This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer File: pfjRvVkiC4dTo3nUoz0jv0IysTY.cer (raw, json) Hash identifier: Ocpj7Jcddq2k3dk/Ad2G/IFGgRUOQUl/LttMkhMZpdk= Subject key identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3847 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:43:05 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 102.221.240.0/22 IP: 2c0f:e9c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 08 Feb 2026 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14407 (0x3847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:43:05 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362B5D1AF, serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:8c:84:be:4f:5e:cd:c7:19:23:94:cd:61: 4b:fe:6f:3e:a8:46:c5:1d:12:25:c7:e7:c0:7b:58: ae:a2:06:67:4d:16:fa:fb:6e:23:5d:bc:03:37:e2: 3d:77:6f:4d:8b:2b:e9:3a:37:2a:c4:7f:e7:fd:43: ff:94:2e:2c:68:00:f0:31:d8:0f:a8:8e:1a:12:e0: da:be:ff:de:4a:0f:40:06:06:57:5c:5f:ee:eb:4a: ee:c4:d6:15:f7:e3:e8:35:61:e0:5c:44:80:88:d7: b2:bd:ee:83:19:b6:87:6f:c1:57:4e:de:38:d4:62: 39:23:39:4a:f6:66:81:51:16:90:46:5d:f8:59:7d: aa:16:0e:57:fd:d2:3c:9a:35:01:4a:e3:49:a1:6f: b5:3d:8c:30:03:80:fb:18:ad:a3:2a:b7:2c:30:26: 9f:a0:6d:b6:dd:f7:ea:e5:07:fb:5a:12:c5:ec:49: 59:52:5e:ac:41:8d:92:9c:20:42:a7:86:ab:d1:b9: 41:fb:7c:2d:dc:e4:6c:d4:24:c8:b5:6b:a6:03:41: 9b:9a:6b:f1:27:39:45:de:0c:80:aa:93:f7:94:07: 43:14:ba:d8:94:93:eb:35:2e:6e:63:46:c2:ee:41: 97:92:6d:46:2c:53:6c:87:2f:7c:9c:cb:77:0d:f8: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft sbgp-ipAddrBlock: critical IPv4: 102.221.240.0/22 IPv6: 2c0f:e9c0::/32 Signature Algorithm: sha256WithRSAEncryption 13:c9:0e:4e:c8:47:8e:c7:ca:e7:11:d2:2d:3a:8e:ad:f0:32: b4:a9:8b:31:21:df:70:55:7d:43:97:34:b0:22:25:4e:e4:98: 56:cd:65:e8:50:9a:2e:1d:17:16:3b:46:48:08:df:d8:de:8f: c4:2e:7b:6b:62:59:d4:3c:09:af:ee:12:eb:9a:cc:3a:85:62: a7:9d:78:aa:34:36:32:fc:b3:2c:53:97:09:d5:82:b0:7c:48: 3d:13:79:a4:78:72:fd:5c:21:aa:37:95:f3:a5:e0:7a:b5:fd: 74:1e:1e:25:7b:cf:b4:f1:a3:df:52:c1:b7:6e:c6:0c:b1:35: 1a:69:7d:c0:67:ad:13:f6:61:87:0c:24:8f:f3:2a:54:d2:36: 3a:f6:35:46:05:e3:91:92:09:cc:6f:58:27:45:0d:62:18:27: 1d:ac:91:d5:61:2e:6c:9f:78:a5:cb:55:29:e7:9c:c6:e2:d9: 04:86:cc:57:00:cb:56:b8:8d:f9:bb:04:06:17:6e:f6:19:c6: 83:fd:ad:8d:b8:4c:26:73:1a:b2:80:bc:fd:3e:56:e3:27:c4: 65:fa:48:5b:96:46:a9:d2:97:63:e5:70:c7:71:c0:ff:dd:0c: 5c:b1:19:1d:c3:b9:36:bf:58:38:17:22:2e:2d:95:41:02:a5: 7c:c4:41:7d -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgICOEcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDQzMDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjJCNUQxQUYxMTAvBgNVBAUTKEE1RjhEMUJENTkyMjBCODc1M0EzNzlE NEEzM0QyM0JGNDIzMkIxMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVfYyEvk9ezccZI5TNYUv+bz6oRsUdEiXH58B7WK6iBmdNFvr7biNdvAM34j13 b02LK+k6NyrEf+f9Q/+ULixoAPAx2A+ojhoS4Nq+/95KD0AGBldcX+7rSu7E1hX3 4+g1YeBcRICI17K97oMZtodvwVdO3jjUYjkjOUr2ZoFRFpBGXfhZfaoWDlf90jya NQFK40mhb7U9jDADgPsYraMqtywwJp+gbbbd9+rlB/taEsXsSVlSXqxBjZKcIEKn hqvRuUH7fC3c5GzUJMi1a6YDQZuaa/EnOUXeDICqk/eUB0MUutiUk+s1Lm5jRsLu QZeSbUYsU2yHL3ycy3cN+PdLAgMBAAGjggL+MIIC+jAdBgNVHQ4EFgQUpfjRvVki C4dTo3nUoz0jv0IysTYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyQjVEMS9EQjJGMzdFRUMyMUEx MUVCQjhCMzNGNzVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MkI1RDEvREIyRjM3RUVDMjFBMTFFQkI4QjMzRjc1RjhBRUEyMjgvcGZqUnZW a2lDNGRUbzNuVW96MGp2MEl5c1RZLm1mdDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC AAEwBgMEAmbd8DANBAIAAjAHAwUALA/pwDANBgkqhkiG9w0BAQsFAAOCAQEAE8kO TshHjsfK5xHSLTqOrfAytKmLMSHfcFV9Q5c0sCIlTuSYVs1l6FCaLh0XFjtGSAjf 2N6PxC57a2JZ1DwJr+4S65rMOoVip514qjQ2MvyzLFOXCdWCsHxIPRN5pHhy/Vwh qjeV86XgerX9dB4eJXvPtPGj31LBt27GDLE1Gml9wGetE/Zhhwwkj/MqVNI2OvY1 RgXjkZIJzG9YJ0UNYhgnHayR1WEubJ94pctVKeecxuLZBIbMVwDLVriN+bsEBhdu 9hnGg/2tjbhMJnMasoC8/T5W4yfEZfpIW5ZGqdKXY+Vwx3HA/90MXLEZHcO5Nr9Y OBciLi2VQQKlfMRBfQ== -----END CERTIFICATE-----Generated at Fri Feb 6 22:46:29 2026 by rpki-client