This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer File: 9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer (raw, json) Hash identifier: Gy9oS+0k3Y+f17V946XSo9zvF8URHLM3I23h/pLknzE= Subject key identifier: F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3ED6 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:01:09 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327688 IP: 41.57.0.0/18 IP: 41.57.128.0/18 IP: 2c0f:fd68::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16086 (0x3ed6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:01:09 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36EED3EAF, serialNumber=F59284D76678851F7AA743B13F6C067479550074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:8f:f1:96:6f:13:7a:e3:4d:cf:39:ed:4d: 86:4b:5c:00:0f:1f:f1:e7:ae:bf:fd:e0:1e:7d:3f: cc:f3:f6:d1:2e:68:c1:da:6b:e9:b8:0b:44:6f:ed: 2e:5b:d6:06:9e:31:15:3b:d0:83:23:f1:e7:10:00: 07:72:1c:65:85:ed:78:d6:1f:97:bb:00:40:82:ea: 0c:66:7a:f4:f8:05:e8:ef:1a:c1:db:dc:13:28:a5: ea:2f:4c:19:28:27:b9:e4:67:4f:a8:34:c2:1f:6d: 11:77:73:14:57:ba:0a:ed:22:23:c6:aa:a7:86:f5: b8:d2:84:c4:f6:ad:89:5f:26:1d:2e:3d:92:99:65: fb:4f:ee:29:7c:72:89:e7:79:33:0c:81:57:42:1e: fe:05:43:0a:e1:fc:75:11:1e:67:0c:b7:00:bf:b8: ac:72:80:3d:f1:41:93:50:d5:6c:04:7e:76:86:be: 93:4c:cc:0b:fb:03:58:c9:9f:2b:d2:f3:54:f7:97: ad:f0:d1:ef:77:4e:1d:60:db:5d:c3:37:cc:04:ab: f0:df:7c:e1:53:8d:e5:ff:97:dd:f1:70:c3:fd:0b: ae:7f:25:79:c9:e9:48:94:4c:54:78:3c:3f:d0:10: e2:d2:b2:f6:2d:de:e5:70:7a:d9:92:59:e1:fa:1a: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327688 sbgp-ipAddrBlock: critical IPv4: 41.57.0.0/18 41.57.128.0/18 IPv6: 2c0f:fd68::/32 Signature Algorithm: sha256WithRSAEncryption 03:a8:9b:c8:d0:63:ad:c1:56:8a:1f:74:41:5e:82:de:96:e1: 62:23:2e:f1:b0:67:f6:5b:14:56:e6:59:a9:57:64:54:4d:01: 09:51:ac:01:bf:c0:57:74:5f:aa:3c:eb:b8:42:80:10:7f:29: 09:eb:94:ed:b3:8c:0f:bf:af:56:ec:d9:4e:55:cb:78:6b:c6: 5f:2f:ba:d5:ad:35:e5:96:fb:63:91:04:8a:bd:38:a7:d6:33: 0a:17:53:54:0d:05:00:5e:73:2d:56:f9:2f:27:75:58:40:1f: 09:1b:d0:3f:5c:af:be:5a:ac:56:c4:29:27:52:6e:0b:b8:14: 9d:79:f7:a8:46:4b:23:32:fe:2b:09:12:64:dc:07:d2:0f:78: d9:c5:0e:3e:9f:4e:cb:14:b3:48:d6:e3:87:37:ee:f5:c4:52: d1:40:8a:f3:5d:c6:b7:dd:d2:de:27:68:b7:66:e0:0c:2f:90: 77:7c:75:23:02:5f:29:f4:0c:e3:00:b9:67:a3:a1:42:b5:17: ac:09:06:27:fa:33:40:69:e9:be:c9:9b:d4:cc:08:c0:9c:2b: 63:2a:0b:78:b2:ad:ef:73:84:3e:a3:1f:ab:25:74:31:54:75: ac:f7:db:d8:54:b3:95:9e:8e:81:a9:ca:1d:f8:77:17:1c:10: 7c:f6:52:6d -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICPtYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTAxMDlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkVFRDNFQUYxMTAvBgNVBAUTKEY1OTI4NEQ3NjY3ODg1MUY3QUE3NDNC MTNGNkMwNjc0Nzk1NTAwNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3SI/xlm8TeuNNzzntTYZLXAAPH/Hnrr/94B59P8zz9tEuaMHaa+m4C0Rv7S5b 1gaeMRU70IMj8ecQAAdyHGWF7XjWH5e7AECC6gxmevT4BejvGsHb3BMopeovTBko J7nkZ0+oNMIfbRF3cxRXugrtIiPGqqeG9bjShMT2rYlfJh0uPZKZZftP7il8conn eTMMgVdCHv4FQwrh/HURHmcMtwC/uKxygD3xQZNQ1WwEfnaGvpNMzAv7A1jJnyvS 81T3l63w0e93Th1g213DN8wEq/DffOFTjeX/l93xcMP9C65/JXnJ6UiUTFR4PD/Q EOLSsvYt3uVwetmSWeH6GrtjAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU9ZKE12Z4 hR96p0OxP2wGdHlVAHQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFRUQzRS8yQUY4RkI2NjBBQTMx MUVFQUYyQ0ZBNDM0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RUVEM0UvMkFGOEZCNjYwQUEzMTFFRUFGMkNGQTQzNEFEOUU2RkMvOVpLRTEy WjRoUjk2cDBPeFAyd0dkSGxWQUhRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAAgwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAYpOQADBAYpOYAwDQQC AAIwBwMFACwP/WgwDQYJKoZIhvcNAQELBQADggEBAAOom8jQY63BVoofdEFegt6W 4WIjLvGwZ/ZbFFbmWalXZFRNAQlRrAG/wFd0X6o867hCgBB/KQnrlO2zjA+/r1bs 2U5Vy3hrxl8vutWtNeWW+2ORBIq9OKfWMwoXU1QNBQBecy1W+S8ndVhAHwkb0D9c r75arFbEKSdSbgu4FJ1596hGSyMy/isJEmTcB9IPeNnFDj6fTssUs0jW44c37vXE UtFAivNdxrfd0t4naLdm4AwvkHd8dSMCXyn0DOMAuWejoUK1F6wJBif6M0Bp6b7J m9TMCMCcK2MqC3iyre9zhD6jH6sldDFUdaz329hUs5WejoGpyh34dxccEHz2Um0= -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:31 2026 by rpki-client