This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer File: 0ffADvPrBuiBfP3B25YGBAfknA0.cer (raw, json) Hash identifier: P61tLVeiNpfBDyt9PPcsENMaujv/k52B1rcA45gzVLc= Subject key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3945 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:24:37 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328608 IP: 102.219.64.0/22 IP: 102.223.44.0/22 IP: 102.223.196.0/22 IP: 2c0f:ebd0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 30 Jan 2026 08:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14661 (0x3945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:24:37 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F364789CAF, serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:c0:0c:c1:b2:c0:d9:9b:7c:21:0c:4f:82: 49:14:6b:45:19:03:3b:68:d7:65:f3:0a:68:e9:89: fe:9f:db:35:45:99:0f:fe:d8:49:ea:67:a5:85:d9: 6b:c5:cb:06:74:79:37:f2:0a:f0:22:f6:fc:fc:21: 91:c9:81:5c:75:e6:bc:81:0c:61:0a:20:94:3b:e8: 27:81:95:c9:95:4b:2b:47:17:31:ac:5c:22:ce:8e: 55:8d:0d:84:88:77:c6:17:a7:14:c0:bf:55:a5:56: 16:29:1d:09:46:4a:f2:62:f1:4d:16:8d:01:38:61: 5d:fc:2a:91:3d:09:9d:17:f5:6f:82:85:33:4e:34: b9:68:2b:59:25:d3:60:fd:c2:f4:ff:24:2a:96:8a: 13:08:9e:39:4c:25:a1:18:5c:8b:c8:f5:88:bb:a4: d5:90:be:13:0c:71:02:34:ac:e2:84:a1:33:a5:59: 93:82:cd:61:8a:9d:a6:7b:ec:1f:6a:08:06:0c:00: ef:bc:29:42:99:1d:7d:eb:88:91:4a:2d:d9:1f:cc: 75:23:ac:6e:cd:9e:df:6b:db:40:fa:2b:0c:ef:54: dc:91:92:28:8a:29:64:e0:90:e7:14:4d:34:42:1e: f2:7f:e8:d2:fb:da:7b:f0:33:c0:28:39:18:0c:82: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328608 sbgp-ipAddrBlock: critical IPv4: 102.219.64.0/22 102.223.44.0/22 102.223.196.0/22 IPv6: 2c0f:ebd0::/32 Signature Algorithm: sha256WithRSAEncryption bf:9d:87:35:71:74:52:3b:88:3c:1d:ee:61:46:ac:60:46:8f: 86:42:9e:3f:a8:96:62:0d:bd:2e:08:71:c8:1a:53:72:15:02: d6:61:43:57:d8:88:ac:30:29:85:1b:c6:57:81:19:f3:18:fc: f5:08:a1:41:17:15:18:ff:98:3d:70:1d:63:24:91:de:67:e3: e2:26:9c:37:b1:04:d8:2a:a0:35:78:b0:f3:20:65:ca:19:8b: 1a:75:73:25:0d:37:22:8e:39:b1:0d:b1:de:17:14:ed:38:bc: d3:11:4e:85:eb:5a:97:95:eb:bb:8b:bb:3f:de:c7:ed:28:10: 36:fd:5a:6d:4f:59:d3:b1:f7:88:40:8a:9b:a2:b2:8d:ae:a1: da:e0:dc:40:f0:0a:75:da:a0:df:96:1a:22:4b:0d:47:9f:84: f4:a3:8d:c7:96:44:bd:fa:9e:d5:01:1b:b8:90:5a:c0:bf:28: fe:69:88:9c:ea:18:79:d6:e8:93:74:86:53:52:8f:82:e7:8d: 62:a2:6c:e5:52:37:0c:b3:c2:80:f9:f1:93:cb:a9:0c:0c:bd: 90:32:70:14:20:b6:f2:18:3c:fd:19:ab:41:c2:01:d3:37:d7: 77:49:72:a9:bc:70:95:8b:34:a1:ad:d1:a2:82:d7:f4:f8:80: a2:25:29:56 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICOUUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTI0MzdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQ3ODlDQUYxMTAvBgNVBAUTKEQxRjdDMDBFRjNFQjA2RTg4MTdDRkRD MURCOTYwNjA0MDdFNDlDMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP78AMwbLA2Zt8IQxPgkkUa0UZAzto12XzCmjpif6f2zVFmQ/+2EnqZ6WF2WvF ywZ0eTfyCvAi9vz8IZHJgVx15ryBDGEKIJQ76CeBlcmVSytHFzGsXCLOjlWNDYSI d8YXpxTAv1WlVhYpHQlGSvJi8U0WjQE4YV38KpE9CZ0X9W+ChTNONLloK1kl02D9 wvT/JCqWihMInjlMJaEYXIvI9Yi7pNWQvhMMcQI0rOKEoTOlWZOCzWGKnaZ77B9q CAYMAO+8KUKZHX3riJFKLdkfzHUjrG7Nnt9r20D6KwzvVNyRkiiKKWTgkOcUTTRC HvJ/6NL72nvwM8AoORgMglSDAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU0ffADvPr BuiBfP3B25YGBAfknA0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0Nzg5Qy83MkVGQUY0QzkxMDEx MUVBQkQzRjI0NzNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDc4OUMvNzJFRkFGNEM5MTAxMTFFQUJEM0YyNDczRjhBRUEyMjgvMGZmQUR2 UHJCdWlCZlAzQjI1WUdCQWZrbkEwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA6AwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJm20ADBAJm3ywDBAJm 38QwDQQCAAIwBwMFACwP69AwDQYJKoZIhvcNAQELBQADggEBAL+dhzVxdFI7iDwd 7mFGrGBGj4ZCnj+olmINvS4IccgaU3IVAtZhQ1fYiKwwKYUbxleBGfMY/PUIoUEX FRj/mD1wHWMkkd5n4+ImnDexBNgqoDV4sPMgZcoZixp1cyUNNyKOObENsd4XFO04 vNMRToXrWpeV67uLuz/ex+0oEDb9Wm1PWdOx94hAipuiso2uodrg3EDwCnXaoN+W GiJLDUefhPSjjceWRL36ntUBG7iQWsC/KP5piJzqGHnW6JN0hlNSj4LnjWKibOVS NwyzwoD58ZPLqQwMvZAycBQgtvIYPP0Zq0HCAdM313dJcqm8cJWLNKGt0aKC1/T4 gKIlKVY= -----END CERTIFICATE-----Generated at Wed Jan 28 12:09:17 2026 by rpki-client