This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer File: 4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer (raw, json) Hash identifier: C/9ZIUgOu7D4Cn8NLGmAmlAioMQ2gxXPNubX9VFAeGQ= Subject key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36BE Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Sun 09 Nov 2025 20:23:19 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 24835 AS: 30995 AS: 36935 IP: 41.68.0.0/15 IP: 41.206.128.0/19 IP: 41.223.20.0/22 IP: 102.184.0.0/13 IP: 102.217.112.0/22 IP: 102.219.140.0/22 IP: 105.196.0.0/14 IP: 196.128.0.0/11 IP: 196.204.0.0/16 IP: 196.221.0.0/16 IP: 197.132.0.0/14 IP: 2001:4220::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14014 (0x36be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 9 20:23:19 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:9a:64:49:d9:0c:6b:bb:bd:23:2c:3d:bc: c7:7f:ea:73:b2:d8:57:0c:ea:76:0e:c2:0d:ac:d4: d6:db:c6:84:52:c6:9c:0a:09:a4:22:c2:66:d9:2d: 06:3a:05:01:b8:82:7b:25:cb:e5:d0:4a:42:95:01: e9:d4:8f:1c:f6:8f:da:08:a9:7f:49:38:d0:05:9d: ea:3c:2a:0e:2b:79:5f:3c:2d:2e:ed:78:0b:3d:85: 1d:f3:ec:bb:db:89:14:77:c1:a2:fd:ce:f4:6c:26: d2:a1:99:a3:08:fa:ab:58:ce:57:67:cb:92:b7:3a: 51:bd:c1:16:c7:70:ea:45:35:b3:97:8e:d4:49:82: c9:33:66:8c:fa:bf:97:b5:5a:87:c7:29:d0:30:4d: a3:77:48:f1:93:4d:7a:93:c8:35:ba:d2:4e:75:f6: 0f:9b:73:30:b4:9c:cd:f2:65:2d:a8:d9:f6:de:6c: 96:23:20:8f:a7:a2:b4:d0:f5:d9:a6:ea:1f:22:a3: b9:e9:89:67:f1:b2:60:1e:fa:62:2e:81:d9:fc:9f: e7:6a:11:1d:29:12:9e:8f:6c:ec:ca:fa:d1:49:6e: d7:d4:14:8a:01:82:9d:e8:60:10:37:e2:ca:ec:1e: df:2f:b1:65:7b:92:4b:6d:81:df:63:42:98:75:5f: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 24835 30995 36935 sbgp-ipAddrBlock: critical IPv4: 41.68.0.0/15 41.206.128.0/19 41.223.20.0/22 102.184.0.0/13 102.217.112.0/22 102.219.140.0/22 105.196.0.0/14 196.128.0.0/11 196.204.0.0/16 196.221.0.0/16 197.132.0.0/14 IPv6: 2001:4220::/32 Signature Algorithm: sha256WithRSAEncryption 59:70:6b:ac:e7:f4:c4:ec:b0:2e:2f:c3:e0:78:a4:2b:16:17: f5:05:88:ef:67:08:1f:81:cf:4d:f4:cb:c1:12:50:38:72:25: ae:81:e6:45:1c:37:28:db:63:f6:d1:df:c5:5c:ad:64:48:37: 7a:96:90:d0:3e:10:1b:e4:79:ae:ac:cf:19:36:19:44:87:4d: ab:87:ff:7c:8a:a8:6d:0c:9e:0c:cd:cc:a7:ce:ca:9d:0b:5e: 14:7b:5f:53:41:53:56:53:a7:4d:05:b6:06:eb:8a:fc:ce:9d: 75:7d:28:da:4f:31:c3:88:fe:8b:8b:fc:c6:3b:4e:08:f1:7d: c0:e3:ca:f3:1a:79:8c:f6:a0:42:98:18:a1:a3:6b:2e:c0:d7: d2:ab:83:99:24:dd:a8:c8:30:60:84:b9:97:35:25:93:54:3a: 9b:b1:c1:3d:f7:f7:02:98:22:71:83:93:43:03:5d:b2:ed:2c: 03:8c:5f:26:5e:fc:69:60:73:02:5b:69:f2:c3:c1:e5:50:e5: 66:4c:f1:4f:3b:94:fc:a3:cc:07:49:ca:4c:7c:d5:89:b9:7e: 9f:19:d0:13:8d:6e:4d:03:7a:cf:f7:a0:1d:f6:2a:22:ba:06: 92:8e:8b:49:eb:6f:e3:71:98:ad:92:40:72:da:b2:d3:13:a3: d7:4a:18:d6 -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgICNr4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMDkyMDIzMTlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjI1RDdCQUYxMTAvBgNVBAUTKEUyRkU1NkFGRTY2QUIwREYzRTM5NUVE REI0MTg5M0UwMERGNkFFRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1H5pkSdkMa7u9Iyw9vMd/6nOy2FcM6nYOwg2s1NbbxoRSxpwKCaQiwmbZLQY6 BQG4gnsly+XQSkKVAenUjxz2j9oIqX9JONAFneo8Kg4reV88LS7teAs9hR3z7Lvb iRR3waL9zvRsJtKhmaMI+qtYzldny5K3OlG9wRbHcOpFNbOXjtRJgskzZoz6v5e1 WofHKdAwTaN3SPGTTXqTyDW60k519g+bczC0nM3yZS2o2fbebJYjII+norTQ9dmm 6h8io7npiWfxsmAe+mIugdn8n+dqER0pEp6PbOzK+tFJbtfUFIoBgp3oYBA34srs Ht8vsWV7kkttgd9jQph1X4DHAgMBAAGjggNXMIIDUzAdBgNVHQ4EFgQU4v5Wr+Zq sN8+OV7dtBiT4A32rvcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyNUQ3Qi8zQ0U4OEQwOEJEQTkx MUYwOENBMDg5N0FEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFFNEVDOUMvNHY1V3It WnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLm1mdDAiBggrBgEFBQcBCAEB/wQTMBGgDzAN AgJhAwICeRMCAwCQRzBjBggrBgEFBQcBBwEB/wRUMFIwQQQCAAEwOwMDASlEAwQF Kc6AAwQCKd8UAwMDZrgDBAJm2XADBAJm24wDAwJpxAMDBcSAAwMAxMwDAwDE3QMD AsWEMA0EAgACMAcDBQAgAUIgMA0GCSqGSIb3DQEBCwUAA4IBAQBZcGus5/TE7LAu L8PgeKQrFhf1BYjvZwgfgc9N9MvBElA4ciWugeZFHDco22P20d/FXK1kSDd6lpDQ PhAb5HmurM8ZNhlEh02rh/98iqhtDJ4MzcynzsqdC14Ue19TQVNWU6dNBbYG64r8 zp11fSjaTzHDiP6Li/zGO04I8X3A48rzGnmM9qBCmBiho2suwNfSq4OZJN2oyDBg hLmXNSWTVDqbscE99/cCmCJxg5NDA12y7SwDjF8mXvxpYHMCW2nyw8HlUOVmTPFP O5T8o8wHScpMfNWJuX6fGdATjW5NA3rP96Ad9ioiugaSjotJ62/jcZitkkBy2rLT E6PXShjW -----END CERTIFICATE-----Generated at Mon Dec 8 16:18:32 2025 by rpki-client