:91:6a:93:a0:fe:f7:4f: b9:e7:71:d8:b9:f6:8d:b5:f7:c0:23:c3:7f:04:e2:fb:6c:44: aa:c2:8e:da:5d:55:9c:05:de:b3:55:bc:70:49:f9:0a:7c:38: 74:b2:4b:0a:1d:3c:5b:d5:8c:6e:67:41:7d:cd:1c:8d:e7:dc: 90:3b:70:f8:09:c1:85:f4:2f:1f:e3:69:dd:8a:50:14:0d:32: 65:52:e8:0b:a4:8a:8c:00:88:8c:fa:ff:87:9b:05:43:bd:bc: 90:cc:d8:8a -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICPd0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDIwNDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkNBMzUxQUYxMTAvBgNVBAUTKDU4REEzQkUzMzFBNjEyQUFBRTRGNkEz MDYzNzcwNDA2M0FDM0RENDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSnEQ2wFjK9g9gvbfdFSii9DBWIHKBC33N5a04/21y8vEmbS4MQ8T75spwy/yt XsR6j8wZ4SeQztogdiGGRHQBX153ysqrbhFPxeA0iGq67HtqXHaaOeklsSMajZy2 Lr3Myi6hGJBKv5NuQXRqCMDbIKIxUU3p2pcriJ5W4XAw+iSdsAQZRT9egt3RMw+x 9J8AZZOLciwJLNyWccRZDFp2nFVh4QiAXPHwSqM9CYEZHmqh9Tz5jnq+xAhbHdGq iffBq7ZBxYvhdrfW1zTbYwoQkAUDlRVRaNJ6DnjSjqtV6lADyrN081UXq8E9MJup rI5qTOaZJaPXiv0vBJ9mqlKLAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUWNo74zGm EqquT2owY3cEBjrD3UIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDQTM1MS9EOEU2QzVFQUMyRTYx MUVFOEI5MDY5N0I3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Q0EzNTEvRDhFNkM1RUFDMkU2MTFFRThCOTA2OTdCNzc1NDEyRTYvV05vNzR6 R21FcXF1VDJvd1kzY0VCanJEM1VJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBRwwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJmy+ADBAJm0GADBAJm 1UQDBAJm2jAwDQQCAAIwBwMFACwPbwAwDQYJKoZIhvcNAQELBQADggEBALbjZKEf wMpRyti1XgHUuyM8XtixbP28+/DJdEqsJIpkUE1k0qZdmp5M5Ypqw36I6jJZDTKV bRHmQdznFqMJ2mdhbodr7qUhEvTOfnYW6gh9IFZsrVnQoOnHckaTmQpLU0QmQy0Y eEnlg0+h3cqFyAFwvaExuA4i27no3LQGhODvmN/fQfRB/RUP7CjTtsGbkMDOE/d/ JxN3OQg3kWqToP73T7nncdi59o2198Ajw38E4vtsRKrCjtpdVZwF3rNVvHBJ+Qp8 OHSySwodPFvVjG5nQX3NHI3n3JA7cPgJwYX0Lx/jad2KUBQNMmVS6AukiowAiIz6 /4ebBUO9vJDM2Io= -----END CERTIFICATE-----Generated at Sun Jan 11 20:09:51 2026 by rpki-client