This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer File: DD2lBSocT7aPxjEmUGBjsCoEIWY.cer (raw, json) Hash identifier: zkk2jiihAawVfW75fWRbR7gQ77JGgv3uV/s6NS6FcGI= Subject key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36DF Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Tue 18 Nov 2025 00:02:44 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 328888 IP: 102.206.100.0/22 IP: 102.214.20.0/22 IP: 102.219.8.0/22 IP: 2c0f:1500::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14047 (0x36df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 18 00:02:44 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b2:eb:22:5e:63:21:4f:39:c0:4f:ee:aa:73: 77:a1:b6:a4:42:9b:0e:21:0d:54:ef:9e:76:c9:0b: 42:3d:91:59:11:d4:05:04:e1:28:c7:d3:5d:f4:6f: b7:3c:ad:cb:3f:92:af:67:a8:14:92:31:d3:f9:b6: bf:54:4e:90:4d:06:fb:b4:b8:b7:e5:6b:14:b8:37: d3:70:ca:66:d4:53:31:d6:69:5f:22:58:2b:a5:be: 7f:8f:db:54:04:da:05:86:8c:85:01:f6:8a:7a:5a: 92:40:ff:c7:c1:3e:8c:35:ed:ff:d4:72:f1:f6:fa: 1a:c8:e3:f4:57:7f:20:8c:f1:c4:79:13:a8:ec:9f: ec:fd:9d:33:e8:1d:db:e0:b1:c9:9d:d6:83:67:7d: c5:eb:68:18:23:6e:cd:ca:ba:a3:e8:d3:b5:7a:e8: 53:68:98:7e:0d:1b:a6:c4:9e:a0:dd:5f:9a:ae:8b: 7e:4a:c8:e1:3d:05:02:a6:eb:d4:3e:ae:04:74:6d: c9:74:e4:a7:f4:33:57:35:1c:37:01:53:aa:c7:3f: a2:a6:46:f0:16:9c:40:54:aa:cf:71:ed:dd:98:1c: e6:8c:25:ba:db:48:1d:0a:e8:76:15:49:11:09:d5: fe:bb:e9:ef:d9:f3:c1:ca:8f:16:30:39:f8:55:60: 73:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328888 sbgp-ipAddrBlock: critical IPv4: 102.206.100.0/22 102.214.20.0/22 102.219.8.0/22 IPv6: 2c0f:1500::/32 Signature Algorithm: sha256WithRSAEncryption 2d:63:fa:7f:66:ed:e3:19:73:b2:b4:fb:f8:1c:2c:e1:c7:54: 7c:2d:d6:9e:8a:0a:91:f8:94:1d:23:2c:8c:9a:e0:51:75:78: 7f:cd:2b:f2:5b:97:f0:ae:88:7e:91:40:5c:d5:39:4a:7e:89: 61:c0:5e:e9:63:19:a7:39:e2:24:1c:26:96:74:d6:33:51:18: e5:ba:15:88:02:c4:44:9e:86:62:74:b3:0e:ca:85:8d:13:f2: b9:b8:3f:68:90:19:04:6f:70:0e:29:39:08:d5:7d:90:d2:00: 87:50:2b:2c:ad:c2:64:54:66:d2:d8:54:3c:01:e5:b5:3c:d7: 8b:9f:5f:f5:90:b9:4e:7e:36:c9:76:a9:84:66:54:12:a0:2e: 6f:c2:bd:bc:97:4f:72:56:28:07:c4:4d:26:a4:de:0a:81:26: 8b:93:24:02:8a:0a:04:de:45:7e:03:a4:71:09:de:38:71:72: 87:0b:83:cc:61:f3:87:18:b3:63:45:98:e1:1b:13:ca:de:43: 4b:5f:15:26:d6:85:fc:4d:b4:85:82:b1:d7:fb:48:b5:d5:88: ed:2c:72:5c:c1:16:70:95:c6:1f:66:69:ca:68:07:94:85:5f: 86:61:1a:3c:0b:fb:32:fd:68:42:ae:fe:7c:80:7d:a6:a3:37: f7:67:01:11 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICNt8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMTgwMDAyNDRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjc0REE3QUYxMTAvBgNVBAUTKDBDM0RBNTA1MkExQzRGQjY4RkM2MzEy NjUwNjA2M0IwMkEwNDIxNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwsusiXmMhTznAT+6qc3ehtqRCmw4hDVTvnnbJC0I9kVkR1AUE4SjH0130b7c8 rcs/kq9nqBSSMdP5tr9UTpBNBvu0uLflaxS4N9NwymbUUzHWaV8iWCulvn+P21QE 2gWGjIUB9op6WpJA/8fBPow17f/UcvH2+hrI4/RXfyCM8cR5E6jsn+z9nTPoHdvg scmd1oNnfcXraBgjbs3KuqPo07V66FNomH4NG6bEnqDdX5qui35KyOE9BQKm69Q+ rgR0bcl05Kf0M1c1HDcBU6rHP6KmRvAWnEBUqs9x7d2YHOaMJbrbSB0K6HYVSREJ 1f676e/Z88HKjxYwOfhVYHPzAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUDD2lBSoc T7aPxjEmUGBjsCoEIWYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3NERBNy9DNjYxRUU2RTE0QjMx MUVEQTEyMzY4RjJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NzREQTcvQzY2MUVFNkUxNEIzMTFFREExMjM2OEYyRjEyMjI0NjgvREQybEJT b2NUN2FQeGpFbVVHQmpzQ29FSVdZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBLgwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJmzmQDBAJm1hQDBAJm 2wgwDQQCAAIwBwMFACwPFQAwDQYJKoZIhvcNAQELBQADggEBAC1j+n9m7eMZc7K0 +/gcLOHHVHwt1p6KCpH4lB0jLIya4FF1eH/NK/Jbl/CuiH6RQFzVOUp+iWHAXulj Gac54iQcJpZ01jNRGOW6FYgCxESehmJ0sw7KhY0T8rm4P2iQGQRvcA4pOQjVfZDS AIdQKyytwmRUZtLYVDwB5bU814ufX/WQuU5+Nsl2qYRmVBKgLm/CvbyXT3JWKAfE TSak3gqBJouTJAKKCgTeRX4DpHEJ3jhxcocLg8xh84cYs2NFmOEbE8reQ0tfFSbW hfxNtIWCsdf7SLXViO0sclzBFnCVxh9macpoB5SFX4ZhGjwL+zL9aEKu/nyAfaaj N/dnARE= -----END CERTIFICATE-----Generated at Sat Dec 6 04:01:10 2025 by rpki-client