This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer File: AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer (raw, json) Hash identifier: 09mSw4dYhrarCmlYOtprTtqcP4SIheDMAhWYtZm/np8= Subject key identifier: 00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C0F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:10:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 41.206.32.0/19 IP: 41.215.0.0/17 IP: 41.220.112.0/20 IP: 196.200.16.0/20 IP: 196.207.16.0/20 IP: 197.254.0.0/17 IP: 2c0f:ff90::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15375 (0x3c0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:10:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3695947AF, serialNumber=006E0BE21090792D18356197510AD340EC042353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:0f:c4:fe:4b:82:4e:9c:df:b7:ed:a3:46: 23:3e:e8:7a:4f:ef:fa:b1:e4:39:24:8b:4c:95:74: c7:a1:de:6d:09:5d:1e:13:ef:b6:fb:9f:fb:c8:d2: 7b:52:c8:70:48:ef:03:18:74:bb:e9:77:99:b4:b8: e3:95:e5:86:d4:21:bf:5b:c7:e9:ac:de:06:a1:e4: f3:d5:cf:07:9f:a2:a9:5a:92:67:b0:0d:72:c2:fb: 56:16:ef:30:5e:99:8b:1e:5b:89:37:3b:0a:57:30: 3a:f9:50:91:70:f0:0c:25:84:05:5e:31:1c:84:26: 9e:c4:40:bf:17:00:b3:fc:57:2b:6f:87:2d:91:a2: 37:e0:a7:01:b6:1a:bd:c4:5f:b9:49:8b:2f:90:88: c3:83:30:b2:48:a8:da:10:7f:13:76:69:b4:bc:7b: 4d:40:77:2e:07:a2:33:ed:d5:be:ef:a7:76:0d:64: 2c:f2:5d:e1:30:62:8e:e8:bb:9f:1a:74:d5:e5:a9: ac:d2:13:40:51:24:19:7f:6c:ed:17:34:bd:4a:8b: 6b:c4:75:e2:a7:9e:76:fd:52:dd:b5:12:31:59:fe: 5b:f3:18:88:c5:9b:39:03:46:d4:7b:49:7a:88:06: 1c:4b:bd:be:03:b4:9b:06:d7:60:59:90:ac:0e:68: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft sbgp-ipAddrBlock: critical IPv4: 41.206.32.0/19 41.215.0.0/17 41.220.112.0/20 196.200.16.0/20 196.207.16.0/20 197.254.0.0/17 IPv6: 2c0f:ff90::/32 Signature Algorithm: sha256WithRSAEncryption af:45:48:7d:01:76:65:d4:b7:d9:0e:4e:ca:a7:d7:58:fd:83: ff:09:d1:2e:28:e7:7b:01:1f:cc:df:6e:5f:0e:da:3c:db:25: 71:55:f8:05:34:e6:90:71:56:f7:37:30:9e:c0:af:c2:86:2b: 53:50:c4:b2:02:17:07:52:16:d1:35:ac:f9:ab:b0:3c:4c:dd: af:75:64:8f:0a:3a:06:bf:e0:dd:ae:25:3b:81:c1:df:63:46: 6d:97:17:bf:1c:6a:bf:55:7f:9f:50:12:30:d3:cb:d6:d8:13: 12:c1:d6:1d:45:24:b3:f5:51:59:84:10:76:de:fb:95:32:ee: 4d:80:8b:94:4a:a6:14:e9:85:6a:3c:55:a0:3a:12:d3:b6:f0: 79:6e:5c:18:10:52:af:5c:c7:b2:96:9b:30:ab:51:1e:3a:94: e9:cd:2e:40:14:93:3f:6c:49:69:24:f6:d9:71:b2:24:8c:4c: 65:76:a9:68:e9:14:7f:47:b8:0f:1f:6f:50:ba:14:4f:d5:65: 58:0c:0a:13:e1:67:06:41:19:b1:b9:eb:39:c4:cf:ed:cf:53: 01:56:10:a7:23:5c:09:7d:07:57:8c:fa:30:14:e5:66:e4:fa: 71:69:3b:f8:37:ff:6a:ff:71:14:e6:82:2d:7a:0a:07:6b:3b: 53:88:fd:b4 -----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgICPA8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzEwMTVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjk1OTQ3QUYxMTAvBgNVBAUTKDAwNkUwQkUyMTA5MDc5MkQxODM1NjE5 NzUxMEFEMzQwRUMwNDIzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDddA/E/kuCTpzft+2jRiM+6HpP7/qx5Dkki0yVdMeh3m0JXR4T77b7n/vI0ntS yHBI7wMYdLvpd5m0uOOV5YbUIb9bx+ms3gah5PPVzwefoqlakmewDXLC+1YW7zBe mYseW4k3OwpXMDr5UJFw8AwlhAVeMRyEJp7EQL8XALP8Vytvhy2RojfgpwG2Gr3E X7lJiy+QiMODMLJIqNoQfxN2abS8e01Ady4HojPt1b7vp3YNZCzyXeEwYo7ou58a dNXlqazSE0BRJBl/bO0XNL1Ki2vEdeKnnnb9Ut21EjFZ/lvzGIjFmzkDRtR7SXqI BhxLvb4DtJsG12BZkKwOaM+dAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQUAG4L4hCQ eS0YNWGXUQrTQOwEI1MwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5NTk0Ny8wNTdFNUMwODc4NEUx MUYwQjNCRjMyN0REQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTU5NDcvMDU3RTVDMDg3ODRFMTFGMEIzQkYzMjdEREFFNEVDOUMvQUc0TDRo Q1FlUzBZTldHWFVRclRRT3dFSTFNLm1mdDBMBggrBgEFBQcBBwEB/wQ9MDswKgQC AAEwJAMEBSnOIAMEBynXAAMEBCnccAMEBMTIEAMEBMTPEAMEB8X+ADANBAIAAjAH AwUALA//kDANBgkqhkiG9w0BAQsFAAOCAQEAr0VIfQF2ZdS32Q5OyqfXWP2D/wnR LijnewEfzN9uXw7aPNslcVX4BTTmkHFW9zcwnsCvwoYrU1DEsgIXB1IW0TWs+auw PEzdr3Vkjwo6Br/g3a4lO4HB32NGbZcXvxxqv1V/n1ASMNPL1tgTEsHWHUUks/VR WYQQdt77lTLuTYCLlEqmFOmFajxVoDoS07bweW5cGBBSr1zHspabMKtRHjqU6c0u QBSTP2xJaST22XGyJIxMZXapaOkUf0e4Dx9vULoUT9VlWAwKE+FnBkEZsbnrOcTP 7c9TAVYQpyNcCX0HV4z6MBTlZuT6cWk7+Df/av9xFOaCLXoKB2s7U4j9tA== -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:59 2026 by rpki-client