This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer File: yLuITQS6vBYFq333lYeWBZySwmo.cer (raw, json) Hash identifier: YwZFapXzkTLPhqMs0dVkskxsmfJFxJJIWTHMuxoYlcY= Subject key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3ABA Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:21:18 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328072 IP: 2c0f:ef20::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15034 (0x3aba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:21:18 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3f:12:52:fe:70:dc:87:3f:7d:cc:40:c1:10: c5:ab:48:2b:19:03:18:17:38:81:f4:20:a4:55:b1: e2:d0:07:19:67:52:4f:0d:a7:3d:da:be:f3:51:24: b8:f0:ea:d0:f1:03:fc:69:04:77:e4:d1:fa:c2:ca: 44:44:0e:8a:39:af:f4:5f:7b:d3:13:2d:85:4d:3a: 36:0e:92:57:56:02:da:7e:01:e8:60:f0:6e:59:9d: 96:fb:c3:9c:13:f9:75:ed:5b:08:65:55:87:06:92: 07:95:d7:65:84:e1:b3:a2:3b:80:f6:15:0d:c4:4f: a5:67:f6:98:33:e0:af:83:da:c4:03:1b:f1:64:9c: 8e:f3:4d:db:eb:0f:ec:ea:59:94:42:96:76:de:92: 4c:00:25:62:ed:18:e9:b6:57:10:24:22:a1:09:3b: 98:ea:b5:cc:a8:25:5a:e4:d5:58:fd:fe:60:48:87: 8a:16:bf:ff:73:7f:81:a4:4b:4b:13:6c:9d:88:9f: 1a:c8:68:82:64:9a:21:24:3a:ab:42:3b:93:ed:f0: 78:55:e2:03:9d:0a:93:95:41:23:51:0c:8e:29:94: af:c7:e2:32:b7:40:7d:b2:0f:9b:a1:b2:0e:f9:d3: c5:e4:13:76:2c:20:35:07:ab:94:56:24:8d:7c:c1: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328072 sbgp-ipAddrBlock: critical IPv6: 2c0f:ef20::/32 Signature Algorithm: sha256WithRSAEncryption 47:3d:f0:24:90:ee:e8:7e:d7:92:31:99:43:00:8d:5c:7a:73: de:bb:d4:fe:f9:56:0a:62:8c:fc:7c:61:68:5f:8e:06:67:af: c8:a9:78:dd:12:1d:d4:00:7d:9e:8c:de:b6:b7:79:60:ec:6b: dc:cc:22:51:f6:d4:02:cd:5e:ac:87:0c:58:95:4e:42:f7:38: 21:00:2b:ee:3e:e6:cf:5f:ba:95:78:b5:17:a7:28:fd:26:70: 97:6d:de:9b:33:12:08:0d:8f:71:dd:f1:01:b8:89:a3:4b:de: 94:94:d7:56:7e:44:5e:f5:87:8c:a0:75:7b:f5:ed:ad:88:33: 51:70:9f:d3:5e:4a:72:61:c9:12:ae:6b:1a:dd:67:ac:3a:13: 42:7e:d3:07:bd:f3:c2:db:10:28:53:8d:01:ec:c5:e2:74:54: 70:34:11:22:1c:2a:01:5e:df:84:b3:29:98:9d:b6:7b:d8:b7: 82:b6:24:97:ae:c4:ff:74:16:5d:48:c9:04:ae:49:76:10:cd: 3c:d5:dd:67:5f:a3:a9:aa:21:e9:3d:ba:ae:10:48:e1:d1:54: a9:04:57:fd:80:11:d9:fc:c3:86:11:89:04:b2:c0:7c:2b:b4: e1:ec:f5:22:21:39:c3:cf:3f:b8:14:56:2f:dc:c8:43:9d:86: d3:a6:eb:96 -----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgICOrowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjIxMThaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjcwMzY5QUYxMTAvBgNVBAUTKEM4QkI4ODREMDRCQUJDMTYwNUFCN0RG Nzk1ODc5NjA1OUM5MkMyNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGPxJS/nDchz99zEDBEMWrSCsZAxgXOIH0IKRVseLQBxlnUk8Npz3avvNRJLjw 6tDxA/xpBHfk0frCykREDoo5r/Rfe9MTLYVNOjYOkldWAtp+Aehg8G5ZnZb7w5wT +XXtWwhlVYcGkgeV12WE4bOiO4D2FQ3ET6Vn9pgz4K+D2sQDG/FknI7zTdvrD+zq WZRClnbekkwAJWLtGOm2VxAkIqEJO5jqtcyoJVrk1Vj9/mBIh4oWv/9zf4GkS0sT bJ2InxrIaIJkmiEkOqtCO5Pt8HhV4gOdCpOVQSNRDI4plK/H4jK3QH2yD5uhsg75 08XkE3YsIDUHq5RWJI18wUqLAgMBAAGjggMMMIIDCDAdBgNVHQ4EFgQUyLuITQS6 vBYFq333lYeWBZySwmowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3MDM2OS82OTE1NjVEMjdFNzgx MUVDQjc3NDYxQ0I1QTQwRDU3Ny8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NzAzNjkvNjkxNTY1RDI3RTc4MTFFQ0I3NzQ2MUNCNUE0MEQ1NzcveUx1SVRR UzZ2QllGcTMzM2xZZVdCWnlTd21vLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAYgwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD+8gMA0GCSqGSIb3 DQEBCwUAA4IBAQBHPfAkkO7ofteSMZlDAI1cenPeu9T++VYKYoz8fGFoX44GZ6/I qXjdEh3UAH2ejN62t3lg7GvczCJR9tQCzV6shwxYlU5C9zghACvuPubPX7qVeLUX pyj9JnCXbd6bMxIIDY9x3fEBuImjS96UlNdWfkRe9YeMoHV79e2tiDNRcJ/TXkpy YckSrmsa3WesOhNCftMHvfPC2xAoU40B7MXidFRwNBEiHCoBXt+EsymYnbZ72LeC tiSXrsT/dBZdSMkErkl2EM081d1nX6OpqiHpPbquEEjh0VSpBFf9gBHZ/MOGEYkE ssB8K7Th7PUiITnDzz+4FFYv3MhDnYbTpuuW -----END CERTIFICATE-----Generated at Thu Jan 1 18:00:33 2026 by rpki-client