This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer File: WNo74zGmEqquT2owY3cEBjrD3UI.cer (raw, json) Hash identifier: mlNd1D6oKzSFuMp5Jdpn7JUtQVi6BjoAcjgPTKv1BL8= Subject key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3705 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Sat 29 Nov 2025 00:05:04 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 328988 IP: 102.203.224.0/22 IP: 102.208.96.0/22 IP: 102.213.68.0/22 IP: 102.218.48.0/22 IP: 2c0f:6f00::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 07 Dec 2025 11:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14085 (0x3705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 29 00:05:04 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36CA351AF, serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:44:36:c0:58:ca:f6:0f:60:bd:b7:dd:15: 28:a2:f4:30:56:20:72:81:0b:7d:cd:e5:ad:38:ff: 6d:72:f2:f1:26:6d:2e:0c:43:c4:fb:e6:ca:70:cb: fc:ad:5e:c4:7a:8f:cc:19:e1:27:90:ce:da:20:76: 21:86:44:74:01:5f:5e:77:ca:ca:ab:6e:11:4f:c5: e0:34:88:6a:ba:ec:7b:6a:5c:76:9a:39:e9:25:b1: 23:1a:8d:9c:b6:2e:bd:cc:ca:2e:a1:18:90:4a:bf: 93:6e:41:74:6a:08:c0:db:20:a2:31:51:4d:e9:da: 97:2b:88:9e:56:e1:70:30:fa:24:9d:b0:04:19:45: 3f:5e:82:dd:d1:33:0f:b1:f4:9f:00:65:93:8b:72: 2c:09:2c:dc:96:71:c4:59:0c:5a:76:9c:55:61:e1: 08:80:5c:f1:f0:4a:a3:3d:09:81:19:1e:6a:a1:f5: 3c:f9:8e:7a:be:c4:08:5b:1d:d1:aa:89:f7:c1:ab: b6:41:c5:8b:e1:76:b7:d6:d7:34:db:63:0a:10:90: 05:03:95:15:51:68:d2:7a:0e:78:d2:8e:ab:55:ea: 50:03:ca:b3:74:f3:55:17:ab:c1:3d:30:9b:a9:ac: 8e:6a:4c:e6:99:25:a3:d7:8a:fd:2f:04:9f:66:aa: 52:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328988 sbgp-ipAddrBlock: critical IPv4: 102.203.224.0/22 102.208.96.0/22 102.213.68.0/22 102.218.48.0/22 IPv6: 2c0f:6f00::/32 Signature Algorithm: sha256WithRSAEncryption 5c:7e:28:4c:56:2f:6a:b6:1a:ee:af:d2:0c:ca:55:24:8a:34: 42:07:01:1a:cb:8b:25:2f:80:6e:9a:37:29:23:0c:ca:54:ef: b6:de:c0:f4:d8:3e:e0:ed:e6:ce:08:59:86:09:70:23:e4:b2: 65:4b:46:d4:13:22:1b:14:25:ea:15:6d:69:2c:d5:8b:2e:c7: e8:c5:77:c6:86:e6:96:31:cf:fc:dc:11:de:af:af:c9:f5:2d: ae:59:b6:a9:40:66:4d:b2:c8:6e:2f:76:f9:dc:23:58:f8:57: b5:5c:e2:bf:b9:8b:6d:2f:08:af:9c:c6:bc:19:f5:8d:9d:9d: fd:6f:ad:09:cb:10:f7:ba:82:b9:89:67:a7:3d:38:0b:28:bc: 61:a2:8f:28:77:ee:9e:8e:0d:6d:b8:29:39:53:8c:a3:10:7c: c8:23:06:13:df:09:a7:8c:3a:e0:38:65:bf:51:e6:48:e9:7a: 4d:74:d1:7f:6a:dc:3d:31:70:4b:53:81:68:bb:14:4c:0e:5f: 1e:27:a4:65:a7:10:6c:03:81:8c:64:c8:1e:86:cd:60:57:a4: 7b:07:10:db:12:34:65:2b:ae:7a:70:18:74:60:ba:f4:58:0a: a9:09:72:60:43:7f:ff:ee:16:a6:15:27:3f:8b:38:bf:28:3d: 83:e0:cc:23 -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICNwUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMjkwMDA1MDRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkNBMzUxQUYxMTAvBgNVBAUTKDU4REEzQkUzMzFBNjEyQUFBRTRGNkEz MDYzNzcwNDA2M0FDM0RENDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSnEQ2wFjK9g9gvbfdFSii9DBWIHKBC33N5a04/21y8vEmbS4MQ8T75spwy/yt XsR6j8wZ4SeQztogdiGGRHQBX153ysqrbhFPxeA0iGq67HtqXHaaOeklsSMajZy2 Lr3Myi6hGJBKv5NuQXRqCMDbIKIxUU3p2pcriJ5W4XAw+iSdsAQZRT9egt3RMw+x 9J8AZZOLciwJLNyWccRZDFp2nFVh4QiAXPHwSqM9CYEZHmqh9Tz5jnq+xAhbHdGq iffBq7ZBxYvhdrfW1zTbYwoQkAUDlRVRaNJ6DnjSjqtV6lADyrN081UXq8E9MJup rI5qTOaZJaPXiv0vBJ9mqlKLAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUWNo74zGm EqquT2owY3cEBjrD3UIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDQTM1MS9EOEU2QzVFQUMyRTYx MUVFOEI5MDY5N0I3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Q0EzNTEvRDhFNkM1RUFDMkU2MTFFRThCOTA2OTdCNzc1NDEyRTYvV05vNzR6 R21FcXF1VDJvd1kzY0VCanJEM1VJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBRwwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJmy+ADBAJm0GADBAJm 1UQDBAJm2jAwDQQCAAIwBwMFACwPbwAwDQYJKoZIhvcNAQELBQADggEBAFx+KExW L2q2Gu6v0gzKVSSKNEIHARrLiyUvgG6aNykjDMpU77bewPTYPuDt5s4IWYYJcCPk smVLRtQTIhsUJeoVbWks1Ysux+jFd8aG5pYxz/zcEd6vr8n1La5ZtqlAZk2yyG4v dvncI1j4V7Vc4r+5i20vCK+cxrwZ9Y2dnf1vrQnLEPe6grmJZ6c9OAsovGGijyh3 7p6ODW24KTlTjKMQfMgjBhPfCaeMOuA4Zb9R5kjpek100X9q3D0xcEtTgWi7FEwO Xx4npGWnEGwDgYxkyB6GzWBXpHsHENsSNGUrrnpwGHRguvRYCqkJcmBDf//uFqYV Jz+LOL8oPYPgzCM= -----END CERTIFICATE-----Generated at Fri Dec 5 23:08:00 2025 by rpki-client