This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer File: 3-0dsxhpvczJZ7VA4i2wVkJULx0.cer (raw, json) Hash identifier: pXbJ9Qk/DXG+kF5PU7XUnTgCnkO0O7HdnL/SBsRM85M= Subject key identifier: DF:ED:1D:B3:18:69:BD:CC:C9:67:B5:40:E2:2D:B0:56:42:54:2F:1D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39FD Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:53:59 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37100 IP: 41.87.96.0/19 IP: 41.206.96.0/19 IP: 41.217.212.0/22 IP: 105.16.0.0/12 IP: 2c0f:feb0::/31 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14845 (0x39fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:53:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F365C741AF, serialNumber=DFED1DB31869BDCCC967B540E22DB05642542F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7d:2c:7a:35:81:06:90:f2:06:c2:8e:80:fa: 8f:f5:a7:15:a8:72:f0:0d:e6:8c:3f:cd:bd:f3:4b: 7f:91:a9:ec:74:e3:4f:e0:15:68:ea:1e:ad:00:67: 58:37:b8:0d:bc:a6:f4:73:20:cd:29:9a:87:4a:43: 51:b4:01:db:b8:c0:eb:20:ee:65:52:70:e2:13:aa: ef:c9:02:1c:91:91:78:4e:a6:a9:e3:22:e5:b3:59: 7d:21:ec:60:4f:fe:46:6b:b6:f2:71:01:3f:62:6c: b4:c9:21:d4:17:83:e5:ad:59:0e:86:ed:ea:99:a8: dd:07:46:8a:ff:e4:31:fb:e6:cf:1f:55:ef:5c:43: f8:48:ec:0f:e4:9d:03:cb:7f:fe:2c:52:77:73:3a: fc:69:9b:11:5b:4d:d9:5c:f9:d7:0c:19:7a:37:96: 66:06:2e:52:1c:8f:88:46:71:43:58:23:0a:19:3f: 13:ad:0f:9f:c0:07:cb:1f:01:f2:2d:83:3e:bd:85: c8:44:2c:e0:93:c4:ea:cd:31:5e:c3:fc:e3:be:ca: 0b:c0:57:7f:33:77:89:c1:a9:90:c2:c8:af:b0:73: eb:35:0d:12:1f:3c:8a:10:17:b0:f4:d3:2f:33:5f: a5:fe:74:48:f0:44:c9:1b:66:d1:20:fd:e3:97:24: 9e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:ED:1D:B3:18:69:BD:CC:C9:67:B5:40:E2:2D:B0:56:42:54:2F:1D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37100 sbgp-ipAddrBlock: critical IPv4: 41.87.96.0/19 41.206.96.0/19 41.217.212.0/22 105.16.0.0/12 IPv6: 2c0f:feb0::/31 Signature Algorithm: sha256WithRSAEncryption 4d:bd:50:bf:39:e4:74:40:64:90:3a:56:d1:75:cb:81:58:f7: f9:06:f6:0a:0d:3c:44:59:5f:a2:c0:13:9f:6f:a0:56:48:bb: 29:26:42:53:55:e6:04:2b:00:20:34:6a:e3:ec:3d:95:09:ed: 23:ab:2b:3a:c3:e1:08:99:54:f8:41:7e:dc:0a:c9:dc:78:2b: 31:47:2b:ec:f1:b4:cf:f6:f6:72:94:b5:e2:f5:71:d0:19:4d: 0a:ea:5f:b1:7e:b9:50:ba:fc:bb:07:5d:e8:ed:38:35:64:8f: 79:95:a5:d1:e7:ba:ec:75:76:70:ea:6b:02:4e:61:90:98:84: de:4b:b6:bd:fc:d9:e0:b1:60:81:35:e5:72:d1:a9:66:c0:e6: ac:96:b8:c1:a1:02:64:c4:12:e7:58:67:e3:20:d8:ae:89:9e: a6:b1:cc:69:b4:36:70:4c:39:b7:3c:aa:48:51:7f:db:4f:11: 7d:01:04:24:ce:1f:b1:5f:72:bb:d2:6e:c2:1f:a4:4b:60:60: cc:86:e8:72:e0:0f:a7:01:c6:f1:f6:f5:b6:9d:94:d1:f8:f1: 2d:81:f0:9a:e6:a2:9e:a8:83:b5:0a:71:8b:b3:38:81:6e:fd: 99:ad:41:bf:45:fa:46:df:7d:21:f9:20:92:85:0a:f8:ad:9f: dc:d9:7f:ac -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgICOf0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTUzNTlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjVDNzQxQUYxMTAvBgNVBAUTKERGRUQxREIzMTg2OUJEQ0NDOTY3QjU0 MEUyMkRCMDU2NDI1NDJGMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvfSx6NYEGkPIGwo6A+o/1pxWocvAN5ow/zb3zS3+Rqex040/gFWjqHq0AZ1g3 uA28pvRzIM0pmodKQ1G0Adu4wOsg7mVScOITqu/JAhyRkXhOpqnjIuWzWX0h7GBP /kZrtvJxAT9ibLTJIdQXg+WtWQ6G7eqZqN0HRor/5DH75s8fVe9cQ/hI7A/knQPL f/4sUndzOvxpmxFbTdlc+dcMGXo3lmYGLlIcj4hGcUNYIwoZPxOtD5/AB8sfAfIt gz69hchELOCTxOrNMV7D/OO+ygvAV38zd4nBqZDCyK+wc+s1DRIfPIoQF7D00y8z X6X+dEjwRMkbZtEg/eOXJJ6TAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQU3+0dsxhp vczJZ7VA4i2wVkJULx0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1Qzc0MS9CRTE3M0VCNDA2QkQx MUU1ODg4MjREMDhGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NUM3NDEvQkUxNzNFQjQwNkJEMTFFNTg4ODI0RDA4RjhBRUEyMjgvMy0wZHN4 aHB2Y3pKWjdWQTRpMndWa0pVTHgwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkOwwPwYIKwYBBQUHAQcBAf8EMDAuMB0EAgABMBcDBAUpV2ADBAUpzmADBAIp 2dQDAwRpEDANBAIAAjAHAwUBLA/+sDANBgkqhkiG9w0BAQsFAAOCAQEATb1Qvznk dEBkkDpW0XXLgVj3+Qb2Cg08RFlfosATn2+gVki7KSZCU1XmBCsAIDRq4+w9lQnt I6srOsPhCJlU+EF+3ArJ3HgrMUcr7PG0z/b2cpS14vVx0BlNCupfsX65ULr8uwdd 6O04NWSPeZWl0ee67HV2cOprAk5hkJiE3ku2vfzZ4LFggTXlctGpZsDmrJa4waEC ZMQS51hn4yDYromeprHMabQ2cEw5tzyqSFF/208RfQEEJM4fsV9yu9Juwh+kS2Bg zIbocuAPpwHG8fb1tp2U0fjxLYHwmuainqiDtQpxi7M4gW79ma1Bv0X6Rt99Ifkg koUK+K2f3Nl/rA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:37 2026 by rpki-client