This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/P5zY-FE-7AV78kzbzX87-jp0Pnw.cer File: P5zY-FE-7AV78kzbzX87-jp0Pnw.cer (raw, json) Hash identifier: YqqyOtQGpPk6GuuTyxPL9MAy5KiiDqtbvaJaNndohv4= Subject key identifier: 3F:9C:D8:F8:51:3E:EC:05:7B:F2:4C:DB:CD:7F:3B:FA:3A:74:3E:7C Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3DF3 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:24:23 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 15475 IP: 41.64.0.0/15 IP: 41.176.0.0/16 IP: 41.199.0.0/16 IP: 154.236.0.0/14 IP: 2001:42b8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15859 (0x3df3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:24:23 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36CC4C5AF, serialNumber=3F9CD8F8513EEC057BF24CDBCD7F3BFA3A743E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:23:e0:e4:3f:29:5e:b5:56:12:52:44:4b:28: 1d:49:0d:0e:30:e2:a4:08:13:cd:7d:19:26:46:76: bd:79:a0:e6:f0:d8:5f:d4:3c:ee:ba:6a:c7:35:ca: 48:7a:46:68:70:ce:f5:66:ab:43:f3:cc:7c:96:3a: c2:ae:98:07:b2:9b:31:ac:95:7e:ad:1d:c4:a5:70: 0a:6f:87:86:69:26:64:86:b2:23:20:9d:84:0d:10: ae:3c:d5:d9:01:3e:9c:08:31:30:93:cc:fa:1f:c8: 6d:35:b6:f2:65:65:ac:c5:2b:7a:f6:78:a3:1b:b6: 76:af:4c:cd:72:81:3f:bb:fc:aa:55:f1:1b:8d:11: b8:e0:1f:ba:2c:14:e0:64:60:e4:c0:6d:e6:86:b3: a4:b4:b0:01:b4:ce:92:93:8d:78:a2:92:4d:4b:c7: 11:f0:78:43:94:43:e0:49:59:dd:0e:c9:0f:a6:39: 93:8a:12:73:9e:6e:5f:03:4a:4a:8e:93:ab:90:46: 7d:24:96:78:8b:ed:a4:ad:da:50:56:98:ba:de:12: 32:52:ea:8a:48:5f:18:0b:fd:f9:89:11:eb:fb:02: 99:eb:7b:cd:94:d9:9e:44:86:8f:69:73:13:46:24: 8d:10:b1:e2:00:c1:a6:4f:35:68:80:6a:9a:34:a9: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9C:D8:F8:51:3E:EC:05:7B:F2:4C:DB:CD:7F:3B:FA:3A:74:3E:7C X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 15475 sbgp-ipAddrBlock: critical IPv4: 41.64.0.0/15 41.176.0.0/16 41.199.0.0/16 154.236.0.0/14 IPv6: 2001:42b8::/32 Signature Algorithm: sha256WithRSAEncryption 48:2b:7f:43:4d:56:3b:b3:6b:ee:16:50:24:8a:07:70:19:2b: 51:55:fa:2b:0c:33:8d:0c:17:10:2b:f4:9f:7d:bf:f9:f4:0f: 78:31:0c:f9:c9:a9:b2:e1:e5:ed:f7:15:0e:f5:2e:7c:0f:5d: 7d:57:cf:03:66:35:fd:50:8d:6e:58:6c:69:77:a2:41:93:90: fa:9b:0b:e1:2a:ed:85:f2:38:73:5b:52:32:2e:45:5e:85:f0: c5:16:b1:6a:d9:33:3f:96:20:74:48:8a:34:ba:77:3c:67:81: 6d:f6:25:7c:48:33:dd:e2:24:0a:bb:ab:d5:45:83:09:0f:c1: cb:81:78:7a:2b:d4:eb:df:f7:0d:5b:a4:3f:6e:a3:3e:d7:84: d4:ef:96:11:3b:20:30:75:6a:e0:bb:1e:ca:51:c6:18:8a:49: 69:de:9f:26:a1:d1:2c:e7:10:33:28:f2:73:cb:6a:5c:2e:6a: a6:b0:54:25:b0:37:46:03:bb:f6:a5:16:c5:cb:6f:1c:54:70: 82:7f:b4:6f:b5:0d:66:f0:9e:f2:9f:5d:b2:ac:22:c5:ef:d7: ad:a3:80:15:8d:14:93:8f:e4:5e:6a:17:ef:03:3e:58:bb:ee: 58:1e:c8:12:ef:89:2e:ac:66:17:29:c4:a1:d5:e2:50:24:27: 24:a3:64:c1 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgICPfMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDI0MjNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkNDNEM1QUYxMTAvBgNVBAUTKDNGOUNEOEY4NTEzRUVDMDU3QkYyNENE QkNEN0YzQkZBM0E3NDNFN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgI+DkPyletVYSUkRLKB1JDQ4w4qQIE819GSZGdr15oObw2F/UPO66asc1ykh6 RmhwzvVmq0PzzHyWOsKumAeymzGslX6tHcSlcApvh4ZpJmSGsiMgnYQNEK481dkB PpwIMTCTzPofyG01tvJlZazFK3r2eKMbtnavTM1ygT+7/KpV8RuNEbjgH7osFOBk YOTAbeaGs6S0sAG0zpKTjXiikk1LxxHweEOUQ+BJWd0OyQ+mOZOKEnOebl8DSkqO k6uQRn0klniL7aSt2lBWmLreEjJS6opIXxgL/fmJEev7Apnre82U2Z5Eho9pcxNG JI0QseIAwaZPNWiAapo0qYZfAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQUP5zY+FE+ 7AV78kzbzX87+jp0PnwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDQzRDNS8wNENBRTRCNERFNkMx MUYwQkJENTRGRUFEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Q0M0QzUvMDRDQUU0QjRERTZDMTFGMEJCRDU0RkVBREFFNEVDOUMvUDV6WS1G RS03QVY3OGt6YnpYODctanAwUG53Lm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgI8czA8BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFAMDASlAAwMAKbADAwApxwMD AprsMA0EAgACMAcDBQAgAUK4MA0GCSqGSIb3DQEBCwUAA4IBAQBIK39DTVY7s2vu FlAkigdwGStRVforDDONDBcQK/Sffb/59A94MQz5yamy4eXt9xUO9S58D119V88D ZjX9UI1uWGxpd6JBk5D6mwvhKu2F8jhzW1IyLkVehfDFFrFq2TM/liB0SIo0unc8 Z4Ft9iV8SDPd4iQKu6vVRYMJD8HLgXh6K9Tr3/cNW6Q/bqM+14TU75YROyAwdWrg ux7KUcYYiklp3p8modEs5xAzKPJzy2pcLmqmsFQlsDdGA7v2pRbFy28cVHCCf7Rv tQ1m8J7yn12yrCLF79eto4AVjRSTj+ReahfvAz5Yu+5YHsgS74kurGYXKcSh1eJQ JCcko2TB -----END CERTIFICATE-----Generated at Sun Jan 25 04:16:56 2026 by rpki-client