This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer File: g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer (raw, json) Hash identifier: CUPqJIjPZLMHYwAGLQVEsIwGD1kjPIBCluY1Uq/sqw4= Subject key identifier: 83:F6:2F:00:1A:AC:D0:0B:53:F6:60:EA:2C:66:10:9B:BB:B9:9E:64 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EFE Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:08:17 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328037 IP: 2c0f:f0c8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 05 Jan 2026 00:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16126 (0x3efe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:08:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F56CAAF, serialNumber=83F62F001AACD00B53F660EA2C66109BBBB99E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:ed:7f:da:63:2d:de:78:2c:6d:26:cb:9d: 86:b2:72:3d:9c:37:0e:38:e3:94:64:22:a2:8b:d1: b8:ce:a1:9b:a9:c9:00:18:2b:7f:1b:fb:1e:9c:90: db:d6:b6:3a:d3:77:82:9b:38:9d:5a:0e:87:06:13: c0:9a:1e:b1:08:5c:e3:3b:4c:fa:56:2b:a7:ad:df: 34:3a:56:db:b6:12:3d:b0:80:64:50:4c:a5:47:19: be:62:3d:45:e8:30:d2:de:b2:5d:ec:61:5b:b2:32: 8d:16:ce:18:dc:b2:aa:c1:64:e2:72:ab:b2:12:d0: 71:aa:05:28:81:c9:c7:56:ce:9a:c9:c1:cc:d7:e7: 77:f9:b0:d9:62:99:7e:cb:5e:c0:3b:83:76:90:6c: ca:9b:ef:b3:e3:61:40:1f:de:c1:d0:3b:1d:38:9c: fc:16:43:33:6b:01:62:bf:be:c6:a0:e3:c5:64:f6: 48:ce:3b:be:d8:db:61:db:f1:0c:0d:a1:4b:43:e8: 62:ad:a2:eb:19:63:c9:b2:6a:da:83:0b:55:84:1e: 92:d2:89:5e:b5:e3:ad:67:4f:fb:bf:23:83:3d:b1: c9:00:e2:18:b5:cf:26:cb:9f:d2:86:37:68:a8:f9: b0:85:49:6d:3e:e0:61:1c:1b:e9:14:40:09:8f:14: f5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F6:2F:00:1A:AC:D0:0B:53:F6:60:EA:2C:66:10:9B:BB:B9:9E:64 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328037 sbgp-ipAddrBlock: critical IPv6: 2c0f:f0c8::/32 Signature Algorithm: sha256WithRSAEncryption 9d:6d:56:3b:fb:58:6e:44:0e:bd:d7:5a:ad:c3:3d:46:d3:fa: 5b:fd:0b:58:fc:a2:a2:39:38:63:e6:62:f8:0f:59:7b:ba:af: dc:62:3d:7d:e3:6c:4a:21:0e:36:b9:2b:8d:c6:13:a8:b1:d0: bc:2f:aa:70:4a:02:2d:dc:37:cf:bb:cb:2f:b1:ae:df:d8:48: 5e:f7:4f:cd:6f:bc:93:d2:5e:6c:52:e6:57:0a:d1:59:13:9d: 65:f9:7f:8f:3a:a5:32:cb:8c:f2:a2:34:f4:46:2f:06:b1:9d: 56:78:1d:04:87:b3:60:69:bb:78:01:de:1c:dd:e5:1f:32:fc: 61:c7:09:26:48:d0:14:16:fe:c2:9a:67:ef:1a:b8:7a:62:75: 7d:d1:b1:1e:d9:c7:cc:16:68:86:e5:01:64:aa:a4:b5:e9:f8: 90:63:92:81:c3:b5:2a:88:84:97:cf:82:be:52:a7:08:14:87: 46:74:79:61:96:3e:12:fc:c7:24:4a:64:be:90:d2:d0:d7:9d: 1f:24:67:e7:ca:1a:b8:2a:90:fb:5a:be:da:86:8f:b1:7c:8b: 88:50:29:7b:c8:63:ce:f9:d7:b5:a0:99:03:e1:1d:db:66:1c: 36:f1:f4:07:ed:5d:56:80:57:c2:eb:6e:67:87:e1:3b:9c:64: 15:a6:fe:b4 -----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgICPv4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTA4MTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkY1NkNBQUYxMTAvBgNVBAUTKDgzRjYyRjAwMUFBQ0QwMEI1M0Y2NjBF QTJDNjYxMDlCQkJCOTlFNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCD+1/2mMt3ngsbSbLnYaycj2cNw4445RkIqKL0bjOoZupyQAYK38b+x6ckNvW tjrTd4KbOJ1aDocGE8CaHrEIXOM7TPpWK6et3zQ6Vtu2Ej2wgGRQTKVHGb5iPUXo MNLesl3sYVuyMo0WzhjcsqrBZOJyq7IS0HGqBSiBycdWzprJwczX53f5sNlimX7L XsA7g3aQbMqb77PjYUAf3sHQOx04nPwWQzNrAWK/vsag48Vk9kjOO77Y22Hb8QwN oUtD6GKtousZY8myatqDC1WEHpLSiV61461nT/u/I4M9sckA4hi1zybLn9KGN2io +bCFSW0+4GEcG+kUQAmPFPXDAgMBAAGjggMMMIIDCDAdBgNVHQ4EFgQUg/YvABqs 0AtT9mDqLGYQm7u5nmQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGNTZDQS9GQUMyRDVDQThFMDAx MUU5OTA3MTQ0NEFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RjU2Q0EvRkFDMkQ1Q0E4RTAwMTFFOTkwNzE0NDRBRjhBRUEyMjgvZ19ZdkFC cXMwQXRUOW1EcUxHWVFtN3U1bm1RLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAWUwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/DIMA0GCSqGSIb3 DQEBCwUAA4IBAQCdbVY7+1huRA6911qtwz1G0/pb/QtY/KKiOThj5mL4D1l7uq/c Yj1942xKIQ42uSuNxhOosdC8L6pwSgIt3DfPu8svsa7f2Ehe90/Nb7yT0l5sUuZX CtFZE51l+X+POqUyy4zyojT0Ri8GsZ1WeB0Eh7Ngabt4Ad4c3eUfMvxhxwkmSNAU Fv7CmmfvGrh6YnV90bEe2cfMFmiG5QFkqqS16fiQY5KBw7UqiISXz4K+UqcIFIdG dHlhlj4S/MckSmS+kNLQ150fJGfnyhq4KpD7Wr7aho+xfIuIUCl7yGPO+de1oJkD 4R3bZhw28fQH7V1WgFfC625nh+E7nGQVpv60 -----END CERTIFICATE-----Generated at Sat Jan 3 03:55:48 2026 by rpki-client