This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer File: I78EX4uOm-g4553TEsyV7LjMYQs.cer (raw, json) Hash identifier: cOz7mUEQlAUtm1/0iVW7tsj7BsMUpAOVYlBNqcuHIbw= Subject key identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A36 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:02:21 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37172 IP: 41.76.112.0/21 IP: 102.207.64.0/22 IP: 102.213.72.0/22 IP: 196.250.240.0/21 IP: 197.231.144.0/21 IP: 2c0f:ee28::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14902 (0x3a36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:02:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F369671EAF, serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:a6:89:ed:08:51:71:be:a3:d2:42:58:75: 35:e0:6d:fe:ea:27:45:f9:f0:79:df:5a:70:ce:dd: be:4a:dd:f1:63:8d:31:79:fd:e8:2e:38:e1:7c:99: 15:50:05:42:1a:3a:ed:91:98:96:5c:ce:65:bc:be: 10:23:e3:79:34:d8:dc:95:7e:7b:f7:0f:ee:aa:60: e2:38:fb:f1:9a:8b:fc:d5:32:6c:4c:e7:c7:72:cb: 44:34:27:1a:ff:34:1d:12:8c:76:83:9a:ba:82:96: ae:8a:a6:b2:7f:a5:0a:09:12:bc:9a:f2:59:81:b2: 95:d1:ca:91:0f:00:f0:b3:47:89:55:f8:eb:45:7a: bb:17:77:44:97:59:8c:b8:7f:da:95:59:fc:d7:5c: a5:a5:2f:9e:17:1a:c7:dc:1b:b0:37:20:81:88:7e: 27:9c:22:86:45:79:0b:f7:7a:2e:6c:8e:4a:de:f1: 58:10:d9:3f:8a:90:b3:b9:7b:1f:f0:7c:82:03:ec: 57:7e:3f:d4:c1:6f:79:e5:c6:93:49:96:b7:e2:4b: a2:8e:68:d3:cb:9a:0b:e5:52:c3:83:a3:de:d2:bc: a2:69:f6:73:d4:4f:08:f1:84:5a:5f:c1:20:30:03: c5:7c:d5:b3:ee:87:4e:4d:78:bf:fc:b2:d8:95:e1: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37172 sbgp-ipAddrBlock: critical IPv4: 41.76.112.0/21 102.207.64.0/22 102.213.72.0/22 196.250.240.0/21 197.231.144.0/21 IPv6: 2c0f:ee28::/32 Signature Algorithm: sha256WithRSAEncryption 99:39:51:91:ee:8d:a6:87:20:5a:0f:e1:be:3a:4c:c5:c4:26: 03:3b:59:d3:2e:92:e7:c4:6a:61:a4:66:95:c8:84:6f:2e:07: 81:6d:7f:b2:30:60:1b:be:18:23:1d:47:a7:e9:e8:23:8b:f8: ef:60:43:40:cd:61:16:65:47:7d:e5:61:78:53:12:17:b4:80: b2:c3:1f:37:b2:a6:9b:a5:d4:ab:89:87:72:0a:73:64:5e:cc: ea:e1:80:b2:85:60:8b:0f:97:1f:8f:3d:09:b0:8f:a8:bd:b8: c7:16:18:15:bb:05:22:5c:65:ca:b8:ca:db:71:0b:7c:b0:cf: d3:28:02:44:af:60:f0:90:24:41:2f:06:c4:ab:ae:e6:63:c3: 72:42:30:fd:9a:b8:3e:04:51:16:18:c1:a4:c1:f6:87:98:03: da:e3:f3:ed:f9:ee:c5:81:9a:e8:b3:d2:b6:bf:f1:94:34:7c: cb:4e:50:65:db:57:1d:43:47:57:36:d0:b8:35:c5:05:c7:bf: f0:e2:a5:86:d6:28:e7:34:eb:bf:e3:93:a7:57:7f:68:30:c7: ca:d8:c3:bc:99:5a:b2:a5:c3:7b:63:7e:65:f9:84:b0:c9:ac: 53:3f:1c:fa:a3:e2:3f:0b:62:45:91:50:47:db:55:16:60:38: 60:a1:f9:78 -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgICOjYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjAyMjFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjk2NzFFQUYxMTAvBgNVBAUTKDIzQkYwNDVGOEI4RTlCRTgzOEU3OURE MzEyQ0M5NUVDQjhDQzYxMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI+6aJ7QhRcb6j0kJYdTXgbf7qJ0X58HnfWnDO3b5K3fFjjTF5/eguOOF8mRVQ BUIaOu2RmJZczmW8vhAj43k02NyVfnv3D+6qYOI4+/Gai/zVMmxM58dyy0Q0Jxr/ NB0SjHaDmrqClq6KprJ/pQoJErya8lmBspXRypEPAPCzR4lV+OtFersXd0SXWYy4 f9qVWfzXXKWlL54XGsfcG7A3IIGIfiecIoZFeQv3ei5sjkre8VgQ2T+KkLO5ex/w fIID7Fd+P9TBb3nlxpNJlrfiS6KOaNPLmgvlUsODo97SvKJp9nPUTwjxhFpfwSAw A8V81bPuh05NeL/8stiV4TGFAgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQUI78EX4uO m+g4553TEsyV7LjMYQswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5NjcxRS9CMDY5QjE1ODdCQjEx MUU5OURCRUQyNDNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTY3MUUvQjA2OUIxNTg3QkIxMTFFOTlEQkVEMjQzRjhBRUEyMjgvSTc4RVg0 dU9tLWc0NTUzVEVzeVY3TGpNWVFzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkTQwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAMpTHADBAJmz0ADBAJm 1UgDBAPE+vADBAPF55AwDQQCAAIwBwMFACwP7igwDQYJKoZIhvcNAQELBQADggEB AJk5UZHujaaHIFoP4b46TMXEJgM7WdMukufEamGkZpXIhG8uB4Ftf7IwYBu+GCMd R6fp6COL+O9gQ0DNYRZlR33lYXhTEhe0gLLDHzeyppul1KuJh3IKc2RezOrhgLKF YIsPlx+PPQmwj6i9uMcWGBW7BSJcZcq4yttxC3ywz9MoAkSvYPCQJEEvBsSrruZj w3JCMP2auD4EURYYwaTB9oeYA9rj8+357sWBmuiz0ra/8ZQ0fMtOUGXbVx1DR1c2 0Lg1xQXHv/DipYbWKOc067/jk6dXf2gwx8rYw7yZWrKlw3tjfmX5hLDJrFM/HPqj 4j8LYkWRUEfbVRZgOGCh+Xg= -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:58 2026 by rpki-client