This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer File: 1ijkyWq6nPsSRHeGe73xpENfD1s.cer (raw, json) Hash identifier: /1Ghw13UewOtbCxpejvMA6DpBFX0ULafey5hX1mvTic= Subject key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 37FE Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:30:01 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 36962 IP: 41.216.64.0/19 IP: 41.223.116.0/22 IP: 102.210.160.0/22 IP: 102.212.180.0/22 IP: 2c0f:fd98::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14334 (0x37fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:30:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362412EAF, serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:91:13:54:dd:14:6d:a8:f3:09:05:75:e4:f1: c5:bb:4c:3a:53:4e:27:c3:e0:fb:0a:8a:68:78:fc: e0:4c:64:56:bb:21:d3:69:ed:11:b8:4f:b4:2f:f6: 62:03:8b:48:c1:b8:69:93:c5:09:38:9c:d1:8b:a4: f5:1d:b0:0f:0d:ce:4c:57:25:f9:56:03:2a:6f:7d: 4d:cd:fc:fb:20:2f:6a:64:2f:10:0d:6e:96:d4:46: f7:d4:d0:8d:b5:d7:6b:8e:90:9f:c6:c1:61:36:e5: a4:b4:cd:39:3e:80:12:8c:06:67:8d:4c:ac:fb:e4: da:fd:e6:c3:33:22:33:97:90:ad:44:e4:c4:07:eb: d5:ed:71:a2:36:ba:ef:af:a3:9d:98:83:b2:e6:dd: 54:be:d8:a0:a5:7c:70:e1:9c:34:4f:b2:c5:a6:41: e4:f6:3a:8b:15:c7:d9:69:0c:9b:29:c4:78:7b:9c: 39:bc:0c:7f:95:2f:a3:8d:ac:ee:28:88:76:2a:b7: 35:24:b2:9f:88:1a:34:5a:97:5b:e6:a0:e2:a2:10: d5:dd:09:f1:cd:ec:be:7e:4e:05:cb:16:42:f4:28: 82:32:6e:66:af:55:40:39:eb:99:5c:33:99:c0:69: dc:c5:fb:4a:bd:da:c6:72:5e:d9:3f:76:2e:f0:76: 36:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 36962 sbgp-ipAddrBlock: critical IPv4: 41.216.64.0/19 41.223.116.0/22 102.210.160.0/22 102.212.180.0/22 IPv6: 2c0f:fd98::/32 Signature Algorithm: sha256WithRSAEncryption 5c:06:95:68:82:76:e6:dd:30:4f:6a:20:00:6e:db:07:9e:bd: 51:7a:d1:5c:82:43:f4:75:61:f9:29:03:92:06:ae:d1:9b:8d: 45:8c:3a:a0:61:4b:98:8c:3b:c6:51:51:b2:33:93:01:a9:01: d9:27:09:d1:8b:0a:1e:ab:c7:07:ab:26:08:09:e4:af:46:57: dd:83:8d:a1:f3:a5:c6:f0:1f:0d:34:e5:08:5a:e2:26:81:60: 01:db:04:72:f8:e7:d0:a6:d8:b1:7d:7c:a6:86:3c:6b:6e:37: 50:9f:98:53:19:22:03:16:1d:53:82:70:e3:d6:e1:a3:46:d5: 51:fc:80:0f:25:16:a5:8d:9c:a9:fb:84:af:5e:09:d3:3f:a1: 35:6f:09:6d:e3:31:60:6e:5b:7f:56:e9:67:03:53:25:9b:d8: bf:41:16:df:56:c7:21:ba:89:18:98:e2:43:a9:e9:be:5b:7f: 53:36:0c:00:93:56:27:c6:72:cd:47:2e:6b:fb:a9:98:a6:53: 4d:ba:fc:9e:29:0a:61:89:a9:7e:c7:7a:81:75:10:68:b0:93: 14:63:ee:fb:a9:f4:ce:c6:8f:6c:9e:c0:62:57:cd:a4:2c:d3: ed:55:d6:5c:e7:01:c4:9f:82:01:c9:bb:f3:da:a3:0a:d9:5e: 3c:8d:fe:52 -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICN/4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDMwMDFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjI0MTJFQUYxMTAvBgNVBAUTKEQ2MjhFNEM5NkFCQTlDRkIxMjQ0Nzc4 NjdCQkRGMUE0NDM1RjBGNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgkRNU3RRtqPMJBXXk8cW7TDpTTifD4PsKimh4/OBMZFa7IdNp7RG4T7Qv9mID i0jBuGmTxQk4nNGLpPUdsA8NzkxXJflWAypvfU3N/PsgL2pkLxANbpbURvfU0I21 12uOkJ/GwWE25aS0zTk+gBKMBmeNTKz75Nr95sMzIjOXkK1E5MQH69XtcaI2uu+v o52Yg7Lm3VS+2KClfHDhnDRPssWmQeT2OosVx9lpDJspxHh7nDm8DH+VL6ONrO4o iHYqtzUksp+IGjRal1vmoOKiENXdCfHN7L5+TgXLFkL0KIIybmavVUA565lcM5nA adzF+0q92sZyXtk/di7wdja/AgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQU1ijkyWq6 nPsSRHeGe73xpENfD1swHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyNDEyRS8zQTIzOUEyMDdFMzgx MUVFODU0RUU0Mzk0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MjQxMkUvM0EyMzlBMjA3RTM4MTFFRTg1NEVFNDM5NEFEOUU2RkMvMWlqa3lX cTZuUHNTUkhlR2U3M3hwRU5mRDFzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkGIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAUp2EADBAIp33QDBAJm 0qADBAJm1LQwDQQCAAIwBwMFACwP/ZgwDQYJKoZIhvcNAQELBQADggEBAFwGlWiC dubdME9qIABu2weevVF60VyCQ/R1YfkpA5IGrtGbjUWMOqBhS5iMO8ZRUbIzkwGp AdknCdGLCh6rxwerJggJ5K9GV92DjaHzpcbwHw005Qha4iaBYAHbBHL459Cm2LF9 fKaGPGtuN1CfmFMZIgMWHVOCcOPW4aNG1VH8gA8lFqWNnKn7hK9eCdM/oTVvCW3j MWBuW39W6WcDUyWb2L9BFt9WxyG6iRiY4kOp6b5bf1M2DACTVifGcs1HLmv7qZim U026/J4pCmGJqX7HeoF1EGiwkxRj7vup9M7Gj2yewGJXzaQs0+1V1lznAcSfggHJ u/PaowrZXjyN/lI= -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:18 2026 by rpki-client