This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer File: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer (raw, json) Hash identifier: /ucwjQ935qEo7/pxa3hyGSgT7u6Dc9P5ii6RbVG/mfc= Subject key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 370B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Tue 02 Dec 2025 00:01:34 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 328271 IP: 102.22.208.0/21 IP: 102.176.180.0/22 IP: 102.203.216.0/22 IP: 102.210.56.0/22 IP: 2c0f:ee68::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14091 (0x370b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Dec 2 00:01:34 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:a8:ab:09:ad:3c:f4:ff:4d:3d:5c:24:c4: 22:05:fb:33:40:e2:de:be:24:64:d2:10:df:eb:a4: 25:6c:16:f1:ff:f2:d6:93:ad:4b:67:a4:f6:6b:9b: 78:9e:73:ee:0a:e9:f9:8b:51:a5:a4:0e:f6:d5:91: c7:d5:d8:4f:fd:06:0f:a8:41:9c:7b:aa:c5:3d:33: 6f:b6:b5:a9:2b:42:ac:2f:0a:62:b1:fe:ae:4e:85: ef:07:92:fe:ef:83:e2:86:b1:b3:c1:4e:a4:23:14: b9:62:3d:25:a0:3b:ef:9f:65:36:52:e8:8a:2d:6a: cb:e7:dc:b6:7d:bf:d9:d2:2c:9d:c7:7f:b6:f5:6f: 78:c1:ab:6c:dd:b3:b4:8b:b9:6e:56:72:70:cb:ac: 30:96:9a:4e:35:3b:97:af:63:05:7b:03:f5:8e:b4: 8b:04:ce:b6:80:68:93:84:0b:33:c2:de:3a:ba:58: 91:21:4d:b5:cb:20:b8:d7:6c:67:28:ee:dd:87:8e: 2a:9d:1b:8d:b1:83:6e:ae:05:9f:92:4c:5f:e3:e6: 91:61:97:dc:bb:b1:b1:06:8b:49:76:f8:52:bd:6a: 0f:ea:9d:d3:a6:37:fe:5b:10:89:7a:67:4d:86:88: 66:a0:55:a9:76:ed:41:fb:4c:22:8a:89:60:e1:02: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328271 sbgp-ipAddrBlock: critical IPv4: 102.22.208.0/21 102.176.180.0/22 102.203.216.0/22 102.210.56.0/22 IPv6: 2c0f:ee68::/32 Signature Algorithm: sha256WithRSAEncryption 94:89:53:b5:03:ce:6f:e5:a9:9d:f7:86:30:b4:18:a7:dc:20: a8:a0:45:36:0d:ed:6e:8f:d5:7a:b1:4a:a6:27:9e:7e:12:b7: d6:c2:fb:01:c1:c9:ee:01:09:5e:4e:16:10:f2:34:b2:31:7b: 24:0a:73:60:22:9f:ff:ed:2e:5e:ce:8d:2a:a9:61:08:00:96: 39:e4:d8:8b:96:1c:f6:70:4f:a2:d5:f1:b0:5d:a7:4d:ab:8d: 83:c6:65:b0:2d:dd:02:db:ae:fc:98:aa:7d:40:03:84:08:0b: b6:a2:94:5e:77:70:64:5b:c4:2d:8b:72:50:be:47:58:a0:02: 09:7c:1d:29:db:9f:5e:f8:b5:7d:ba:bc:47:b6:dd:4c:18:88: 78:f8:b0:06:05:fe:9e:dc:f6:fb:62:0e:df:b2:1e:a8:63:c0: a7:e9:95:20:06:06:62:77:51:d6:38:67:ff:f3:6b:fd:01:38: 00:2f:9e:f4:46:89:ed:71:9f:8d:ae:8c:2e:9b:12:39:01:0b: 64:58:d6:46:8a:27:52:03:88:45:a3:5d:c9:ef:f0:d9:c6:e0: bf:ae:bb:85:ce:71:1b:8b:8a:15:c7:18:c6:36:f0:0c:24:5e: 42:3d:d9:dc:d6:d6:df:1a:a3:42:38:2c:21:b4:e7:2e:4c:bb: 51:58:70:71 -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICNwswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTEyMDIwMDAxMzRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQ1NzIxQUYxMTAvBgNVBAUTKDg3RjNBREMzQTUwQTc3NzYzODM2QUU4 RTM3RjVEOTM4Njk1NzExQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsaqirCa089P9NPVwkxCIF+zNA4t6+JGTSEN/rpCVsFvH/8taTrUtnpPZrm3ie c+4K6fmLUaWkDvbVkcfV2E/9Bg+oQZx7qsU9M2+2takrQqwvCmKx/q5Ohe8Hkv7v g+KGsbPBTqQjFLliPSWgO++fZTZS6Iotasvn3LZ9v9nSLJ3Hf7b1b3jBq2zds7SL uW5WcnDLrDCWmk41O5evYwV7A/WOtIsEzraAaJOECzPC3jq6WJEhTbXLILjXbGco 7t2HjiqdG42xg26uBZ+STF/j5pFhl9y7sbEGi0l2+FK9ag/qndOmN/5bEIl6Z02G iGagVal27UH7TCKKiWDhAn1DAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUh/Otw6UK d3Y4Nq6ON/XZOGlXEcowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0NTcyMS80RDg1NzhFMDM3RkQx MUVEQjhBMkFERjlGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDU3MjEvNEQ4NTc4RTAzN0ZEMTFFREI4QTJBREY5RjEyMjI0NjgvaF9PdHc2 VUtkM1k0TnE2T05fWFpPR2xYRWNvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAk8wQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBANmFtADBAJmsLQDBAJm y9gDBAJm0jgwDQQCAAIwBwMFACwP7mgwDQYJKoZIhvcNAQELBQADggEBAJSJU7UD zm/lqZ33hjC0GKfcIKigRTYN7W6P1XqxSqYnnn4St9bC+wHBye4BCV5OFhDyNLIx eyQKc2Ain//tLl7OjSqpYQgAljnk2IuWHPZwT6LV8bBdp02rjYPGZbAt3QLbrvyY qn1AA4QIC7ailF53cGRbxC2LclC+R1igAgl8HSnbn174tX26vEe23UwYiHj4sAYF /p7c9vtiDt+yHqhjwKfplSAGBmJ3UdY4Z//za/0BOAAvnvRGie1xn42ujC6bEjkB C2RY1kaKJ1IDiEWjXcnv8NnG4L+uu4XOcRuLihXHGMY28AwkXkI92dzW1t8ao0I4 LCG05y5Mu1FYcHE= -----END CERTIFICATE-----Generated at Mon Dec 8 03:04:58 2025 by rpki-client