This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer File: vN_wydKPGrRQYvSTuzVmysFCZG0.cer (raw, json) Hash identifier: LtBLus71gXpJ8XzIE3NAgyd00MGW27tBEWNnEOC74jY= Subject key identifier: BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B5B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:44:03 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327966 IP: 102.204.56.0/22 IP: 102.207.184.0/22 IP: 102.217.160.0/22 IP: 197.159.88.0/21 IP: 2c0f:f588::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15195 (0x3b5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:44:03 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3680C14AF, serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:38:61:18:0e:ae:eb:21:4f:8b:75:19:c2: 62:00:06:74:d0:7b:10:95:3e:e1:01:92:08:0d:37: ad:37:4a:52:b5:f2:9b:40:7a:f7:3e:5c:10:28:24: 89:49:3f:a8:37:2b:1e:5e:2a:8b:5b:4d:e5:de:03: e7:88:88:3b:c0:91:21:3f:f1:6e:ef:20:34:7e:00: dc:f8:0f:ad:d0:65:a7:6c:4d:32:bd:02:56:42:3f: 96:f5:43:63:08:b3:bb:70:45:5f:54:a6:7a:6f:18: 19:65:23:61:ed:9a:fc:9e:89:6c:98:24:28:9e:e3: 67:fd:23:20:7e:b5:6d:e5:97:14:85:a8:76:96:69: a7:9f:b0:53:1c:6b:56:2f:66:07:52:48:6b:a6:69: 64:c1:bc:0f:d5:85:76:53:be:65:31:aa:49:9b:01: 15:e4:86:d7:c5:dd:35:4e:3a:e2:4b:00:9a:1a:9e: 4c:8b:92:92:79:aa:41:56:5e:b3:a0:7a:8f:ef:73: 23:64:38:a2:ff:92:a2:49:46:77:90:8f:3f:ed:14: 7e:18:8e:29:fe:42:14:65:b9:14:aa:04:27:0a:fb: 7e:bd:31:0d:2a:0c:0e:ef:7e:8c:12:a6:62:a2:38: fc:10:ed:3b:8d:97:eb:95:4b:7b:bd:ff:d8:fa:5e: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327966 sbgp-ipAddrBlock: critical IPv4: 102.204.56.0/22 102.207.184.0/22 102.217.160.0/22 197.159.88.0/21 IPv6: 2c0f:f588::/32 Signature Algorithm: sha256WithRSAEncryption 1a:f2:8c:7a:9a:da:88:0b:f2:c8:5f:a4:96:7d:39:52:c1:f2: 49:e0:6d:8d:83:a6:94:a5:92:ae:01:c2:71:b8:d4:09:49:fc: 25:01:27:24:de:75:f7:1d:58:75:a1:88:37:17:60:f7:67:bb: dd:49:29:d6:2e:6a:9b:33:46:53:1e:c0:5b:dd:23:01:75:28: 9d:66:d9:0c:57:66:11:a7:28:de:d8:12:4c:b7:0d:e0:2a:7e: be:88:b3:0c:6a:79:20:58:8e:56:b3:bb:78:d6:d4:ef:bd:ee: 14:ee:30:a3:7d:5d:31:6a:70:10:75:86:a8:ae:fc:ef:4b:b5: 6b:d1:31:dd:df:0b:c0:a4:ae:c0:66:54:9e:b5:e8:ed:6e:e3: 58:01:6b:af:40:19:af:2a:b3:c1:ab:fd:89:56:0c:af:80:b4: f3:25:57:ce:07:39:d1:97:ad:63:80:0d:77:b5:a1:c6:2f:c4: 4a:a8:8a:c6:07:47:cd:2a:06:0c:1f:26:c1:1d:d6:50:0f:8c: 67:50:8a:2d:39:c1:85:19:e1:ba:22:6a:e4:e1:43:c8:92:92: 7f:aa:80:06:41:3d:03:67:71:f4:38:18:37:27:76:58:6d:4e: d9:e1:a0:e7:52:48:5d:5f:e5:55:77:f5:57:81:7b:d7:25:29: 76:14:e8:bb -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICO1swDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjQ0MDNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjgwQzE0QUYxMTAvBgNVBAUTKEJDREZGMEM5RDI4RjFBQjQ1MDYyRjQ5 M0JCMzU2NkNBQzE0MjY0NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4vzhhGA6u6yFPi3UZwmIABnTQexCVPuEBkggNN603SlK18ptAevc+XBAoJIlJ P6g3Kx5eKotbTeXeA+eIiDvAkSE/8W7vIDR+ANz4D63QZadsTTK9AlZCP5b1Q2MI s7twRV9UpnpvGBllI2HtmvyeiWyYJCie42f9IyB+tW3llxSFqHaWaaefsFMca1Yv ZgdSSGumaWTBvA/VhXZTvmUxqkmbARXkhtfF3TVOOuJLAJoankyLkpJ5qkFWXrOg eo/vcyNkOKL/kqJJRneQjz/tFH4Yjin+QhRluRSqBCcK+369MQ0qDA7vfowSpmKi OPwQ7TuNl+uVS3u9/9j6XoqdAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUvN/wydKP GrRQYvSTuzVmysFCZG0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4MEMxNC82NEFCMkYyQTVBRTAx MUU2OUZDRDUwMzJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODBDMTQvNjRBQjJGMkE1QUUwMTFFNjlGQ0Q1MDMyRjhBRUEyMjgvdk5fd3lk S1BHclJRWXZTVHV6Vm15c0ZDWkcwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAR4wQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJmzDgDBAJmz7gDBAJm 2aADBAPFn1gwDQQCAAIwBwMFACwP9YgwDQYJKoZIhvcNAQELBQADggEBABryjHqa 2ogL8shfpJZ9OVLB8kngbY2DppSlkq4BwnG41AlJ/CUBJyTedfcdWHWhiDcXYPdn u91JKdYuapszRlMewFvdIwF1KJ1m2QxXZhGnKN7YEky3DeAqfr6IswxqeSBYjlaz u3jW1O+97hTuMKN9XTFqcBB1hqiu/O9LtWvRMd3fC8CkrsBmVJ616O1u41gBa69A Ga8qs8Gr/YlWDK+AtPMlV84HOdGXrWOADXe1ocYvxEqoisYHR80qBgwfJsEd1lAP jGdQii05wYUZ4boiauThQ8iSkn+qgAZBPQNncfQ4GDcndlhtTtnhoOdSSF1f5VV3 9VeBe9clKXYU6Ls= -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:02 2026 by rpki-client