This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer File: z29NYNDVwubTeacR0bavARMMKmw.cer (raw, json) Hash identifier: xGFbeYuZDnD1djkprZSLeEhqYQn5jj5GQldLfY/87Es= Subject key identifier: CF:6F:4D:60:D0:D5:C2:E6:D3:79:A7:11:D1:B6:AF:01:13:0C:2A:6C Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B33 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:38:03 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328320 IP: 102.128.80.0/20 IP: 102.132.64.0/20 IP: 102.141.192.0/22 IP: 2c0f:55c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 05:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15155 (0x3b33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:38:03 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F367C385AF, serialNumber=CF6F4D60D0D5C2E6D379A711D1B6AF01130C2A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:3f:e3:da:25:a8:fe:26:b4:b5:ae:e2:ae: a7:98:c9:ad:29:2d:93:e0:a8:e3:41:92:27:7c:1d: c9:16:8a:a2:35:f8:26:b1:09:53:d0:76:07:72:bd: 2b:b5:a6:97:a8:58:90:0b:48:56:04:ee:70:03:b5: 04:7c:c7:f8:0f:2c:7e:69:66:23:9d:10:0b:11:3c: 2e:7a:3d:1b:7a:f1:21:4f:df:6d:4c:b9:95:61:f5: 82:66:db:90:dc:4e:98:35:98:5e:28:d7:db:d1:73: e8:1d:04:dd:3f:75:b4:09:b6:b4:b6:56:1b:cc:38: 2b:39:d5:92:9a:a1:7e:27:69:b3:a9:2e:f5:c6:e8: 9f:3a:17:f2:4b:b0:8e:20:4e:62:9b:5a:e7:05:59: 9e:37:ac:91:1d:5a:b2:3d:3d:36:a7:6b:3c:ae:26: 57:aa:87:5c:af:dd:06:16:f4:16:8c:f4:75:81:d7: 68:35:47:47:fc:3e:19:b9:04:87:59:3b:f4:41:83: 1b:53:9d:01:8a:bf:ea:db:87:01:f7:fb:cb:aa:74: a9:87:9f:31:fc:44:27:78:2b:d0:10:fa:e6:6a:8e: fb:41:bd:80:20:f6:db:cd:e9:aa:4c:77:2f:58:93: b9:36:69:9a:75:8b:c6:79:8a:6a:ca:6d:22:90:79: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6F:4D:60:D0:D5:C2:E6:D3:79:A7:11:D1:B6:AF:01:13:0C:2A:6C X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328320 sbgp-ipAddrBlock: critical IPv4: 102.128.80.0/20 102.132.64.0/20 102.141.192.0/22 IPv6: 2c0f:55c0::/32 Signature Algorithm: sha256WithRSAEncryption 91:c5:f1:db:f1:7b:76:93:1e:b9:cc:ba:2f:2e:4c:da:34:2f: 9a:ab:6b:be:f3:c8:a5:58:d1:aa:d0:15:ef:20:f0:e0:46:9a: ba:60:a2:14:90:3a:1c:f7:7b:ab:87:74:b1:f6:02:36:c3:12: ad:9f:8a:bd:24:dd:41:ce:9f:24:2c:f5:52:b9:e1:13:4b:73: d3:56:e7:2a:18:df:bf:ee:b5:61:1f:7f:94:75:8e:8f:94:8e: 56:f8:4b:d6:91:9f:23:04:34:94:98:d1:71:bf:d5:1f:a2:c6: fb:e7:82:ba:31:20:03:55:38:da:73:85:a1:9b:56:16:1c:f7: f5:63:a8:ac:07:c4:07:9b:3d:62:69:08:cc:89:ea:3e:c4:8e: bc:f7:8e:36:9b:f9:ba:46:2a:c8:30:02:cc:54:60:67:2c:f8: 5e:df:1a:64:67:53:65:46:6b:37:f9:7b:16:2a:09:3f:5f:4b: 97:8b:67:19:e8:06:6b:c7:14:c7:94:fd:12:d7:f0:5f:b7:62: 83:b3:6d:8c:76:ab:9d:b4:40:74:01:27:3c:ef:ef:6e:49:2b: 4d:ce:de:9a:53:03:d3:68:f7:c9:f5:78:fa:6b:77:a0:09:2b: eb:2a:c3:97:ef:f3:68:8a:a6:1f:5a:dd:0e:c8:1d:90:0c:b0: 8f:44:17:08 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICOzMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjM4MDNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjdDMzg1QUYxMTAvBgNVBAUTKENGNkY0RDYwRDBENUMyRTZEMzc5QTcx MUQxQjZBRjAxMTMwQzJBNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5bj/j2iWo/ia0ta7irqeYya0pLZPgqONBkid8HckWiqI1+CaxCVPQdgdyvSu1 ppeoWJALSFYE7nADtQR8x/gPLH5pZiOdEAsRPC56PRt68SFP321MuZVh9YJm25Dc Tpg1mF4o19vRc+gdBN0/dbQJtrS2VhvMOCs51ZKaoX4nabOpLvXG6J86F/JLsI4g TmKbWucFWZ43rJEdWrI9PTanazyuJleqh1yv3QYW9BaM9HWB12g1R0f8Phm5BIdZ O/RBgxtTnQGKv+rbhwH3+8uqdKmHnzH8RCd4K9AQ+uZqjvtBvYAg9tvN6apMdy9Y k7k2aZp1i8Z5imrKbSKQeSRBAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUz29NYNDV wubTeacR0bavARMMKmwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3QzM4NS9BM0QyQ0UwMEM1RTUx MUVBQUI2MkIxMjJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2N0MzODUvQTNEMkNFMDBDNUU1MTFFQUFCNjJCMTIyRjhBRUEyMjgvejI5TllO RFZ3dWJUZWFjUjBiYXZBUk1NS213Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAoAwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBARmgFADBARmhEADBAJm jcAwDQQCAAIwBwMFACwPVcAwDQYJKoZIhvcNAQELBQADggEBAJHF8dvxe3aTHrnM ui8uTNo0L5qra77zyKVY0arQFe8g8OBGmrpgohSQOhz3e6uHdLH2AjbDEq2fir0k 3UHOnyQs9VK54RNLc9NW5yoY37/utWEff5R1jo+Ujlb4S9aRnyMENJSY0XG/1R+i xvvngroxIANVONpzhaGbVhYc9/VjqKwHxAebPWJpCMyJ6j7Ejrz3jjab+bpGKsgw AsxUYGcs+F7fGmRnU2VGazf5exYqCT9fS5eLZxnoBmvHFMeU/RLX8F+3YoOzbYx2 q520QHQBJzzv725JK03O3ppTA9No98n1ePprd6AJK+sqw5fv82iKph9a3Q7IHZAM sI9EFwg= -----END CERTIFICATE-----Generated at Thu Jan 1 09:05:31 2026 by rpki-client