This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer File: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer (raw, json) Hash identifier: cbkVe6n2mMoC1UUKE+cgvx4d8CsTHodNTfgctDYqmxo= Subject key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39BB Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:42:51 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.210.190.0/23 IP: 2001:43ff:d000::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 10 Jan 2026 15:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14779 (0x39bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:42:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:a0:a0:16:20:60:b1:06:f2:7b:a4:0e:6a: b9:79:23:e4:d7:a6:5f:94:78:9e:09:63:72:8c:4d: 69:82:16:b0:2e:90:22:c6:4b:74:91:8a:c1:c2:96: 08:9e:eb:ba:a4:47:9f:97:06:89:8e:5f:79:07:f7: e8:df:fe:3f:1e:3e:2f:b2:88:7a:5d:ff:c1:cf:a4: 92:a4:cf:cf:92:1e:e7:87:e0:97:0e:5a:9f:68:94: 70:4d:91:36:1f:0f:31:ec:ab:e5:53:df:45:0f:c2: e9:e8:be:f0:c8:d2:65:f2:d7:09:7c:7a:12:44:90: db:1b:72:71:37:b4:4d:f5:b1:04:1d:33:f9:5b:ea: 6d:d6:8b:b5:9c:b2:cd:52:d7:e9:30:93:b5:fc:d0: 51:6e:55:3e:be:ff:56:d2:99:04:c6:58:1d:ed:6a: cf:46:33:af:cf:ac:c7:8a:f5:be:5a:8b:34:07:47: ac:a7:90:58:9f:8a:fb:00:b7:a7:4d:d7:66:56:11: 10:8a:9b:5b:e2:85:2b:c8:8c:3b:94:ee:19:72:1c: 71:c4:f1:51:33:fa:25:dc:96:7b:ac:a8:f4:86:02: 0a:b2:d7:9a:8b:0c:8a:40:07:23:41:1f:be:bb:83: 06:d5:04:89:a5:75:23:5e:50:9d:a4:22:19:c6:8e: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft sbgp-ipAddrBlock: critical IPv4: 102.210.190.0/23 IPv6: 2001:43ff:d000::/48 Signature Algorithm: sha256WithRSAEncryption bb:b2:69:b6:b6:e5:f5:a9:9f:91:9f:2c:44:29:11:41:75:78: e8:9b:36:fc:d5:06:a2:58:11:07:85:95:46:ae:e6:c3:d4:06: fa:d3:2e:36:15:fb:fe:29:a9:b6:76:fe:bb:7e:6b:df:d9:64: 50:0b:29:23:74:58:ed:1b:9d:4f:cc:ee:05:3c:25:da:5b:cc: ee:ba:49:d5:31:d7:60:16:df:32:2d:d2:03:87:cb:c7:fe:21: c3:b6:bf:19:18:8e:bd:77:12:22:26:b3:84:8b:c4:39:f8:78: d6:14:7a:13:aa:2a:66:86:4e:a5:e4:ab:af:cb:e7:26:b2:31: 8c:94:61:9b:fe:e2:fb:d6:26:28:4d:23:e2:83:a2:66:f1:bf: 5c:1a:cb:0e:fe:35:c0:82:25:33:f6:7b:40:60:16:f3:67:02: d8:27:55:e6:b4:eb:cb:c0:66:6f:2d:30:70:0f:d7:c4:c8:b9: 5f:78:80:8d:64:c8:35:42:1e:a0:12:ce:a7:21:90:3e:9f:69: 35:be:f2:93:c9:23:63:d3:a5:13:c8:1b:80:3f:f3:5b:58:0e: 1c:38:23:50:7f:8c:10:4b:a2:2c:dc:d9:be:bb:f5:9b:f1:5b: fb:b3:8f:93:53:c9:ff:c9:02:ea:fe:bb:9f:0f:ba:17:a2:55: 1f:7b:c7:9b -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgICObswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTQyNTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjU2QkI4QUYxMTAvBgNVBAUTKEY2NzA2NjQzOUFDRDlFQUZENDg5OUZD NjhDNjA3NUM3MENFMzlBRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7A6CgFiBgsQbye6QOarl5I+TXpl+UeJ4JY3KMTWmCFrAukCLGS3SRisHClgie 67qkR5+XBomOX3kH9+jf/j8ePi+yiHpd/8HPpJKkz8+SHueH4JcOWp9olHBNkTYf DzHsq+VT30UPwunovvDI0mXy1wl8ehJEkNsbcnE3tE31sQQdM/lb6m3Wi7Wcss1S 1+kwk7X80FFuVT6+/1bSmQTGWB3tas9GM6/PrMeK9b5aizQHR6ynkFifivsAt6dN 12ZWERCKm1vihSvIjDuU7hlyHHHE8VEz+iXclnusqPSGAgqy15qLDIpAByNBH767 gwbVBImldSNeUJ2kIhnGjriHAgMBAAGjggMAMIIC/DAdBgNVHQ4EFgQU9nBmQ5rN nq/UiZ/GjGB1xwzjmtUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1NkJCOC9ENzlFRUI5NDg5MUMx MUVFQUY2NUM3NjA0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NTZCQjgvRDc5RUVCOTQ4OTFDMTFFRUFGNjVDNzYwNEFEOUU2RkMvOW5CbVE1 ck5ucV9VaVpfR2pHQjF4d3pqbXRVLm1mdDAwBggrBgEFBQcBBwEB/wQhMB8wDAQC AAEwBgMEAWbSvjAPBAIAAjAJAwcAIAFD/9AAMA0GCSqGSIb3DQEBCwUAA4IBAQC7 smm2tuX1qZ+RnyxEKRFBdXjomzb81QaiWBEHhZVGrubD1Ab60y42Ffv+Kam2dv67 fmvf2WRQCykjdFjtG51PzO4FPCXaW8zuuknVMddgFt8yLdIDh8vH/iHDtr8ZGI69 dxIiJrOEi8Q5+HjWFHoTqipmhk6l5Kuvy+cmsjGMlGGb/uL71iYoTSPig6Jm8b9c GssO/jXAgiUz9ntAYBbzZwLYJ1XmtOvLwGZvLTBwD9fEyLlfeICNZMg1Qh6gEs6n IZA+n2k1vvKTySNj06UTyBuAP/NbWA4cOCNQf4wQS6Is3Nm+u/Wb8Vv7s4+TU8n/ yQLq/rufD7oXolUfe8eb -----END CERTIFICATE-----Generated at Fri Jan 9 01:03:11 2026 by rpki-client