This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer File: pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer (raw, json) Hash identifier: jTM+ZpuKTtehquMnKDoHB1GHhQIKfhRPAj/EfRP2YiA= Subject key identifier: A4:5B:BB:DD:D6:E3:F4:6B:BF:30:98:10:88:CB:08:30:C8:27:ED:78 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36FC Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Wed 26 Nov 2025 08:35:21 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 329225 IP: 102.212.88.0/22 IP: 2c0f:3f80::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14076 (0x36fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 26 08:35:21 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36B9E66AF, serialNumber=A45BBBDDD6E3F46BBF30981088CB0830C827ED78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:90:c2:af:68:77:d9:64:f1:15:cb:cc:92: 96:bd:4a:4a:12:b8:fa:e7:a3:9e:d3:b8:75:9f:7f: a9:5f:c0:15:cb:ec:b6:6f:80:17:8e:d9:30:9f:84: 07:48:33:af:9b:86:ca:f5:d3:6e:be:00:ce:eb:ac: 8c:d2:63:35:83:90:56:35:90:5a:ab:6e:01:59:55: d9:44:e2:0d:36:ce:1d:b1:b5:df:4a:04:40:96:ae: d1:67:8b:23:b4:38:57:dd:92:e0:43:04:f7:22:e6: 20:32:4b:a8:f2:44:7d:57:9d:8f:57:34:75:ac:bb: a2:3f:48:f6:4e:ea:eb:e4:b8:6e:3b:18:b1:fa:68: a2:77:41:01:8a:cb:9c:79:21:c1:e5:58:df:2b:61: 2d:69:27:b4:28:80:c0:77:43:48:1b:b5:8f:89:29: 19:fd:81:f0:5d:92:b8:a5:93:77:40:03:37:eb:e6: c1:29:90:5b:4f:5d:54:90:77:f9:60:43:70:33:ab: 14:27:04:35:09:14:ac:a0:2d:7c:f6:3c:d8:e0:fe: 9c:1b:75:d2:86:83:0d:a3:2f:d8:72:63:23:eb:ba: 9d:06:85:06:42:4b:61:73:b0:8f:8c:2b:c7:e8:4a: 8a:93:4f:e1:a6:bc:2f:cb:38:bd:df:57:7b:4b:14: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5B:BB:DD:D6:E3:F4:6B:BF:30:98:10:88:CB:08:30:C8:27:ED:78 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329225 sbgp-ipAddrBlock: critical IPv4: 102.212.88.0/22 IPv6: 2c0f:3f80::/32 Signature Algorithm: sha256WithRSAEncryption 30:02:8f:8d:7a:01:0d:f5:a4:23:8f:f8:1e:54:7e:be:eb:6c: 3f:a1:11:da:07:72:06:11:90:f3:99:d6:a8:8e:6b:8e:25:f0: 8f:67:b0:64:b9:d1:e7:f1:81:4d:51:42:0d:ee:f1:5e:b1:25: 24:aa:b1:30:9f:73:17:94:e6:c9:cf:dd:7c:93:b7:73:13:f2: 78:7a:85:32:65:c6:b8:c1:90:e5:58:eb:49:27:37:c5:62:25: 63:73:d7:09:b9:1d:e6:5e:7a:82:32:f9:8e:20:fe:bd:60:7b: 5f:18:60:81:01:80:f3:80:06:3a:5b:11:b5:50:fc:4a:eb:65: 75:ed:b4:67:40:aa:6f:01:b8:d8:95:81:c8:46:ef:9b:a7:aa: 17:07:52:8b:4f:0b:f0:03:53:f1:e9:31:10:23:71:ce:30:c1: 88:af:6b:cb:66:c5:a7:d5:c5:39:0e:22:70:74:c3:f1:7e:e6: 82:e5:30:ab:1b:70:fa:49:16:0b:6d:59:ed:c2:d2:36:dd:94: 00:8f:11:56:0b:47:2c:a9:ec:b1:25:8e:94:60:a4:93:47:ea: ed:b8:11:9f:d1:88:80:f9:ea:c3:bc:db:79:32:e5:40:71:eb: 2b:d0:37:f4:06:15:c8:f2:e9:9e:1e:a0:bb:ac:1b:c6:dd:0b: 7b:bb:c2:77 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICNvwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMjYwODM1MjFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkI5RTY2QUYxMTAvBgNVBAUTKEE0NUJCQkRERDZFM0Y0NkJCRjMwOTgx MDg4Q0IwODMwQzgyN0VENzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyKJDCr2h32WTxFcvMkpa9SkoSuPrno57TuHWff6lfwBXL7LZvgBeO2TCfhAdI M6+bhsr1026+AM7rrIzSYzWDkFY1kFqrbgFZVdlE4g02zh2xtd9KBECWrtFniyO0 OFfdkuBDBPci5iAyS6jyRH1XnY9XNHWsu6I/SPZO6uvkuG47GLH6aKJ3QQGKy5x5 IcHlWN8rYS1pJ7QogMB3Q0gbtY+JKRn9gfBdkrilk3dAAzfr5sEpkFtPXVSQd/lg Q3AzqxQnBDUJFKygLXz2PNjg/pwbddKGgw2jL9hyYyPrup0GhQZCS2FzsI+MK8fo SoqTT+GmvC/LOL3fV3tLFIkvAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUpFu73dbj 9Gu/MJgQiMsIMMgn7XgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCOUU2Ni9EMzhGNjhBQ0NBQTIx MUYwODY4RDQzRTZEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QjlFNjYvRDM4RjY4QUNDQUEyMTFGMDg2OEQ0M0U2REFFNEVDOUMvcEZ1NzNk Ymo5R3VfTUpnUWlNc0lNTWduN1hnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBgkwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm1FgwDQQCAAIwBwMF ACwPP4AwDQYJKoZIhvcNAQELBQADggEBADACj416AQ31pCOP+B5Ufr7rbD+hEdoH cgYRkPOZ1qiOa44l8I9nsGS50efxgU1RQg3u8V6xJSSqsTCfcxeU5snP3XyTt3MT 8nh6hTJlxrjBkOVY60knN8ViJWNz1wm5HeZeeoIy+Y4g/r1ge18YYIEBgPOABjpb EbVQ/ErrZXXttGdAqm8BuNiVgchG75unqhcHUotPC/ADU/HpMRAjcc4wwYiva8tm xafVxTkOInB0w/F+5oLlMKsbcPpJFgttWe3C0jbdlACPEVYLRyyp7LEljpRgpJNH 6u24EZ/RiID56sO823ky5UBx6yvQN/QGFcjy6Z4eoLusG8bdC3u7wnc= -----END CERTIFICATE-----Generated at Wed Dec 3 12:56:22 2025 by rpki-client