This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer File: ycEp-8PIJzpGKVWpUo4KrC8umCw.cer (raw, json) Hash identifier: qXQbwxodbC+n/HLVzrRx3nXaPRcowOtdpJYFN0GaY4I= Subject key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3730 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Tue 16 Dec 2025 00:01:08 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 329403 IP: 102.203.172.0/22 IP: 102.206.68.0/22 IP: 102.209.180.0/22 IP: 2c0f:2e40::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14128 (0x3730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Dec 16 00:01:08 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:3e:2e:e9:02:91:97:83:e6:a4:eb:8a:ad: 39:2c:7f:d1:86:b2:29:33:62:6b:11:dd:09:5a:fd: 95:2c:6f:09:f7:a9:55:e5:27:a8:f1:f8:90:8e:7c: aa:bb:87:6e:7c:a6:69:21:0b:75:b3:1c:b1:90:85: 62:2a:81:34:5b:e3:e4:6f:a0:2f:87:b6:9a:5a:90: 04:0b:81:8e:54:e8:d2:01:89:ea:3d:c2:da:55:ed: cc:a6:e0:4d:7f:cc:76:f4:c1:29:92:0a:23:9a:76: fa:9d:e2:c5:82:e7:3c:25:c4:f2:6c:22:fb:48:59: d9:b8:cb:2b:27:ab:91:bc:67:ea:9e:06:4a:93:86: 3d:cc:cc:85:03:45:16:61:e7:a3:a1:e0:16:58:34: 2a:d5:b8:fa:98:b7:07:da:24:50:3c:e0:de:4e:c6: a6:87:fa:71:2f:d4:3e:8f:e4:4b:3c:f6:48:14:87: 26:0c:57:33:8f:36:46:6d:27:50:2e:37:fd:19:1c: 98:bf:32:fb:51:ea:89:30:6a:79:90:66:c1:2f:4b: 53:fc:e1:2d:b7:3e:19:15:21:88:40:06:34:02:48: 47:f2:84:a3:18:ec:d0:c4:dc:de:b5:32:02:14:25: c9:b8:86:a9:01:a5:a2:72:67:fe:14:ae:e7:44:9c: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329403 sbgp-ipAddrBlock: critical IPv4: 102.203.172.0/22 102.206.68.0/22 102.209.180.0/22 IPv6: 2c0f:2e40::/32 Signature Algorithm: sha256WithRSAEncryption 3f:2f:43:4c:19:5b:65:bb:39:f4:88:29:48:f0:f2:2c:0f:9c: c4:34:00:1d:c3:66:d5:d4:9a:09:f7:77:dc:16:0c:54:25:cf: f4:62:e6:8e:93:89:7c:6e:6c:f5:1c:fc:98:70:e2:fa:20:75: 67:47:05:e4:f1:68:0f:4a:ca:ca:93:81:ff:e5:9c:79:36:ab: 7a:35:ac:87:ef:27:e7:96:11:f4:dc:3b:ab:06:ab:b0:a0:d4: 7b:9b:4f:e8:12:ef:56:aa:e4:d3:46:0d:ca:f8:dc:4f:c2:9c: 62:80:33:bf:6b:ac:5d:23:43:fe:f5:38:db:10:be:c1:eb:70: c6:16:6d:ee:56:fd:13:16:45:c9:bf:7b:68:a4:fb:c1:92:7c: 6e:05:85:8f:28:47:00:2f:ba:94:49:fe:01:c9:ef:00:80:66: e9:b8:e0:a6:42:87:49:f1:ca:7e:b4:47:c7:1f:c1:c0:27:19: 97:88:7c:32:35:71:71:b3:0a:ca:95:d4:3b:4e:af:2e:f5:bc: 63:d0:c9:1c:c3:c6:86:7b:87:2e:3b:12:c5:1d:41:0d:5d:63: 4f:93:94:df:74:31:5a:7c:6c:94:99:c1:ee:75:5e:52:bb:7c: 4b:7a:48:75:19:fd:e2:6f:fe:b1:f0:a1:d3:9c:7e:2c:58:16: 25:02:94:ff -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICNzAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTEyMTYwMDAxMDhaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjMzN0U1QUYxMTAvBgNVBAUTKEM5QzEyOUZCQzNDODI3M0E0NjI5NTVB OTUyOEUwQUFDMkYyRTk4MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBVD4u6QKRl4PmpOuKrTksf9GGsikzYmsR3Qla/ZUsbwn3qVXlJ6jx+JCOfKq7 h258pmkhC3WzHLGQhWIqgTRb4+RvoC+HtppakAQLgY5U6NIBieo9wtpV7cym4E1/ zHb0wSmSCiOadvqd4sWC5zwlxPJsIvtIWdm4yysnq5G8Z+qeBkqThj3MzIUDRRZh 56Oh4BZYNCrVuPqYtwfaJFA84N5OxqaH+nEv1D6P5Es89kgUhyYMVzOPNkZtJ1Au N/0ZHJi/MvtR6okwanmQZsEvS1P84S23PhkVIYhABjQCSEfyhKMY7NDE3N61MgIU Jcm4hqkBpaJyZ/4UrudEnGjFAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUycEp+8PI JzpGKVWpUo4KrC8umCwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzMzdFNS85NzlCQTY0MDdGRTMx MUVGODM0NzU1ODY3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYyRTk1MUEveWNFcC04 UElKenBHS1ZXcFVvNEtyQzh1bUN3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBrswOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJmy6wDBAJmzkQDBAJm 0bQwDQQCAAIwBwMFACwPLkAwDQYJKoZIhvcNAQELBQADggEBAD8vQ0wZW2W7OfSI KUjw8iwPnMQ0AB3DZtXUmgn3d9wWDFQlz/Ri5o6TiXxubPUc/Jhw4vogdWdHBeTx aA9KysqTgf/lnHk2q3o1rIfvJ+eWEfTcO6sGq7Cg1HubT+gS71aq5NNGDcr43E/C nGKAM79rrF0jQ/71ONsQvsHrcMYWbe5W/RMWRcm/e2ik+8GSfG4FhY8oRwAvupRJ /gHJ7wCAZum44KZCh0nxyn60R8cfwcAnGZeIfDI1cXGzCsqV1DtOry71vGPQyRzD xoZ7hy47EsUdQQ1dY0+TlN90MVp8bJSZwe51XlK7fEt6SHUZ/eJv/rHwodOcfixY FiUClP8= -----END CERTIFICATE-----Generated at Fri Dec 19 23:28:18 2025 by rpki-client