This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer File: 0JparVoXc9hrHSbdXRxET8ys9uQ.cer (raw, json) Hash identifier: Wjlm8s7agKdUQ+d2nTNxIK5uwg/UCthz6uT5+8kEE7M= Subject key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 37A2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:14:35 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37153 IP: 41.72.128.0/19 IP: 41.203.0.0/19 IP: 41.204.192.0/19 IP: 154.65.96.0/20 IP: 196.22.132.0 -- 196.22.143.255 IP: 196.40.96.0/20 IP: 197.189.192.0/18 IP: 197.221.0.0/18 IP: 197.242.64.0/19 IP: 2c0f:fce8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14242 (0x37a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:14:35 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:2a:50:1f:e9:4c:1d:c0:b8:2a:6c:3c:e1: 8b:47:86:61:18:57:e9:35:47:f9:38:4b:82:c1:8f: 86:fb:13:97:83:bf:ca:63:81:ca:f4:ca:f9:76:e2: 40:a9:00:57:45:78:a4:5f:b7:dd:4c:c3:1c:a7:e3: aa:84:e8:dc:e6:37:76:67:2a:b9:bf:9a:60:8b:0d: 22:a8:e3:a2:75:07:87:c8:ed:42:0f:1a:3a:4d:64: 1d:f9:d1:3b:9a:be:0f:f4:f1:75:46:8b:10:31:6a: d5:9b:57:a1:66:4d:15:04:6d:2b:2d:33:6e:7d:28: 28:7c:36:58:38:fc:44:72:44:d0:fc:b0:53:0f:ed: fe:91:eb:88:05:86:e2:2a:52:82:22:16:2a:58:ff: 1e:7a:12:b1:c7:25:ee:7c:24:b0:e4:e9:0f:0f:27: 13:4c:f4:66:ae:7f:d7:98:91:08:34:90:ce:b0:9f: 2b:31:70:54:96:8f:7c:08:aa:18:b1:27:98:8e:d2: 1f:71:c6:f6:11:e9:f9:ce:cc:6a:f7:5a:47:bc:37: 77:c1:e7:74:0e:41:f2:e1:c5:4f:38:00:54:e7:ad: a7:b3:84:17:d9:0b:34:de:cc:dd:56:6e:3d:dd:f3: 43:4c:e2:9c:38:09:dc:03:37:63:cf:aa:8c:18:c8: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37153 sbgp-ipAddrBlock: critical IPv4: 41.72.128.0/19 41.203.0.0/19 41.204.192.0/19 154.65.96.0/20 196.22.132.0-196.22.143.255 196.40.96.0/20 197.189.192.0/18 197.221.0.0/18 197.242.64.0/19 IPv6: 2c0f:fce8::/32 Signature Algorithm: sha256WithRSAEncryption 7a:d5:ea:92:df:e2:73:3a:c6:af:45:83:cc:d4:e9:ea:77:12: 9f:98:2d:3b:92:aa:90:3a:9f:2f:5f:e6:e7:25:f0:30:5d:4b: ca:59:07:a7:ea:a7:42:21:e4:9c:97:51:ed:b1:ef:bf:e5:9e: d7:31:bc:dd:b7:c1:41:f6:8c:2d:3a:95:a0:c2:6b:d7:34:c4: 39:2c:0f:bd:49:6d:40:2a:4d:82:24:50:40:f7:61:28:de:3e: 38:29:20:82:89:7a:26:34:4a:af:5f:25:98:a0:ef:58:88:70: 38:6e:37:50:dd:9b:c4:d9:0e:1c:bd:3a:ec:42:fd:ee:50:f7: fa:1a:e2:cc:a7:25:8b:b3:f9:9d:da:3e:12:72:aa:81:0a:e4: a7:79:e1:56:46:9c:b5:18:19:34:48:95:4f:46:b6:70:c2:d4: ec:f4:e0:28:fc:47:66:70:84:04:00:db:c4:c4:27:dc:f1:ee: ab:09:29:2a:f8:72:17:c2:a3:d6:a5:7b:0d:54:c6:ef:4d:e1: 1a:e6:45:90:f8:00:3f:26:b6:c6:ff:ed:8c:5b:10:4b:f2:d7: 71:a4:54:97:02:65:9d:e1:c4:25:f8:ff:da:49:63:ff:c6:07: 7d:4f:d1:d3:8f:d1:05:35:48:30:71:1e:46:f6:d5:60:cb:65: 82:24:af:f0 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgICN6IwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDE0MzVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE4MEExQUYxMTAvBgNVBAUTKEQwOUE1QUFENUExNzczRDg2QjFEMjZE RDVEMUM0NDRGQ0NBQ0Y2RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxKSpQH+lMHcC4Kmw84YtHhmEYV+k1R/k4S4LBj4b7E5eDv8pjgcr0yvl24kCp AFdFeKRft91Mwxyn46qE6NzmN3ZnKrm/mmCLDSKo46J1B4fI7UIPGjpNZB350Tua vg/08XVGixAxatWbV6FmTRUEbSstM259KCh8Nlg4/ERyRND8sFMP7f6R64gFhuIq UoIiFipY/x56ErHHJe58JLDk6Q8PJxNM9Gauf9eYkQg0kM6wnysxcFSWj3wIqhix J5iO0h9xxvYR6fnOzGr3Wke8N3fB53QOQfLhxU84AFTnraezhBfZCzTezN1Wbj3d 80NM4pw4CdwDN2PPqowYyKt1AgMBAAGjggNSMIIDTjAdBgNVHQ4EFgQU0JparVoX c9hrHSbdXRxET8ys9uQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxODBBMS80RUI1MDgxNDNGNUEx MUVGQjU5MjUwNzA3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTgwQTEvNEVCNTA4MTQzRjVBMTFFRkI1OTI1MDcwNzYyRTk1MUEvMEpwYXJW b1hjOWhySFNiZFhSeEVUOHlzOXVRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkSEwZgYIKwYBBQUHAQcBAf8EVzBVMEQEAgABMD4DBAUpSIADBAUpywADBAUp zMADBASaQWAwDAMEAsQWhAMEBMQWgAMEBMQoYAMEBsW9wAMEBsXdAAMEBcXyQDAN BAIAAjAHAwUALA/86DANBgkqhkiG9w0BAQsFAAOCAQEAetXqkt/iczrGr0WDzNTp 6ncSn5gtO5KqkDqfL1/m5yXwMF1LylkHp+qnQiHknJdR7bHvv+We1zG83bfBQfaM LTqVoMJr1zTEOSwPvUltQCpNgiRQQPdhKN4+OCkggol6JjRKr18lmKDvWIhwOG43 UN2bxNkOHL067EL97lD3+hrizKcli7P5ndo+EnKqgQrkp3nhVkactRgZNEiVT0a2 cMLU7PTgKPxHZnCEBADbxMQn3PHuqwkpKvhyF8Kj1qV7DVTG703hGuZFkPgAPya2 xv/tjFsQS/LXcaRUlwJlneHEJfj/2klj/8YHfU/R04/RBTVIMHEeRvbVYMtlgiSv 8A== -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:41 2026 by rpki-client