This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer File: 4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer (raw, json) Hash identifier: a+DO5pEYDebcGKw8SlZzSVPG/KmDfKs12rQNP0cykyA= Subject key identifier: E2:FB:64:37:B4:C9:4D:5F:51:22:1B:16:50:56:3A:48:FF:54:BE:09 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D83 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:06:23 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 25543 IP: 41.138.96.0/19 IP: 41.203.224.0/20 IP: 154.66.160.0/20 IP: 196.28.240.0/20 IP: 2c0f:fd80::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15747 (0x3d83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:06:23 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36C01B9AF, serialNumber=E2FB6437B4C94D5F51221B1650563A48FF54BE09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:e6:5d:d8:5d:7f:93:e6:9c:4f:5f:db:84: 05:64:ce:5e:1e:09:61:a8:b9:0b:eb:4f:8b:37:42: ae:ff:2f:f0:4f:2f:24:8c:8f:7a:d0:1b:55:c2:7d: ed:28:b9:f8:d6:82:d3:60:56:05:81:9a:fb:b3:d9: ad:c4:f8:62:2e:b8:2e:e4:d4:7d:b4:7a:54:89:3a: 54:1f:fa:99:4b:96:16:c3:1e:17:d6:13:c2:0b:2c: 70:fc:ca:11:4a:e1:c5:80:7c:3a:54:50:d6:7c:4c: 10:86:e6:68:ff:f5:4d:e7:d5:e6:c1:ea:16:2d:27: 6d:64:98:1b:c9:e6:40:73:f4:09:6e:ac:63:e6:e1: 29:de:53:9a:58:b5:e3:d2:e5:4a:ce:51:97:d5:59: 2f:7f:96:0b:82:07:21:7f:db:56:7a:c9:f0:05:d2: b9:c8:3e:25:af:18:ba:cb:6b:2d:3f:32:a0:09:3f: 0a:11:0e:b6:2c:29:b2:20:ca:bc:55:74:e2:46:a2: ae:f6:9f:d0:af:e3:08:4c:de:56:b4:24:10:06:b6: ab:49:90:d0:3c:df:92:f0:56:e2:49:9e:d1:57:fc: 2d:14:6f:fa:7e:84:5d:e4:8b:59:54:a3:2d:75:03: 90:73:09:71:3e:31:86:45:00:94:dd:2e:53:bd:48: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FB:64:37:B4:C9:4D:5F:51:22:1B:16:50:56:3A:48:FF:54:BE:09 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 25543 sbgp-ipAddrBlock: critical IPv4: 41.138.96.0/19 41.203.224.0/20 154.66.160.0/20 196.28.240.0/20 IPv6: 2c0f:fd80::/32 Signature Algorithm: sha256WithRSAEncryption c3:c9:f2:9b:06:c8:13:d3:6d:f1:16:21:ae:7f:4f:43:c4:86: 48:ca:2e:b8:5a:9a:5d:5e:27:2d:1d:ce:27:87:63:44:f4:72: 17:33:db:4d:74:de:66:58:bf:ff:04:16:55:34:ab:fe:4e:f2: f8:33:b6:7e:f1:cc:4a:a7:17:07:2a:5c:49:7c:18:dd:94:fc: 69:cb:da:17:af:18:c9:23:25:47:db:43:24:6a:10:55:64:ee: 9d:4e:ec:3b:a3:d4:96:dd:1a:4f:4c:9e:4d:d1:d2:ee:e1:47: f3:9e:2e:af:71:f2:d6:0d:51:a6:9d:b4:1f:b4:45:c4:8a:38: 0d:a0:c3:83:f6:f8:b3:46:db:7f:32:8a:6f:a8:27:56:21:92: 56:85:45:71:fa:3c:0e:d7:c5:73:ac:ac:3a:00:72:a7:62:ae: 49:76:3f:14:0f:de:ea:4b:f5:3a:ae:26:54:4c:a1:82:f7:f9: 9a:61:09:59:89:c3:c7:c5:32:b9:54:c3:8b:17:e8:bf:24:94: 2e:0f:8e:70:09:93:ba:6c:2d:7a:c0:a7:32:f4:ec:e8:23:fe: 69:5e:2c:12:8b:c5:18:37:1b:13:53:1c:84:d4:61:68:48:f4: 04:a0:65:89:bc:3e:7b:7b:cf:01:80:79:32:46:e0:f4:c8:3c: fd:68:4b:89 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgICPYMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDA2MjNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkMwMUI5QUYxMTAvBgNVBAUTKEUyRkI2NDM3QjRDOTRENUY1MTIyMUIx NjUwNTYzQTQ4RkY1NEJFMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGVOZd2F1/k+acT1/bhAVkzl4eCWGouQvrT4s3Qq7/L/BPLySMj3rQG1XCfe0o ufjWgtNgVgWBmvuz2a3E+GIuuC7k1H20elSJOlQf+plLlhbDHhfWE8ILLHD8yhFK 4cWAfDpUUNZ8TBCG5mj/9U3n1ebB6hYtJ21kmBvJ5kBz9AlurGPm4SneU5pYtePS 5UrOUZfVWS9/lguCByF/21Z6yfAF0rnIPiWvGLrLay0/MqAJPwoRDrYsKbIgyrxV dOJGoq72n9Cv4whM3la0JBAGtqtJkNA835LwVuJJntFX/C0Ub/p+hF3ki1lUoy11 A5BzCXE+MYZFAJTdLlO9SIvFAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQU4vtkN7TJ TV9RIhsWUFY6SP9UvgkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDMDFCOS84OTVEOTMwMERBMkUx MUVFQTBCMEM0QTY3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QzAxQjkvODk1RDkzMDBEQTJFMTFFRUEwQjBDNEE2Nzc1NDEyRTYvNHZ0a043 VEpUVjlSSWhzV1VGWTZTUDlVdmdrLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJjxzBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEBSmKYAMEBCnL4AMEBJpC oAMEBMQc8DANBAIAAjAHAwUALA/9gDANBgkqhkiG9w0BAQsFAAOCAQEAw8nymwbI E9Nt8RYhrn9PQ8SGSMouuFqaXV4nLR3OJ4djRPRyFzPbTXTeZli//wQWVTSr/k7y +DO2fvHMSqcXBypcSXwY3ZT8acvaF68YySMlR9tDJGoQVWTunU7sO6PUlt0aT0ye TdHS7uFH854ur3Hy1g1Rpp20H7RFxIo4DaDDg/b4s0bbfzKKb6gnViGSVoVFcfo8 DtfFc6ysOgByp2KuSXY/FA/e6kv1Oq4mVEyhgvf5mmEJWYnDx8UyuVTDixfovySU Lg+OcAmTumwtesCnMvTs6CP+aV4sEovFGDcbE1MchNRhaEj0BKBlibw+e3vPAYB5 Mkbg9Mg8/WhLiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:29:46 2026 by rpki-client