This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer File: OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer (raw, json) Hash identifier: YoTTDphND//BLjEYdv9l9PrzoMlToz41O3Gj8vK3WvI= Subject key identifier: 38:76:13:5B:FC:A9:AA:F0:B0:0B:42:D8:76:51:84:6E:70:AC:47:85 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D1F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:50:52 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327950 IP: 196.223.224.0/21 IP: 2c0f:f330::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15647 (0x3d1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:50:52 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B4943AF, serialNumber=3876135BFCA9AAF0B00B42D87651846E70AC4785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:a7:ae:0b:36:87:e2:1e:41:91:20:c7:21: 30:e6:e4:72:ab:a5:9e:7d:d5:4f:6a:0d:22:53:eb: d3:42:fc:77:06:82:ee:08:6c:86:ff:f6:11:66:90: 7d:a1:60:b4:b5:d8:fd:4b:eb:b3:ba:c8:e9:db:58: 04:8b:4a:08:3a:14:3e:57:ee:95:bb:9b:35:82:98: 6e:24:17:f9:a3:83:1a:46:86:9e:41:37:7e:1e:85: 74:07:14:ec:8f:16:00:f2:e1:70:a6:d7:26:4c:e0: 7c:86:a7:66:36:b8:db:0d:c4:e0:bd:2b:e7:72:a8: b9:c7:b0:73:31:6d:be:f0:1a:5d:99:96:48:e4:51: aa:03:58:4c:c0:11:f2:3d:0b:6b:7c:ca:ad:10:6d: 0f:c5:3b:67:a0:2d:14:45:75:06:a3:09:70:25:42: 8b:18:db:60:ef:a7:21:9d:b0:c6:38:d5:fa:0c:50: 1b:a2:26:a1:39:e5:be:44:f9:41:3d:41:83:3e:92: 56:37:6c:cb:d3:01:54:7b:54:ce:08:e1:d4:e6:21: 91:e7:5f:84:b3:2b:ed:4c:25:ac:47:68:01:01:da: cc:02:e6:91:87:42:7d:f4:26:f3:65:1b:cf:79:60: 8e:1b:d8:26:ff:c9:00:dc:74:b4:0a:76:96:bf:0e: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:76:13:5B:FC:A9:AA:F0:B0:0B:42:D8:76:51:84:6E:70:AC:47:85 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327950 sbgp-ipAddrBlock: critical IPv4: 196.223.224.0/21 IPv6: 2c0f:f330::/32 Signature Algorithm: sha256WithRSAEncryption 2b:cd:a8:f3:a2:7b:1e:a0:27:ba:7d:09:b0:7d:cf:24:b9:f4: b9:03:80:7b:a6:36:80:2f:3e:78:0a:94:6e:bc:92:9e:ca:6c: 4c:38:bc:f9:58:f4:f7:c8:02:58:1b:f3:22:47:78:ef:3c:f8: 57:44:70:57:87:09:a9:61:1f:6a:0d:22:9b:60:4b:5b:6b:07: 5c:77:00:94:fa:4f:c0:6d:26:a5:b8:4d:a2:a1:12:f3:e0:fb: 19:4d:2a:ba:29:58:fb:32:ae:37:79:8d:85:00:6e:0c:5a:b6: a1:08:37:e5:a0:8f:c0:de:d1:5f:9b:f2:b5:f7:bc:12:a5:0f: a6:91:7f:ee:80:c8:00:cb:09:2c:35:bf:ea:3d:3e:19:66:85: 80:fc:78:fa:d2:22:c4:e0:a4:ec:4d:b8:1e:bd:7b:6a:86:29: d4:03:13:14:ac:27:7f:9e:dd:57:37:12:64:9a:2e:a3:ed:e5: d4:dc:0c:e8:18:b6:56:d9:e9:f6:1d:b3:65:64:6b:87:8d:64: 20:2a:f8:38:a7:99:24:b0:28:b5:37:ac:5f:a2:f6:57:fd:29: fc:82:f5:5f:34:19:45:c5:c5:09:2a:78:27:d3:c4:e2:78:d1: 92:96:bc:12:de:4e:84:be:ca:f0:8f:c3:89:67:31:5d:9e:54: e5:16:d1:2e -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPR8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzUwNTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkI0OTQzQUYxMTAvBgNVBAUTKDM4NzYxMzVCRkNBOUFBRjBCMDBCNDJE ODc2NTE4NDZFNzBBQzQ3ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/66euCzaH4h5BkSDHITDm5HKrpZ591U9qDSJT69NC/HcGgu4IbIb/9hFmkH2h YLS12P1L67O6yOnbWASLSgg6FD5X7pW7mzWCmG4kF/mjgxpGhp5BN34ehXQHFOyP FgDy4XCm1yZM4HyGp2Y2uNsNxOC9K+dyqLnHsHMxbb7wGl2ZlkjkUaoDWEzAEfI9 C2t8yq0QbQ/FO2egLRRFdQajCXAlQosY22DvpyGdsMY41foMUBuiJqE55b5E+UE9 QYM+klY3bMvTAVR7VM4I4dTmIZHnX4SzK+1MJaxHaAEB2swC5pGHQn30JvNlG895 YI4b2Cb/yQDcdLQKdpa/Dp8XAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUOHYTW/yp qvCwC0LYdlGEbnCsR4UwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCNDk0My8wMTk2RkFCNjM0Mzkx MUVEQTNCNThDODdGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QjQ5NDMvMDE5NkZBQjYzNDM5MTFFREEzQjU4Qzg3RjEyMjI0NjgvT0hZVFdf eXBxdkN3QzBMWWRsR0VibkNzUjRVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAQ4wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAPE3+AwDQQCAAIwBwMF ACwP8zAwDQYJKoZIhvcNAQELBQADggEBACvNqPOiex6gJ7p9CbB9zyS59LkDgHum NoAvPngKlG68kp7KbEw4vPlY9PfIAlgb8yJHeO88+FdEcFeHCalhH2oNIptgS1tr B1x3AJT6T8BtJqW4TaKhEvPg+xlNKropWPsyrjd5jYUAbgxatqEIN+Wgj8De0V+b 8rX3vBKlD6aRf+6AyADLCSw1v+o9PhlmhYD8ePrSIsTgpOxNuB69e2qGKdQDExSs J3+e3Vc3EmSaLqPt5dTcDOgYtlbZ6fYds2Vka4eNZCAq+DinmSSwKLU3rF+i9lf9 KfyC9V80GUXFxQkqeCfTxOJ40ZKWvBLeToS+yvCPw4lnMV2eVOUW0S4= -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:29 2026 by rpki-client