This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer File: OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer (raw, json) Hash identifier: ToIOqgQTCjTicbLGBe5cDzR7C3HW52LXK3oM4YFdJrw= Subject key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3756 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:00:50 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 36963 IP: 41.74.48.0/20 IP: 41.77.88.0/21 IP: 41.138.72.0/21 IP: 41.190.244.0/22 IP: 41.223.140.0/22 IP: 105.235.240.0/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14166 (0x3756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:00:50 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:43:6e:ff:40:27:02:51:64:ca:9b:d3:a7: d5:1b:27:74:bd:d2:20:3f:c5:c1:58:98:4a:83:c6: f4:cb:78:85:4d:60:eb:c8:34:fe:e1:a3:d8:ab:37: 96:39:a8:1e:5c:4b:c5:8d:53:f6:6b:9f:bf:60:f2: 09:ff:c2:61:5f:19:b5:95:49:a3:89:3d:2b:21:13: 60:51:2d:5f:b3:fa:fc:6c:29:b3:34:8a:70:c3:a2: 99:56:28:fd:e7:46:80:5c:81:d1:ae:3b:01:20:0b: 5c:53:cd:00:f9:0b:b9:82:17:92:8e:40:24:71:2e: 90:7d:90:ed:0d:f2:11:e2:8d:3f:40:fd:2c:79:ef: 5c:10:fc:81:6b:76:d1:ce:01:64:74:3a:bb:a0:2c: ca:12:47:83:bf:92:0d:0a:53:12:0e:63:59:38:5b: 7a:5d:e5:a9:19:85:24:70:f9:e9:0f:2e:c2:a7:b7: e6:cc:60:7e:47:48:f3:80:b4:4a:8a:53:8f:3b:bd: 7a:1d:62:4c:ed:d9:d0:bd:84:c3:fd:8b:77:53:95: 08:38:fb:d0:58:f1:fc:2c:f4:22:c2:31:ed:36:ee: e7:97:53:2a:30:1c:e3:98:bf:27:b2:ab:a4:75:7d: 0e:86:b7:fb:c6:f2:0c:ef:42:43:de:d3:4d:99:09: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 36963 sbgp-ipAddrBlock: critical IPv4: 41.74.48.0/20 41.77.88.0/21 41.138.72.0/21 41.190.244.0/22 41.223.140.0/22 105.235.240.0/20 Signature Algorithm: sha256WithRSAEncryption a7:38:b2:33:be:2b:cb:90:20:d5:19:a5:ad:09:0a:fd:32:47: e6:38:9f:25:c8:a0:ad:45:57:1f:40:8f:51:6c:c0:41:de:8f: 63:ed:8a:7b:a0:8a:ef:b1:39:e9:99:80:35:8b:fc:55:9d:cc: 34:05:75:34:12:af:20:90:7d:fa:91:23:2b:43:f4:4d:ff:48: b9:1e:8d:db:4f:6d:c1:c2:32:1e:ab:24:16:00:9a:cf:9f:c1: ef:df:0d:db:3d:c8:f8:f7:17:f6:ef:79:b6:85:fe:76:33:10: 51:e8:83:0b:45:72:5d:0f:b5:b9:7a:5e:fd:da:73:27:ea:dd: 00:90:60:51:69:d4:78:f6:75:c8:cd:8c:94:9c:42:de:04:aa: 34:9e:02:6f:16:0f:72:01:22:9f:6b:12:04:af:ae:cc:66:c1: c5:1e:90:05:32:ba:6f:bf:95:d4:c6:09:9b:fc:5b:02:17:91: cf:3d:1b:fb:cc:36:bf:9d:97:4b:89:3b:81:55:a1:a2:b2:ef: 70:6a:fa:87:86:7e:00:d0:42:0c:18:a5:e0:a6:2e:aa:69:fc: ee:53:36:b1:29:bf:b7:d2:c1:6b:0d:64:4f:f5:83:d9:04:86: a9:f3:9e:07:3a:a0:e1:82:64:b0:16:64:55:b5:60:6b:19:8b: b8:51:b4:c5 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgICN1YwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDAwNTBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjEwRjk2QUYxMTAvBgNVBAUTKDM5NDE2MzRGN0Q5NTY1QjU2QjE5N0Ex MEVDMzRDNTBBQTk0NzM1NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Z0Nu/0AnAlFkypvTp9UbJ3S90iA/xcFYmEqDxvTLeIVNYOvINP7ho9irN5Y5 qB5cS8WNU/Zrn79g8gn/wmFfGbWVSaOJPSshE2BRLV+z+vxsKbM0inDDoplWKP3n RoBcgdGuOwEgC1xTzQD5C7mCF5KOQCRxLpB9kO0N8hHijT9A/Sx571wQ/IFrdtHO AWR0OrugLMoSR4O/kg0KUxIOY1k4W3pd5akZhSRw+ekPLsKnt+bMYH5HSPOAtEqK U487vXodYkzt2dC9hMP9i3dTlQg4+9BY8fws9CLCMe027ueXUyowHOOYvyeyq6R1 fQ6Gt/vG8gzvQkPe002ZCXvRAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUOUFjT32V ZbVrGXoQ7DTFCqlHNVkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxMEY5Ni81MjMzMjAyRTEwRDYx MUVFOTc1REVDMTU0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTBGOTYvNTIzMzIwMkUxMEQ2MTFFRTk3NURFQzE1NEFEOUU2RkMvT1VGalQz MlZaYlZyR1hvUTdEVEZDcWxITlZrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkGMwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAQpSjADBAMpTVgDBAMp ikgDBAIpvvQDBAIp34wDBARp6/AwDQYJKoZIhvcNAQELBQADggEBAKc4sjO+K8uQ INUZpa0JCv0yR+Y4nyXIoK1FVx9Aj1FswEHej2Ptinugiu+xOemZgDWL/FWdzDQF dTQSryCQffqRIytD9E3/SLkejdtPbcHCMh6rJBYAms+fwe/fDds9yPj3F/bvebaF /nYzEFHogwtFcl0Ptbl6Xv3acyfq3QCQYFFp1Hj2dcjNjJScQt4EqjSeAm8WD3IB Ip9rEgSvrsxmwcUekAUyum+/ldTGCZv8WwIXkc89G/vMNr+dl0uJO4FVoaKy73Bq +oeGfgDQQgwYpeCmLqpp/O5TNrEpv7fSwWsNZE/1g9kEhqnzngc6oOGCZLAWZFW1 YGsZi7hRtMU= -----END CERTIFICATE-----Generated at Sun Jan 25 13:49:11 2026 by rpki-client