This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer File: OE9qPQyKkcXy3zehH1p7nFJb7hY.cer (raw, json) Hash identifier: ZDHDKyi7a5JldzWE8N75ue7/RMLlc3Y9Gqpv71PuGpQ= Subject key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 37EC Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:26:56 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328502 IP: 102.134.28.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 21 Jan 2026 13:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14316 (0x37ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:26:56 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:a4:5b:05:a6:93:2d:3c:dd:8a:a7:83:1b: 56:67:f8:d6:f8:5d:cd:a3:72:9d:03:1e:7d:b3:a4: 3f:14:9e:9e:7e:2a:33:5b:18:28:a3:1d:a8:d4:29: 47:68:fb:ee:2f:31:62:b1:cd:fd:77:04:df:99:56: ba:8c:72:4a:1c:42:6f:5b:98:f2:b4:37:bb:13:a3: 4d:f3:db:df:76:0a:02:b3:84:4b:1b:88:4b:f2:39: 3c:89:47:a0:5b:1f:29:f8:a3:1c:0e:e6:b4:5a:e5: 37:df:bd:c7:1b:dc:53:ce:88:fb:25:2d:cc:fb:fc: 8e:8f:3e:d1:1c:3e:6c:7c:c0:f6:55:e0:77:17:4b: 25:fd:d9:74:ee:2a:8f:05:f7:a5:6f:fd:88:d9:08: 7d:2e:af:0e:4b:9d:05:b4:2d:68:ce:fb:66:6a:89: e5:ef:5d:29:eb:f8:75:2d:df:c6:08:a6:38:1e:56: ab:66:28:c7:c3:5e:6f:b9:fa:bc:07:9e:da:0d:ca: 5f:b9:47:52:1e:16:13:f8:30:1e:09:03:2a:4e:2b: 8a:97:e3:20:1d:d5:16:de:4f:0c:79:01:e3:45:55: 3b:01:3f:41:14:76:2f:a2:0b:63:d6:98:fc:0e:4b: 42:8c:56:2c:90:ba:e7:c6:35:5c:0a:54:20:a6:8d: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328502 sbgp-ipAddrBlock: critical IPv4: 102.134.28.0/22 Signature Algorithm: sha256WithRSAEncryption 89:14:3a:01:d3:33:96:02:ec:e6:39:ab:32:48:5d:dc:a5:ba: 8a:06:3d:2b:ea:2c:9b:2b:e2:71:c9:f7:09:2b:8e:69:c1:bb: 53:6e:d3:72:9d:02:21:c9:5a:0a:46:f0:9b:23:f4:a4:c0:d4: b9:a2:65:58:9c:b2:47:8b:53:bc:84:09:54:58:a3:4e:bf:59: 5c:a1:99:68:fc:df:f4:d3:b8:0d:38:a3:7f:41:f2:13:da:c4: 20:ab:1d:46:d4:8e:71:30:44:70:41:18:9f:dc:91:39:f2:e6: 2d:cb:cc:79:a2:e5:6d:17:e4:25:35:98:bb:f8:35:2b:ce:66: 64:58:9f:93:5c:62:03:55:26:57:cb:4f:96:a5:d7:b2:66:46: 16:20:ae:9b:26:12:ad:a2:41:6e:15:48:9d:b9:3f:f4:50:95: 3e:04:ad:06:bc:fe:e0:bc:9a:5d:e7:16:0c:a3:08:6f:61:a4: 34:03:55:c6:a7:47:9d:92:9b:6e:36:47:03:58:ac:51:20:0f: d5:8a:04:6d:41:64:75:7b:e7:e3:ee:32:4a:e6:26:0a:2c:05: ba:0a:4f:21:a2:10:84:79:18:a2:52:0b:5c:49:87:a1:55:da: 2c:ec:34:b5:0f:1d:27:d5:28:af:fe:18:ea:64:72:dd:29:0b: b8:9d:bc:33 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICN+wwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDI2NTZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjIxN0RGQUYxMTAvBgNVBAUTKDM4NEY2QTNEMEM4QTkxQzVGMkRGMzdB MTFGNUE3QjlDNTI1QkVFMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1IqRbBaaTLTzdiqeDG1Zn+Nb4Xc2jcp0DHn2zpD8Unp5+KjNbGCijHajUKUdo ++4vMWKxzf13BN+ZVrqMckocQm9bmPK0N7sTo03z2992CgKzhEsbiEvyOTyJR6Bb Hyn4oxwO5rRa5Tffvccb3FPOiPslLcz7/I6PPtEcPmx8wPZV4HcXSyX92XTuKo8F 96Vv/YjZCH0urw5LnQW0LWjO+2ZqieXvXSnr+HUt38YIpjgeVqtmKMfDXm+5+rwH ntoNyl+5R1IeFhP4MB4JAypOK4qX4yAd1RbeTwx5AeNFVTsBP0EUdi+iC2PWmPwO S0KMViyQuufGNVwKVCCmjSVjAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUOE9qPQyK kcXy3zehH1p7nFJb7hYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyMTdERi81NEJEQkIyNEU5Mzgx MUVGOTk4QTY2Nzk3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MjE3REYvNTRCREJCMjRFOTM4MTFFRjk5OEE2Njc5NzYyRTk1MUEvT0U5cVBR eUtrY1h5M3plaEgxcDduRkpiN2hZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAzYwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmhhwwDQYJKoZIhvcN AQELBQADggEBAIkUOgHTM5YC7OY5qzJIXdyluooGPSvqLJsr4nHJ9wkrjmnBu1Nu 03KdAiHJWgpG8Jsj9KTA1LmiZVicskeLU7yECVRYo06/WVyhmWj83/TTuA04o39B 8hPaxCCrHUbUjnEwRHBBGJ/ckTny5i3LzHmi5W0X5CU1mLv4NSvOZmRYn5NcYgNV JlfLT5al17JmRhYgrpsmEq2iQW4VSJ25P/RQlT4ErQa8/uC8ml3nFgyjCG9hpDQD VcanR52Sm242RwNYrFEgD9WKBG1BZHV75+PuMkrmJgosBboKTyGiEIR5GKJSC1xJ h6FV2izsNLUPHSfVKK/+GOpkct0pC7idvDM= -----END CERTIFICATE-----Generated at Mon Jan 19 19:18:10 2026 by rpki-client