This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer File: 3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer (raw, json) Hash identifier: 0W8ZQGpO562Wbai+haOgEWHZ19cvJjbWIcOsICtlCaQ= Subject key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E4D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:38:30 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 41.208.64.0/18 IP: 41.252.0.0/14 IP: 2c0f:fb10::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15949 (0x3e4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:38:30 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:aa:44:cb:3c:e2:90:5b:cb:de:b2:bd:88: 68:52:5a:15:01:fe:ec:1e:94:ad:4e:0d:e9:b3:67: d2:e9:06:e9:55:67:1d:68:c2:e9:1e:7a:90:75:ca: c4:2c:3c:fe:25:61:1b:04:e2:0d:37:40:1b:c6:8e: b4:d4:3f:9b:44:1e:22:fc:7c:8c:97:38:1b:62:cc: 98:7a:b9:ed:9e:06:9a:49:4d:13:65:f9:a9:e5:80: ab:44:20:b2:3e:7b:b7:bc:07:ff:f9:ff:2e:18:8a: a9:81:79:9a:46:a6:d0:e2:50:c6:1a:c5:d8:28:b3: 4e:e4:c0:97:73:36:6e:f2:4f:b7:df:cb:62:5d:c2: e1:50:20:8f:df:dd:fc:fe:6d:75:d9:b3:fc:dc:96: f9:ae:a4:25:6b:b7:ac:9f:83:d5:fe:07:8d:6c:3a: 11:2d:f2:34:62:74:9a:b8:f8:73:7a:2b:ce:33:3a: eb:b2:c1:93:00:73:f3:ce:cb:6e:f2:43:34:7d:ba: 1c:d1:4f:c4:a3:75:84:c4:ee:a3:d3:c8:75:d3:2f: 48:72:72:c1:91:13:54:93:66:18:9f:5a:3d:ab:05: 0c:8d:9e:72:22:4e:76:b6:96:f6:5a:b5:ad:b2:ec: 59:a9:65:0b:91:e0:a2:d3:37:9d:fa:2c:f6:99:d4: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft sbgp-ipAddrBlock: critical IPv4: 41.208.64.0/18 41.252.0.0/14 IPv6: 2c0f:fb10::/32 Signature Algorithm: sha256WithRSAEncryption 6f:7b:ef:39:42:6c:d2:76:a8:2e:2b:d2:b5:a0:49:28:85:b2: da:c4:20:1e:d6:ac:57:a7:07:67:b9:9c:ab:86:f1:ab:75:87: f8:77:5e:b1:99:83:bd:7c:5c:12:5b:f1:a7:11:c4:0f:04:90: 82:4c:ec:81:91:d8:c7:a5:fc:97:14:da:b8:fc:e9:91:35:b3: c0:24:6a:97:14:48:fa:14:16:87:68:e2:ce:93:44:c5:88:5e: 0c:84:55:a9:31:45:38:4a:b4:9a:73:f6:10:b4:f4:86:84:82: f4:ef:9e:70:e7:05:6f:06:da:72:ac:59:26:8d:79:fb:ac:41: f0:aa:8d:26:8b:76:86:e9:81:31:f2:a2:9f:dc:d9:e9:45:fe: 68:d8:ba:39:89:7f:8e:46:07:a6:bc:82:7f:6b:49:6c:9a:f1: 21:94:15:61:cc:e4:04:d9:f5:96:fb:16:00:d2:62:48:7a:02: 93:a7:bc:e2:34:90:01:5f:9f:fb:7d:25:31:9e:64:20:94:34: 36:c7:a3:55:c6:da:e5:0e:2d:2b:68:fd:d0:bd:4d:b6:63:bd: 56:c0:cd:de:9c:a1:30:40:52:21:fe:32:ce:94:67:e8:84:f3: 73:b8:53:64:77:4b:9e:03:e6:db:97:27:17:7b:29:9f:26:e8: af:31:a7:3a -----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgICPk0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDM4MzBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkY4RjRGQUYxMTAvBgNVBAUTKERDMTdBMEVDNTg2NTJEMzE4OTYxMjNB NjU2MTBDM0EzMjA0NjU1NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+oKpEyzzikFvL3rK9iGhSWhUB/uwelK1ODemzZ9LpBulVZx1owukeepB1ysQs PP4lYRsE4g03QBvGjrTUP5tEHiL8fIyXOBtizJh6ue2eBppJTRNl+anlgKtEILI+ e7e8B//5/y4YiqmBeZpGptDiUMYaxdgos07kwJdzNm7yT7ffy2JdwuFQII/f3fz+ bXXZs/zclvmupCVrt6yfg9X+B41sOhEt8jRidJq4+HN6K84zOuuywZMAc/POy27y QzR9uhzRT8SjdYTE7qPTyHXTL0hycsGRE1STZhifWj2rBQyNnnIiTna2lvZata2y 7FmpZQuR4KLTN536LPaZ1MJpAgMBAAGjggMDMIIC/zAdBgNVHQ4EFgQU3Beg7Fhl LTGJYSOmVhDDoyBGVWswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGOEY0Ri84QTM3N0JCQzJBNzUx MUVDOTA4MTc1NTlEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RjhGNEYvOEEzNzdCQkMyQTc1MTFFQzkwODE3NTU5RDhBMDE0Q0UvM0JlZzdG aGxMVEdKWVNPbVZoRERveUJHVldzLm1mdDAzBggrBgEFBQcBBwEB/wQkMCIwEQQC AAEwCwMEBinQQAMDAin8MA0EAgACMAcDBQAsD/sQMA0GCSqGSIb3DQEBCwUAA4IB AQBve+85QmzSdqguK9K1oEkohbLaxCAe1qxXpwdnuZyrhvGrdYf4d16xmYO9fFwS W/GnEcQPBJCCTOyBkdjHpfyXFNq4/OmRNbPAJGqXFEj6FBaHaOLOk0TFiF4MhFWp MUU4SrSac/YQtPSGhIL0755w5wVvBtpyrFkmjXn7rEHwqo0mi3aG6YEx8qKf3Nnp Rf5o2Lo5iX+ORgemvIJ/a0lsmvEhlBVhzOQE2fWW+xYA0mJIegKTp7ziNJABX5/7 fSUxnmQglDQ2x6NVxtrlDi0raP3QvU22Y71WwM3enKEwQFIh/jLOlGfohPNzuFNk d0ueA+bblycXeymfJuivMac6 -----END CERTIFICATE-----Generated at Sun Jan 25 07:29:46 2026 by rpki-client