This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer File: ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer (raw, json) Hash identifier: Jnrb2NBUxKtOzCraDd3jSzBXW/SN/92wqNHTqqviksg= Subject key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3DB6 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:14:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 36982 IP: 196.13.250.0/24 IP: 196.42.64.0/18 IP: 196.47.192.0/18 IP: 197.239.128.0/18 IP: 2001:43f8:70::/45 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15798 (0x3db6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:14:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36C4E2CAF, serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b6:af:d0:09:49:b1:d6:3e:40:c9:b7:d1:8a: d2:b0:c0:6d:0f:fa:98:ff:3b:be:fd:88:5a:b9:e5: 6b:f3:08:7c:e4:f6:9c:84:d4:03:43:8a:b7:79:6c: 13:26:4a:18:26:8b:47:22:3c:f9:06:36:8e:67:25: 1d:56:2a:92:75:bd:d5:e7:6c:42:e1:12:55:d8:33: b1:2d:98:f7:37:b1:86:28:e7:97:4b:cd:1c:e3:9b: 71:92:a6:60:74:25:6b:1c:a5:b1:ae:e7:ae:4d:0b: 00:d8:d5:3c:5c:30:06:18:5a:fb:36:9e:91:54:bc: 75:47:fc:6b:25:41:cf:7c:5a:c3:a5:26:0d:dc:5e: fc:a1:e4:61:91:86:aa:6b:ac:19:40:11:e8:61:a1: 38:a6:a8:5b:ae:9e:ef:66:ea:1f:39:b7:be:a9:de: f7:e4:fc:88:7d:6c:43:7c:48:3c:23:e1:52:65:fc: eb:d4:21:4d:6b:f6:6b:3c:37:7c:85:43:10:86:90: 1e:6e:ce:88:08:28:05:13:f9:c3:07:42:e9:c7:8a: 76:4a:1c:6c:b1:78:96:46:14:3b:59:62:2a:ca:81: 46:ff:98:8c:f9:cd:45:f8:38:62:aa:47:6d:2a:e8: a1:98:d5:65:72:8b:88:c6:61:20:b0:f9:73:1c:78: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 36982 sbgp-ipAddrBlock: critical IPv4: 196.13.250.0/24 196.42.64.0/18 196.47.192.0/18 197.239.128.0/18 IPv6: 2001:43f8:70::/45 Signature Algorithm: sha256WithRSAEncryption b4:30:bd:eb:23:9c:4e:77:cb:c1:76:00:a9:6d:f1:01:13:b7: 92:5c:1e:54:ef:3f:76:93:e3:02:26:2f:47:a6:75:23:de:d4: 55:9d:3a:8a:73:dd:32:e7:f4:e5:53:66:3f:36:4b:06:74:13: 9d:b2:fa:76:e1:54:3d:ee:ba:70:14:5c:a7:7e:02:87:e8:98: 74:82:51:d6:94:89:af:4d:33:d8:60:f3:bf:76:91:a9:59:2a: da:27:ec:aa:f0:78:54:29:1b:3d:51:a3:0a:53:1c:e6:be:19: ee:64:df:8b:1c:09:5b:72:08:5a:fd:b6:34:f0:04:ab:fb:ff: 8c:d8:11:67:4a:b4:a9:16:05:b2:23:81:45:d4:aa:b3:92:fc: ab:c7:fa:dd:98:4b:a6:a7:a9:63:a1:fa:25:68:9f:a0:5f:fe: 67:78:2b:9a:11:04:02:4d:89:8f:8f:3d:71:77:4e:3d:0b:d9: ce:f7:be:81:41:25:c5:a2:b3:73:75:08:70:21:02:a4:99:82: 21:32:b2:2d:f1:9e:5a:2d:e6:1a:82:74:99:5e:6c:2f:32:c2: 76:e1:eb:3e:e6:a4:28:e4:8f:0e:41:32:72:9e:e8:04:76:d5: ad:d2:e7:e7:ff:ed:9c:49:e9:1f:bd:66:7e:3e:83:09:e2:9f: 67:b0:fa:c1 -----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgICPbYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDE0NDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkM0RTJDQUYxMTAvBgNVBAUTKDAxM0EzOEMzOUNDQjY0RDhGRUU4Q0RF NkJGMzY4RjQ2REE3MzhDNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3tq/QCUmx1j5AybfRitKwwG0P+pj/O779iFq55WvzCHzk9pyE1ANDird5bBMm Shgmi0ciPPkGNo5nJR1WKpJ1vdXnbELhElXYM7EtmPc3sYYo55dLzRzjm3GSpmB0 JWscpbGu565NCwDY1TxcMAYYWvs2npFUvHVH/GslQc98WsOlJg3cXvyh5GGRhqpr rBlAEehhoTimqFuunu9m6h85t76p3vfk/Ih9bEN8SDwj4VJl/OvUIU1r9ms8N3yF QxCGkB5uzogIKAUT+cMHQunHinZKHGyxeJZGFDtZYirKgUb/mIz5zUX4OGKqR20q 6KGY1WVyi4jGYSCw+XMceGfdAgMBAAGjggMuMIIDKjAdBgNVHQ4EFgQUATo4w5zL ZNj+6M3mvzaPRtpzjEAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDNEUyQy9FMEY5NzU3MkZENjUx MUVDQTJFQUFGRTFGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QzRFMkMvRTBGOTc1NzJGRDY1MTFFQ0EyRUFBRkUxRjEyMjI0NjgvQVRvNHc1 ekxaTmotNk0zbXZ6YVBSdHB6akVBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkHYwQgYIKwYBBQUHAQcBAf8EMzAxMB4EAgABMBgDBADEDfoDBAbEKkADBAbE L8ADBAbF74AwDwQCAAIwCQMHAyABQ/gAcDANBgkqhkiG9w0BAQsFAAOCAQEAtDC9 6yOcTnfLwXYAqW3xARO3klweVO8/dpPjAiYvR6Z1I97UVZ06inPdMuf05VNmPzZL BnQTnbL6duFUPe66cBRcp34Ch+iYdIJR1pSJr00z2GDzv3aRqVkq2ifsqvB4VCkb PVGjClMc5r4Z7mTfixwJW3IIWv22NPAEq/v/jNgRZ0q0qRYFsiOBRdSqs5L8q8f6 3ZhLpqepY6H6JWifoF/+Z3grmhEEAk2Jj489cXdOPQvZzve+gUElxaKzc3UIcCEC pJmCITKyLfGeWi3mGoJ0mV5sLzLCduHrPuakKOSPDkEycp7oBHbVrdLn5//tnEnp H71mfj6DCeKfZ7D6wQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:31 2026 by rpki-client