This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer File: U-hK8pdaGMGaOWVSP_CxvITmAj0.cer (raw, json) Hash identifier: D144bNQM+oDkS2uLuWoyhAh9XJlzOCj5zC4klRZPvPs= Subject key identifier: 53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3FB8 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Wed 28 Jan 2026 15:45:29 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37803 AS: 329507 IP: 196.49.108.0/24 IP: 196.60.252.0/24 IP: 2001:43f8:1750::/47 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 08 Feb 2026 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16312 (0x3fb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 28 15:45:29 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3642A06AF, serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:5a:d3:18:aa:93:f8:13:06:70:bc:1e:ce: 21:b1:05:bf:e1:43:60:a2:ed:f1:22:94:24:9a:1d: 6d:01:7a:ab:eb:bf:9a:08:02:30:8e:c6:f0:65:d9: fa:90:7e:2f:21:68:a9:b7:97:74:56:d9:7a:d8:17: 0f:8e:f4:fb:a2:cf:71:18:7e:fc:ab:d1:a1:bc:fc: 15:7e:58:d7:10:46:9e:05:67:f6:cf:d2:ac:bb:f2: bb:e7:09:05:f9:14:88:92:40:ad:bb:e5:da:50:6a: df:19:97:2b:a9:b8:a8:73:b6:55:17:90:c7:3e:14: ca:90:ed:c7:8a:c5:cf:e8:b2:d2:33:52:ee:3f:78: 66:c1:2f:ab:20:e0:a0:0c:ed:71:f4:5c:1e:ac:75: 79:32:4a:8f:2d:c7:34:0e:73:69:98:b8:08:a5:40: 79:25:9d:6e:f5:61:29:26:e6:0a:15:b6:66:41:c3: b1:6f:bf:da:8b:f1:00:f1:33:34:9c:dd:ec:a2:bf: b2:41:36:ad:d4:86:e3:4b:6e:d3:5e:a7:56:bd:ec: 43:63:3d:11:6d:94:e6:f2:af:f9:3d:8f:5a:b2:ff: e7:fd:12:18:5a:50:8c:e5:a8:d8:56:62:21:96:cb: b0:68:f6:22:58:57:78:49:5b:2c:76:59:7d:e9:ec: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37803 329507 sbgp-ipAddrBlock: critical IPv4: 196.49.108.0/24 196.60.252.0/24 IPv6: 2001:43f8:1750::/47 Signature Algorithm: sha256WithRSAEncryption 78:fe:0e:d8:c0:ff:a5:0e:a0:3e:9e:dc:43:06:d1:27:cb:01: c5:a0:f4:91:c1:94:fa:b0:ad:73:47:89:09:76:56:c6:02:32: b9:fd:89:a5:1c:1d:61:e5:47:0a:7e:c4:68:5b:1f:b9:39:aa: 88:73:fa:57:d5:78:3a:56:4b:e4:73:6f:be:38:51:b5:2c:d2: e3:01:c6:20:c1:1d:71:0c:02:64:b2:e9:ac:3b:2c:e4:1e:be: b9:ac:b3:96:99:15:33:d2:f8:f1:b9:55:97:f5:90:b6:78:07: 62:8b:f5:5f:da:2c:49:71:dc:e6:fd:a4:81:56:25:a8:f7:e7: b1:42:ff:2f:60:18:fe:aa:fa:9a:3e:26:b4:b8:ac:9c:b7:5b: 77:52:47:09:82:17:78:26:5e:48:a6:c9:14:fe:4c:bc:5b:46: 21:85:e7:45:71:75:23:fa:28:81:3c:4d:61:4f:9a:8e:a0:b7: b3:7c:42:2a:21:0d:cf:f0:14:47:1e:75:9d:52:3c:d4:a7:6b: bf:ba:32:b1:87:68:33:0e:93:27:a3:f1:ed:ea:1f:e1:7e:ef: ef:24:7b:09:d4:11:bd:e5:a8:e8:21:e2:38:80:f4:75:9d:32: 03:4d:89:a7:84:cb:da:88:03:70:09:a0:90:8c:fb:b4:81:63: 97:ac:de:b6 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgICP7gwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMjgxNTQ1MjlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQyQTA2QUYxMTAvBgNVBAUTKDUzRTg0QUYyOTc1QTE4QzE5QTM5NjU1 MjNGRjBCMUJDODRFNjAyM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+SFrTGKqT+BMGcLweziGxBb/hQ2Ci7fEilCSaHW0Beqvrv5oIAjCOxvBl2fqQ fi8haKm3l3RW2XrYFw+O9Puiz3EYfvyr0aG8/BV+WNcQRp4FZ/bP0qy78rvnCQX5 FIiSQK275dpQat8ZlyupuKhztlUXkMc+FMqQ7ceKxc/ostIzUu4/eGbBL6sg4KAM 7XH0XB6sdXkySo8txzQOc2mYuAilQHklnW71YSkm5goVtmZBw7Fvv9qL8QDxMzSc 3eyiv7JBNq3UhuNLbtNep1a97ENjPRFtlObyr/k9j1qy/+f9EhhaUIzlqNhWYiGW y7Bo9iJYV3hJWyx2WX3p7JipAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQUU+hK8pda GMGaOWVSP/CxvITmAj0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0MkEwNi81QTk4NDYwNEZDNjAx MUYwQTlBN0VEQzdEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDJBMDYvNUE5ODQ2MDRGQzYwMTFGMEE5QTdFREM3REFFNEVDOUMvVS1oSzhw ZGFHTUdhT1dWU1BfQ3h2SVRtQWowLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAk6sCAwUHIzA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMQxbAMEAMQ8 /DAPBAIAAjAJAwcBIAFD+BdQMA0GCSqGSIb3DQEBCwUAA4IBAQB4/g7YwP+lDqA+ ntxDBtEnywHFoPSRwZT6sK1zR4kJdlbGAjK5/YmlHB1h5UcKfsRoWx+5OaqIc/pX 1Xg6Vkvkc2++OFG1LNLjAcYgwR1xDAJksumsOyzkHr65rLOWmRUz0vjxuVWX9ZC2 eAdii/Vf2ixJcdzm/aSBViWo9+exQv8vYBj+qvqaPia0uKyct1t3UkcJghd4Jl5I pskU/ky8W0YhhedFcXUj+iiBPE1hT5qOoLezfEIqIQ3P8BRHHnWdUjzUp2u/ujKx h2gzDpMno/Ht6h/hfu/vJHsJ1BG95ajoIeI4gPR1nTIDTYmnhMvaiANwCaCQjPu0 gWOXrN62 -----END CERTIFICATE-----Generated at Fri Feb 6 22:45:37 2026 by rpki-client