This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer File: 3eQFo7njLL0ZkIdZfW8pC2w0G80.cer (raw, json) Hash identifier: Lc5HRwqxBPBqnwSRUdEO+RPL2yx6jHAHvFP9RGbLW4k= Subject key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A43 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:04:17 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37266 IP: 196.32.232.0/21 IP: 196.45.16.0/20 IP: 2c0f:fdd8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14915 (0x3a43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:04:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:d5:cb:69:ac:2e:e2:10:7d:62:2b:32:b6: 54:10:e7:fc:d9:bd:d8:27:fa:a3:fa:f6:e0:c5:16: a9:06:cd:a9:ed:22:b5:a3:ff:ad:3d:8d:4e:cb:c5: aa:b0:ef:2d:63:e3:10:b9:bd:3b:b4:55:28:3b:31: 68:fc:ed:6d:00:d4:82:a0:78:6d:20:b1:e1:f0:78: 28:60:70:0a:ce:9a:c1:90:a7:62:bb:82:56:42:17: c3:35:74:87:f0:21:c6:36:a1:46:03:7d:45:6d:82: e2:d1:bf:a4:37:66:94:b7:c1:14:7f:44:1b:8e:43: 92:0d:75:81:02:a3:cd:dd:00:c8:bc:45:3f:33:fb: 7d:49:19:68:7b:ea:c2:97:7a:20:26:94:c4:7b:92: 54:24:c8:9a:0b:37:71:73:b3:a9:c2:8c:9c:43:40: 89:0e:a3:70:1d:3f:3c:1b:5b:32:99:9a:e0:05:1e: fe:97:d2:86:de:7c:99:19:45:ac:86:af:bb:22:89: 79:48:d6:47:be:9e:57:49:40:ec:ec:6a:98:44:a0: fe:9a:3b:8d:0c:19:cd:82:61:3f:0f:dd:6e:a0:6c: 08:a4:45:c9:6c:f0:f0:4c:fc:e7:b3:df:b5:32:51: 6a:b1:56:56:31:27:0c:2c:cd:53:8a:2c:57:96:8e: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37266 sbgp-ipAddrBlock: critical IPv4: 196.32.232.0/21 196.45.16.0/20 IPv6: 2c0f:fdd8::/32 Signature Algorithm: sha256WithRSAEncryption 61:e0:97:fc:cf:66:58:b9:67:ef:20:27:f4:8e:20:b9:6d:3d: 85:f2:15:c3:5e:72:84:16:4f:73:77:45:c6:b3:a2:f6:24:8a: 63:4b:b9:62:64:50:ed:cf:c5:2e:c7:2b:46:1b:5e:b5:16:2a: 46:00:81:3a:47:95:59:a9:42:84:42:cb:25:5e:35:92:75:fe: b3:22:8f:fe:81:8e:17:fe:ef:52:2a:f0:4e:c1:e1:64:f8:7a: 1f:72:ae:30:e3:fd:f2:96:19:ec:12:82:21:65:53:84:6e:5f: 00:d8:00:2e:d8:67:d3:70:3d:58:50:b5:be:71:c1:8a:b5:8a: 25:c4:40:9f:23:c7:42:54:35:3c:87:b9:94:88:f1:3a:6c:71: 30:06:13:3e:56:e7:41:05:58:af:d9:69:94:89:77:2e:e3:b0: 04:c0:36:ce:71:a2:8b:cd:94:c7:41:92:6a:1d:47:85:1b:a0: 3e:2f:f3:3e:37:32:c2:bc:df:fe:85:cb:68:07:fb:87:09:2a: a2:ef:06:51:a3:42:3f:22:a1:a8:e1:00:9a:0a:97:fe:b3:1b: f0:9d:3e:b1:6c:f9:76:21:a7:4b:14:f3:e2:b3:b8:a1:41:70: 99:7a:e2:a5:9f:ab:88:8c:60:28:e5:43:0f:5a:92:e4:21:05: 4a:b3:85:52 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOkMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjA0MTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjYzOTU0QUYxMTAvBgNVBAUTKERERTQwNUEzQjlFMzJDQkQxOTkwODc1 OTdENkYyOTBCNkMzNDFCQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAedXLaawu4hB9YisytlQQ5/zZvdgn+qP69uDFFqkGzantIrWj/609jU7Lxaqw 7y1j4xC5vTu0VSg7MWj87W0A1IKgeG0gseHweChgcArOmsGQp2K7glZCF8M1dIfw IcY2oUYDfUVtguLRv6Q3ZpS3wRR/RBuOQ5INdYECo83dAMi8RT8z+31JGWh76sKX eiAmlMR7klQkyJoLN3Fzs6nCjJxDQIkOo3AdPzwbWzKZmuAFHv6X0obefJkZRayG r7siiXlI1ke+nldJQOzsaphEoP6aO40MGc2CYT8P3W6gbAikRcls8PBM/Oez37Uy UWqxVlYxJwwszVOKLFeWjkYLAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU3eQFo7nj LL0ZkIdZfW8pC2w0G80wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2Mzk1NC9CMkZERTRBMjJBMjYx MUVFODY0RENBNDg0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NjM5NTQvQjJGREU0QTIyQTI2MTFFRTg2NERDQTQ4NEFEOUU2RkMvM2VRRm83 bmpMTDBaa0lkWmZXOHBDMncwRzgwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkZIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAPEIOgDBATELRAwDQQC AAIwBwMFACwP/dgwDQYJKoZIhvcNAQELBQADggEBAGHgl/zPZli5Z+8gJ/SOILlt PYXyFcNecoQWT3N3RcazovYkimNLuWJkUO3PxS7HK0YbXrUWKkYAgTpHlVmpQoRC yyVeNZJ1/rMij/6Bjhf+71Iq8E7B4WT4eh9yrjDj/fKWGewSgiFlU4RuXwDYAC7Y Z9NwPVhQtb5xwYq1iiXEQJ8jx0JUNTyHuZSI8TpscTAGEz5W50EFWK/ZaZSJdy7j sATANs5xoovNlMdBkmodR4UboD4v8z43MsK83/6Fy2gH+4cJKqLvBlGjQj8ioajh AJoKl/6zG/CdPrFs+XYhp0sU8+KzuKFBcJl64qWfq4iMYCjlQw9akuQhBUqzhVI= -----END CERTIFICATE-----Generated at Sun Jan 25 16:42:31 2026 by rpki-client