This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer File: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer (raw, json) Hash identifier: kXb6zCQvLA5EYxUcYYkaZzKsZ9+Uu179IhE+OWdOb14= Subject key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 382B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:38:04 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328696 IP: 102.222.116.0/22 IP: 2c0f:e8f0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14379 (0x382b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:38:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:ab:2b:21:9b:a8:d8:6b:48:c4:27:9d:15: 21:c4:0a:66:5d:95:cc:2f:b0:00:bb:a7:4e:96:c5: 0d:64:67:da:c9:ee:4e:ca:7a:15:2f:a0:fd:d1:e1: a2:aa:1a:14:8b:d4:85:1a:5c:23:61:40:c5:88:96: e3:51:c9:6a:eb:2c:e9:b9:4d:14:83:cf:91:72:58: c0:39:fb:50:6c:96:3c:1d:93:a0:f7:ba:3b:fa:84: a7:0a:22:b6:ea:07:fc:ed:c1:c5:81:9b:8d:57:96: a4:e8:78:e8:d8:cb:a3:f4:9a:2e:5d:f3:a4:c9:17: 00:c0:04:d4:e8:9c:d4:b0:b9:b8:bd:b6:ac:ce:d9: 3a:41:5b:46:99:e7:47:db:33:01:46:2a:2b:39:ed: ca:c3:d1:a8:60:c1:6e:51:c4:b9:42:12:6c:63:64: f6:f0:d9:0d:ba:11:6a:b1:52:63:e1:86:ae:f9:2e: f2:ef:7d:31:72:bf:00:75:ec:f2:75:a5:9d:dd:f6: d7:26:f5:22:de:8c:20:1e:6d:2f:77:2c:bf:cc:ed: 5a:5f:42:35:ea:fd:70:fb:6d:fc:e5:08:36:ee:ad: 6d:35:79:3d:13:61:6d:fd:90:44:c0:ef:b1:81:19: 40:4f:db:fd:a6:dd:20:b7:d8:59:df:7a:41:38:dc: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328696 sbgp-ipAddrBlock: critical IPv4: 102.222.116.0/22 IPv6: 2c0f:e8f0::/32 Signature Algorithm: sha256WithRSAEncryption 60:4f:fb:bd:5d:d6:71:06:e3:21:46:32:70:5f:df:49:73:c0: 19:59:1e:2a:a2:3f:d6:ab:a0:ec:a0:60:f7:a2:5a:d4:9a:07: 1c:11:81:dd:08:8a:b7:28:f0:04:01:1d:91:7d:e4:61:4e:f5: c1:1d:1a:47:50:56:72:c7:39:6c:1e:62:da:29:fd:1a:18:12: d1:69:11:dc:09:37:30:c1:fe:bb:88:7c:4e:df:93:f4:c6:c1: 15:b7:e9:29:5e:de:ae:42:71:77:23:fe:36:85:a2:d0:27:a5: 53:ff:fd:51:c4:e9:1d:63:7a:5a:42:a9:9e:29:c2:3c:fe:a9: 94:a0:6e:0a:d0:46:e1:01:23:77:0e:16:94:ca:c8:00:75:cf: 0f:0e:e1:d4:b7:a8:58:c3:99:44:17:b6:be:da:a4:ba:e1:b2: 3b:62:c1:ca:5f:36:c9:92:2a:5e:90:66:9c:c3:4a:70:3c:4d: 7f:c2:ab:f4:b5:ee:da:2e:80:6f:f1:af:fe:d2:f4:9d:22:5e: 1f:30:d4:8a:1e:78:2d:3b:59:1e:70:84:c9:05:a2:cd:89:65: 28:33:27:6b:93:07:11:2b:f3:83:c9:bd:a9:6e:12:0f:33:ac: 65:49:37:ac:ed:2c:c2:03:62:95:c1:dd:f2:d0:66:af:73:8b: 25:f2:92:be -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOCswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDM4MDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjI4Mjg4QUYxMTAvBgNVBAUTKDk0OTY3MTI3RkY2NEVDN0M3MkEzQUJF QTE2Q0U2OUFFREE3RjY4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC62asrIZuo2GtIxCedFSHECmZdlcwvsAC7p06WxQ1kZ9rJ7k7KehUvoP3R4aKq GhSL1IUaXCNhQMWIluNRyWrrLOm5TRSDz5FyWMA5+1Bsljwdk6D3ujv6hKcKIrbq B/ztwcWBm41XlqToeOjYy6P0mi5d86TJFwDABNTonNSwubi9tqzO2TpBW0aZ50fb MwFGKis57crD0ahgwW5RxLlCEmxjZPbw2Q26EWqxUmPhhq75LvLvfTFyvwB17PJ1 pZ3d9tcm9SLejCAebS93LL/M7VpfQjXq/XD7bfzlCDburW01eT0TYW39kETA77GB GUBP2/2m3SC32FnfekE43LiVAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUlJZxJ/9k 7Hxyo6vqFs5prtp/aDQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyODI4OC80NjkzNzYxRUJFRDcx MUVGODJBN0EzNDU3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MjgyODgvNDY5Mzc2MUVCRUQ3MTFFRjgyQTdBMzQ1NzYyRTk1MUEvbEpaeEpf OWs3SHh5bzZ2cUZzNXBydHBfYURRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA/gwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3nQwDQQCAAIwBwMF ACwP6PAwDQYJKoZIhvcNAQELBQADggEBAGBP+71d1nEG4yFGMnBf30lzwBlZHiqi P9aroOygYPeiWtSaBxwRgd0Iirco8AQBHZF95GFO9cEdGkdQVnLHOWweYtop/RoY EtFpEdwJNzDB/ruIfE7fk/TGwRW36Sle3q5CcXcj/jaFotAnpVP//VHE6R1jelpC qZ4pwjz+qZSgbgrQRuEBI3cOFpTKyAB1zw8O4dS3qFjDmUQXtr7apLrhsjtiwcpf NsmSKl6QZpzDSnA8TX/Cq/S17tougG/xr/7S9J0iXh8w1IoeeC07WR5whMkFos2J ZSgzJ2uTBxEr84PJvaluEg8zrGVJN6ztLMIDYpXB3fLQZq9ziyXykr4= -----END CERTIFICATE-----Generated at Fri Jan 2 18:35:44 2026 by rpki-client