This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer File: -4Xgjl27Bclbe9Dafl_m_OOYJv8.cer (raw, json) Hash identifier: dxwvK0IhgNT/EfdZKN4tZMazQXc3LsImuYkAFyPBt2A= Subject key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D9C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:10:34 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37517 AS: 328941 IP: 41.74.128.0/20 IP: 41.215.208.0/20 IP: 41.221.192.0/20 IP: 102.207.152.0/22 IP: 102.209.52.0/22 IP: 102.209.160.0/22 IP: 102.211.8.0/22 IP: 102.213.204.0/22 IP: 102.219.86.0/23 IP: 102.220.164.0/22 IP: 197.255.128.0/20 IP: 2c0f:f438::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15772 (0x3d9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:10:34 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36C2BF2AF, serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:53:94:6a:51:e2:b5:0d:9f:25:1c:78:fb: b1:62:e1:4e:20:c7:a6:47:de:7c:44:e9:ad:5b:7b: b6:98:c8:38:a5:24:03:68:1b:65:a2:e2:87:50:51: 90:16:12:ef:a0:88:56:c3:e3:cb:18:3c:fc:20:85: 23:66:94:11:c2:7f:39:89:95:44:8e:f6:60:6d:5a: b8:a2:4f:86:dc:03:29:13:9e:7f:50:01:5a:8d:93: b4:bc:18:b1:67:97:0b:be:b3:03:c6:1f:63:25:08: 96:05:70:11:0e:69:af:b6:68:76:cc:b9:ed:6f:96: 4a:db:88:40:cc:cb:67:53:64:06:08:48:89:14:12: d2:cc:29:dc:f9:c3:b0:7d:99:48:16:51:c7:cf:cd: 1d:b6:b5:4a:98:ce:38:f9:b3:0a:89:87:fd:03:eb: 9f:66:d0:44:f0:11:70:d4:00:23:6e:6b:9f:76:59: 5d:df:7d:66:85:13:db:d6:42:d8:ef:3f:8d:67:7a: 8f:34:5a:b0:6c:de:b5:66:ef:9d:59:35:8a:e4:e4: 0a:14:d6:5d:79:a0:7a:6b:69:3c:d9:c6:b6:19:8a: 34:24:b7:f6:80:6c:b2:25:79:d6:98:10:71:02:ac: 10:ca:d8:88:1e:dd:e3:46:2c:d7:d6:fb:e1:fa:1c: 42:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37517 328941 sbgp-ipAddrBlock: critical IPv4: 41.74.128.0/20 41.215.208.0/20 41.221.192.0/20 102.207.152.0/22 102.209.52.0/22 102.209.160.0/22 102.211.8.0/22 102.213.204.0/22 102.219.86.0/23 102.220.164.0/22 197.255.128.0/20 IPv6: 2c0f:f438::/32 Signature Algorithm: sha256WithRSAEncryption aa:af:2e:48:6d:17:2c:4a:20:82:03:87:a3:a0:73:ef:b7:7e: 06:e7:c8:e9:68:7e:25:d6:49:60:ad:42:0c:df:9e:ff:b2:9a: 90:14:38:da:7b:f6:12:b1:7f:9e:d8:42:be:f3:8d:82:73:d1: 3b:4d:09:02:08:2c:26:93:9a:07:5a:55:61:ed:b1:76:4c:c4: 23:79:6d:71:54:33:85:da:2a:f1:e5:cd:61:d4:c5:8f:8c:9c: 01:f3:c8:61:40:be:c7:00:af:1f:ad:3c:34:8b:64:f4:fb:85: ba:a0:19:f4:84:82:2a:76:4c:38:c1:cd:a5:74:75:d2:bf:14: 67:ca:1e:23:55:2f:8d:99:a2:e4:10:62:c9:6a:2a:ef:a5:7a: 16:c4:c5:36:5c:92:14:ed:40:80:3a:45:9d:68:cc:3c:ae:13: 86:eb:74:b0:33:55:21:41:f8:41:97:57:7c:85:88:a9:c9:4d: 2a:8f:55:22:e6:84:20:69:38:70:31:44:49:4d:94:76:49:9d: 13:0e:c0:22:e1:90:a6:1a:97:d0:13:9d:14:ca:f4:8a:ad:f5: 73:54:26:4c:98:8f:d8:a5:47:82:8a:8d:00:7f:3c:32:f4:a0: 2c:45:78:11:ee:64:5a:04:be:6f:00:aa:e1:34:2b:82:65:f6: f9:35:3b:3c -----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgICPZwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDEwMzRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkMyQkYyQUYxMTAvBgNVBAUTKEZCODVFMDhFNURCQjA1Qzk1QjdCRDBE QTdFNUZFNkZDRTM5ODI2RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsw1OUalHitQ2fJRx4+7Fi4U4gx6ZH3nxE6a1be7aYyDilJANoG2Wi4odQUZAW Eu+giFbD48sYPPwghSNmlBHCfzmJlUSO9mBtWriiT4bcAykTnn9QAVqNk7S8GLFn lwu+swPGH2MlCJYFcBEOaa+2aHbMue1vlkrbiEDMy2dTZAYISIkUEtLMKdz5w7B9 mUgWUcfPzR22tUqYzjj5swqJh/0D659m0ETwEXDUACNua592WV3ffWaFE9vWQtjv P41neo80WrBs3rVm751ZNYrk5AoU1l15oHpraTzZxrYZijQkt/aAbLIledaYEHEC rBDK2Ige3eNGLNfW++H6HEJHAgMBAAGjggNbMIIDVzAdBgNVHQ4EFgQU+4Xgjl27 Bclbe9Dafl/m/OOYJv8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDMkJGMi9EQUJBQjg3RTE5RUMx MUVGQkNCRjVFMkMwMTcwMDFCMS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QzJCRjIvREFCQUI4N0UxOUVDMTFFRkJDQkY1RTJDMDE3MDAxQjEvLTRYZ2ps MjdCY2xiZTlEYWZsX21fT09ZSnY4Lm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAko0CAwUE7TBqBggrBgEFBQcBBwEB/wRbMFkwSAQCAAEwQgMEBClKgAMEBCnX 0AMEBCndwAMEAmbPmAMEAmbRNAMEAmbRoAMEAmbTCAMEAmbVzAMEAWbbVgMEAmbc pAMEBMX/gDANBAIAAjAHAwUALA/0ODANBgkqhkiG9w0BAQsFAAOCAQEAqq8uSG0X LEogggOHo6Bz77d+BufI6Wh+JdZJYK1CDN+e/7KakBQ42nv2ErF/nthCvvONgnPR O00JAggsJpOaB1pVYe2xdkzEI3ltcVQzhdoq8eXNYdTFj4ycAfPIYUC+xwCvH608 NItk9PuFuqAZ9ISCKnZMOMHNpXR10r8UZ8oeI1UvjZmi5BBiyWoq76V6FsTFNlyS FO1AgDpFnWjMPK4Thut0sDNVIUH4QZdXfIWIqclNKo9VIuaEIGk4cDFESU2Udkmd Ew7AIuGQphqX0BOdFMr0iq31c1QmTJiP2KVHgoqNAH88MvSgLEV4Ee5kWgS+bwCq 4TQrgmX2+TU7PA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:58:41 2026 by rpki-client