This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer File: dUDQUtEpERNWC6gtIyBCuZqopko.cer (raw, json) Hash identifier: geseTYNPfHmY+K3xARuD9rhutWrsqFzFG3YudqRsakA= Subject key identifier: 75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A8B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:14:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328512 IP: 102.64.16.0/20 IP: 102.205.116.0/22 IP: 2c0f:edf8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14987 (0x3a8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:14:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F366C124AF, serialNumber=7540D052D1291113560BA82D232042B99AA8A64A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:f4:14:0f:4e:8d:72:e1:d7:a8:95:07:b2: 71:fa:9f:73:59:b7:3e:c9:8d:9f:0d:1b:6b:a0:aa: 82:39:0a:9b:e6:52:42:45:9e:b6:01:f2:49:f5:fc: 30:91:f4:b9:6e:01:ec:ce:06:79:43:54:22:42:3f: eb:c3:9c:4a:1c:2d:44:b3:00:66:87:12:ca:71:2e: ca:78:17:22:f8:b2:5f:76:28:48:7e:15:b4:1d:12: cf:57:74:e0:d3:03:cc:af:a1:f1:c6:72:91:a2:1b: 78:06:0b:33:f2:81:26:80:32:bf:b1:4e:7b:b4:83: 05:cc:69:a3:60:83:81:33:1a:e6:db:75:3b:ec:3a: c0:22:c2:c6:57:c9:cc:79:80:20:ec:5b:ed:90:a1: fe:3d:bf:1f:ed:b5:60:b8:df:ea:69:d4:e2:40:be: fb:4d:11:e9:3f:c7:4f:90:9d:3f:df:e5:2e:63:a3: 71:1c:b0:dc:cd:60:d6:61:cd:86:c6:38:84:c5:20: 1a:ac:94:cb:5c:ff:a2:50:21:51:8d:23:3e:71:cb: 90:b8:bb:c2:e2:e1:90:1d:4b:2d:f0:7e:e8:25:f0: f3:39:86:43:47:00:8b:85:c8:b1:dc:c9:e4:bb:5f: 65:f5:c4:88:b2:c2:4f:58:b1:d3:84:d4:0b:de:5a: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328512 sbgp-ipAddrBlock: critical IPv4: 102.64.16.0/20 102.205.116.0/22 IPv6: 2c0f:edf8::/32 Signature Algorithm: sha256WithRSAEncryption 0c:00:26:86:83:f1:db:12:c6:c1:15:fd:4e:f6:b5:21:8e:31: bc:48:8f:31:08:1b:f5:a3:9c:5b:d8:01:e7:88:40:8f:e8:9d: 10:3b:8d:f9:36:72:b3:b6:a6:df:ad:04:3b:57:e5:aa:a6:43: ee:21:d8:1d:f7:89:3e:f5:97:64:61:6c:1e:44:77:fa:0d:78: 11:6e:e2:15:bb:39:8d:d8:3b:10:54:47:4a:22:34:08:42:64: 6d:e3:bd:79:ca:e4:79:91:fa:d8:d8:fe:1d:ee:65:8b:c8:56: 8b:51:e2:c3:c2:01:cb:08:34:ac:f0:9b:45:c8:7b:70:73:5c: 4e:cb:5c:91:25:c3:5a:51:fc:61:46:40:d3:0f:b7:45:eb:5f: e8:7a:55:c7:21:4b:e0:a2:92:6d:b5:dc:60:b4:7a:a3:e6:6b: 13:52:48:77:ff:75:e6:c3:2e:15:e1:c7:04:22:c4:b6:5a:df: da:7f:41:36:ca:19:63:13:cd:33:33:0d:01:9d:27:17:68:f8: e1:84:54:4a:b7:d8:52:63:51:c0:6e:1d:ab:cd:83:d2:80:cb: 49:b8:6c:3d:88:78:56:2d:fc:33:a8:7e:62:b4:b0:e9:4c:2a: 22:4e:92:18:28:34:ae:62:4d:26:f3:a6:49:54:5e:e9:22:84: c1:07:76:1d -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOoswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjE0NDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjZDMTI0QUYxMTAvBgNVBAUTKDc1NDBEMDUyRDEyOTExMTM1NjBCQTgy RDIzMjA0MkI5OUFBOEE2NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+g/QUD06NcuHXqJUHsnH6n3NZtz7JjZ8NG2ugqoI5CpvmUkJFnrYB8kn1/DCR 9LluAezOBnlDVCJCP+vDnEocLUSzAGaHEspxLsp4FyL4sl92KEh+FbQdEs9XdODT A8yvofHGcpGiG3gGCzPygSaAMr+xTnu0gwXMaaNgg4EzGubbdTvsOsAiwsZXycx5 gCDsW+2Qof49vx/ttWC43+pp1OJAvvtNEek/x0+QnT/f5S5jo3EcsNzNYNZhzYbG OITFIBqslMtc/6JQIVGNIz5xy5C4u8Li4ZAdSy3wfugl8PM5hkNHAIuFyLHcyeS7 X2X1xIiywk9YsdOE1AveWi5PAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUdUDQUtEp ERNWC6gtIyBCuZqopkowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2QzEyNC8yMUUyRDBENENBRjAx MUU5OEMyMDQ0NzhGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NkMxMjQvMjFFMkQwRDRDQUYwMTFFOThDMjA0NDc4RjhBRUEyMjgvZFVEUVV0 RXBFUk5XQzZndEl5QkN1WnFvcGtvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA0AwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBARmQBADBAJmzXQwDQQC AAIwBwMFACwP7fgwDQYJKoZIhvcNAQELBQADggEBAAwAJoaD8dsSxsEV/U72tSGO MbxIjzEIG/WjnFvYAeeIQI/onRA7jfk2crO2pt+tBDtX5aqmQ+4h2B33iT71l2Rh bB5Ed/oNeBFu4hW7OY3YOxBUR0oiNAhCZG3jvXnK5HmR+tjY/h3uZYvIVotR4sPC AcsINKzwm0XIe3BzXE7LXJElw1pR/GFGQNMPt0XrX+h6VcchS+Cikm213GC0eqPm axNSSHf/debDLhXhxwQixLZa39p/QTbKGWMTzTMzDQGdJxdo+OGEVEq32FJjUcBu HavNg9KAy0m4bD2IeFYt/DOofmK0sOlMKiJOkhgoNK5iTSbzpklUXukihMEHdh0= -----END CERTIFICATE-----Generated at Fri Jan 2 16:55:58 2026 by rpki-client