This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer File: 4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer (raw, json) Hash identifier: 6k6HhxLcoTumLEEXlWMVtNWQiilW4KK3gAceEMldZkk= Subject key identifier: E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3ED4 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:00:46 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328330 IP: 2001:43f8:1190::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16084 (0x3ed4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:00:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36EEB6BAF, serialNumber=E16533BAF90FDFE61F88207EDAE004FDCB52FA30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e3:12:52:a7:e0:97:43:d4:43:6d:42:e9:ad: d6:6f:a3:00:6f:2f:fe:5a:f3:36:93:27:2e:ca:e1: 91:34:50:95:cd:36:16:61:cb:f9:68:da:27:6f:94: f0:67:5f:41:13:29:94:2e:db:36:d7:ba:84:d4:dd: 5a:fd:b8:16:8b:76:76:f3:ed:a4:05:63:b5:8f:0e: ed:10:11:12:84:29:01:27:da:1d:1c:85:7c:db:81: 61:64:04:2b:55:b6:ff:52:2d:18:eb:3e:0e:46:59: af:93:cc:3d:74:a9:f4:5f:1f:70:3c:19:e8:60:db: ba:47:31:16:68:01:29:9d:f4:be:54:18:7b:f3:2d: bd:c9:56:23:55:d5:1a:81:29:33:85:02:ff:92:15: 2a:1a:77:1c:1d:c0:b4:b1:12:aa:80:c9:9c:54:ab: 33:d2:ca:c3:e0:cb:81:d7:81:3e:4a:b1:a9:28:a4: 48:db:17:7a:67:19:ad:48:8f:1d:45:c1:77:63:8e: 22:e0:33:1e:7b:1a:c2:52:84:b5:74:f7:4c:29:25: 2b:8a:9c:59:0b:02:cf:b2:57:93:cd:4b:50:91:12: f3:14:4b:54:75:a8:14:bc:c0:68:1a:34:52:9f:95: ac:50:0a:38:79:b7:a1:0b:b6:87:7f:96:37:71:cc: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328330 sbgp-ipAddrBlock: critical IPv6: 2001:43f8:1190::/48 Signature Algorithm: sha256WithRSAEncryption 7f:dd:05:be:09:c4:1e:28:37:40:ba:98:ba:24:32:84:a1:19: b8:6a:5f:ee:7c:08:b5:44:3f:b6:df:a0:10:a9:9c:ae:3f:60: 03:83:62:55:e0:cb:ee:5b:cd:be:6d:bc:bd:80:0f:06:3f:3b: ca:bb:43:90:82:aa:f0:a2:9c:51:05:8c:38:5a:39:c1:3b:46: 4c:16:42:a4:82:60:5d:02:8d:ff:0e:05:62:e4:90:de:44:3d: b9:2a:87:f5:03:bb:06:65:a3:95:12:c2:51:2c:6b:65:51:b5: 69:6f:8b:93:fc:55:a0:ef:c2:19:68:05:d3:12:81:2b:58:ca: 3a:3c:d8:79:71:64:b2:75:b1:29:46:3e:8e:c2:b6:4d:97:56: e4:e5:04:7b:42:97:cf:53:6b:3d:88:e2:67:55:4d:04:88:5f: a5:d7:28:45:89:80:41:ec:cf:e2:ac:79:86:72:60:44:ff:be: c8:b5:8b:f9:9b:ee:86:4d:f2:80:bb:cb:2b:2e:97:b2:d0:47: 8b:3c:c9:1b:6b:f9:4d:0a:b4:83:24:02:0c:ed:ed:5d:7b:91: 5c:ff:59:51:44:16:e8:b0:73:14:9e:1f:63:f8:c0:9e:58:a7: 55:80:6f:3b:73:bd:4d:13:c9:8d:39:46:f0:7f:97:4f:75:24: 4e:88:9f:76 -----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgICPtQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTAwNDZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkVFQjZCQUYxMTAvBgNVBAUTKEUxNjUzM0JBRjkwRkRGRTYxRjg4MjA3 RURBRTAwNEZEQ0I1MkZBMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ4xJSp+CXQ9RDbULprdZvowBvL/5a8zaTJy7K4ZE0UJXNNhZhy/lo2idvlPBn X0ETKZQu2zbXuoTU3Vr9uBaLdnbz7aQFY7WPDu0QERKEKQEn2h0chXzbgWFkBCtV tv9SLRjrPg5GWa+TzD10qfRfH3A8Gehg27pHMRZoASmd9L5UGHvzLb3JViNV1RqB KTOFAv+SFSoadxwdwLSxEqqAyZxUqzPSysPgy4HXgT5KsakopEjbF3pnGa1Ijx1F wXdjjiLgMx57GsJShLV090wpJSuKnFkLAs+yV5PNS1CREvMUS1R1qBS8wGgaNFKf laxQCjh5t6ELtod/ljdxzKDpAgMBAAGjggMOMIIDCjAdBgNVHQ4EFgQU4WUzuvkP 3+YfiCB+2uAE/ctS+jAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFRUI2Qi8yQUQwOEYxQ0RDREIx MUVGQjQ2QjQxN0E3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RUVCNkIvMkFEMDhGMUNEQ0RCMTFFRkI0NkI0MTdBNzYyRTk1MUEvNFdVenV2 a1AzLVlmaUNCLTJ1QUVfY3RTLWpBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAoowIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4EZAwDQYJKoZI hvcNAQELBQADggEBAH/dBb4JxB4oN0C6mLokMoShGbhqX+58CLVEP7bfoBCpnK4/ YAODYlXgy+5bzb5tvL2ADwY/O8q7Q5CCqvCinFEFjDhaOcE7RkwWQqSCYF0Cjf8O BWLkkN5EPbkqh/UDuwZlo5USwlEsa2VRtWlvi5P8VaDvwhloBdMSgStYyjo82Hlx ZLJ1sSlGPo7Ctk2XVuTlBHtCl89Taz2I4mdVTQSIX6XXKEWJgEHsz+KseYZyYET/ vsi1i/mb7oZN8oC7yysul7LQR4s8yRtr+U0KtIMkAgzt7V17kVz/WVFEFuiwcxSe H2P4wJ5Yp1WAbztzvU0TyY05RvB/l091JE6In3Y= -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:58 2026 by rpki-client