This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer File: l8kOJSEtiHz54d5v3fVRuoEvoTk.cer (raw, json) Hash identifier: D3nTQEeydtUhPi2Jy17BmvmD4mbQu27BHDRfcSvmS28= Subject key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B41 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:40:19 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328239 IP: 102.177.128.0/18 IP: 2c0f:f1b8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 08 Feb 2026 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15169 (0x3b41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:40:19 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:10:e9:8f:6b:71:c4:4a:01:41:ef:3d:e7: ff:36:36:0d:18:7f:ef:e0:c8:fa:47:74:e9:09:13: 78:80:31:b3:c4:f0:70:27:bc:26:9b:2b:fb:aa:53: 6e:42:5e:39:59:ab:c4:48:13:82:7c:a8:86:d9:fb: f0:36:d0:4e:7b:00:ed:83:c7:e5:bd:1f:9e:92:4d: ed:df:11:07:e4:89:ae:97:4d:e0:c6:ab:37:f5:c0: 97:03:15:37:a1:f5:82:1e:e2:06:5f:98:74:f7:e9: 9c:fe:7e:65:4d:e8:e3:70:d9:5f:bc:44:41:79:77: 27:e8:45:b9:ea:f1:ff:06:bd:7a:ca:1b:e7:b5:af: f8:a6:7c:32:f7:ed:f5:14:6d:4f:3d:9d:2d:57:54: 3d:ad:03:4d:b9:cf:9e:cf:3b:15:8c:b4:a2:01:29: 00:66:10:e4:4c:a9:cb:f5:f1:8a:0b:ce:df:f5:06: 25:ba:96:ea:6c:75:d4:ea:e8:36:be:14:16:78:ee: 7d:c7:d5:1b:13:31:8c:b0:5b:04:5d:e6:7e:b7:b7: 1c:56:d7:d2:8a:31:08:11:d9:89:66:8f:dc:2f:34: 56:07:36:c6:24:c0:c5:4e:34:e0:9f:a1:45:c2:5b: 2f:2b:be:e5:c9:89:13:de:75:d3:f9:de:f3:06:8e: 1d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328239 sbgp-ipAddrBlock: critical IPv4: 102.177.128.0/18 IPv6: 2c0f:f1b8::/32 Signature Algorithm: sha256WithRSAEncryption a0:e3:c8:68:a4:bd:57:44:91:18:28:b7:f7:91:66:0d:21:97: 45:33:5a:3f:ff:7a:9b:e5:4c:42:f3:96:ef:0c:67:27:9d:ad: b5:f1:93:60:60:98:24:68:9a:05:47:36:66:1c:70:0b:6d:6e: 55:12:10:51:cb:bf:b2:12:b6:ba:5f:c1:3c:3f:79:c0:86:30: 0d:4d:b7:75:e2:a2:a0:fd:71:ec:23:88:8d:f7:54:ac:16:73: b6:61:6b:05:cf:49:8f:f8:a6:82:c6:6d:e2:22:43:a9:4b:ba: 91:46:53:77:a3:9a:b3:64:13:0b:81:e8:67:34:64:ed:7a:06: 79:08:b0:f9:59:1d:a3:19:07:45:e7:b1:2c:d5:b2:e9:37:cf: 6f:46:fd:60:0e:13:ca:35:92:06:89:98:ee:8a:65:78:fc:58: 3b:6f:fc:51:33:e6:4e:87:5e:5a:bd:78:97:75:67:bf:b9:45: 7e:02:7b:63:0b:0b:2f:64:8e:da:4b:13:d7:5a:37:8f:d4:be: 8d:02:83:3a:95:53:41:85:c2:d2:99:d0:8e:7c:3f:99:d7:3e: 58:38:47:08:73:3f:52:c3:a1:68:fb:6a:f8:f7:95:9f:a9:96: 3f:48:8b:45:12:c3:fc:51:7c:87:e0:b2:de:94:0c:a5:cd:6e: ca:b3:d6:da -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICO0EwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjQwMTlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjdERkE0QUYxMTAvBgNVBAUTKDk3QzkwRTI1MjEyRDg4N0NGOUUxREU2 RkRERjU1MUJBODEyRkExMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd2RDpj2txxEoBQe895/82Ng0Yf+/gyPpHdOkJE3iAMbPE8HAnvCabK/uqU25C XjlZq8RIE4J8qIbZ+/A20E57AO2Dx+W9H56STe3fEQfkia6XTeDGqzf1wJcDFTeh 9YIe4gZfmHT36Zz+fmVN6ONw2V+8REF5dyfoRbnq8f8GvXrKG+e1r/imfDL37fUU bU89nS1XVD2tA025z57POxWMtKIBKQBmEORMqcv18YoLzt/1BiW6lupsddTq6Da+ FBZ47n3H1RsTMYywWwRd5n63txxW19KKMQgR2Ylmj9wvNFYHNsYkwMVONOCfoUXC Wy8rvuXJiRPeddP53vMGjh0jAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUl8kOJSEt iHz54d5v3fVRuoEvoTkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3REZBNC8wOEI4RDgyMDkzQUMx MUVCQjFEMkE4MzJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhBRUEyMjgvbDhrT0pT RXRpSHo1NGQ1djNmVlJ1b0V2b1RrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAi8wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAZmsYAwDQQCAAIwBwMF ACwP8bgwDQYJKoZIhvcNAQELBQADggEBAKDjyGikvVdEkRgot/eRZg0hl0UzWj// epvlTELzlu8MZyedrbXxk2BgmCRomgVHNmYccAttblUSEFHLv7IStrpfwTw/ecCG MA1Nt3XioqD9cewjiI33VKwWc7ZhawXPSY/4poLGbeIiQ6lLupFGU3ejmrNkEwuB 6Gc0ZO16BnkIsPlZHaMZB0XnsSzVsuk3z29G/WAOE8o1kgaJmO6KZXj8WDtv/FEz 5k6HXlq9eJd1Z7+5RX4Ce2MLCy9kjtpLE9daN4/Uvo0CgzqVU0GFwtKZ0I58P5nX Plg4RwhzP1LDoWj7avj3lZ+plj9Ii0USw/xRfIfgst6UDKXNbsqz1to= -----END CERTIFICATE-----Generated at Fri Feb 6 22:51:55 2026 by rpki-client