This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer File: QOQ11_MUFa_OV9DelQm3hi-WClc.cer (raw, json) Hash identifier: tHcMjWzx9NAkT3RHiqOFxdnCOptiAEwVhewZgvpArWk= Subject key identifier: 40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E29 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:32:21 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37497 AS: 328832 IP: 154.66.176.0/20 IP: 197.148.64.0/21 IP: 2c0f:f9e8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15913 (0x3e29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:32:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36D5C19AF, serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bd:9d:86:46:a5:09:e9:06:a1:36:e7:0f:97: 79:70:ff:39:ae:0d:a5:b6:ab:fb:5c:16:e4:f9:db: 66:ea:63:6b:bc:12:22:7c:11:84:1c:59:85:36:e9: b3:e2:38:1a:61:9a:b1:aa:3d:e9:f3:93:a7:da:7d: b3:3c:88:59:4d:11:90:a2:0e:34:5c:8d:ab:2c:63: a8:fa:cc:66:36:d6:37:58:fd:5f:c9:2c:42:63:ad: f9:c4:4c:11:4b:24:df:c9:ef:45:43:0b:f9:fd:2e: ac:9b:0b:a8:8a:4b:af:7c:16:de:fe:76:0e:f5:ad: 57:9b:70:b4:55:16:9b:24:c0:b4:f6:97:c4:56:5d: ac:cc:61:cb:87:59:b6:17:a0:18:7b:a8:ed:16:cb: e8:eb:3a:15:3d:ac:b6:4b:5f:a8:7e:d5:34:99:67: 04:f1:7a:7b:af:63:00:07:aa:7c:0a:c0:3d:49:6d: 39:44:83:39:7a:e9:6a:6e:31:3f:d6:0f:fc:ff:55: 04:07:6e:c6:5b:10:86:c9:a3:a8:e2:f6:32:5d:2c: a2:1b:1a:24:60:df:61:de:6f:17:48:7a:37:9f:c4: 53:45:bc:aa:41:80:c6:0d:f8:f7:fa:ff:55:68:45: 95:06:d5:de:f8:8a:a3:16:f5:b7:e9:a5:62:9e:af: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37497 328832 sbgp-ipAddrBlock: critical IPv4: 154.66.176.0/20 197.148.64.0/21 IPv6: 2c0f:f9e8::/32 Signature Algorithm: sha256WithRSAEncryption 0d:89:4f:54:5a:bb:46:3c:0e:68:e4:cb:f2:3c:9d:55:52:cb: 34:47:f5:e8:07:74:e7:53:d5:37:f4:91:05:32:a5:65:50:de: 30:cb:11:1a:c7:6c:f7:b9:34:ea:0d:cd:75:47:c8:df:cd:ab: d8:a9:97:96:ee:ef:79:18:bb:e5:81:a6:92:9d:e1:28:91:37: 37:08:68:ed:42:cf:30:4e:0d:e0:33:f9:ae:06:76:1c:19:c6: 98:bd:0c:89:a2:ed:76:d7:8b:ec:8d:27:a8:c9:17:7c:95:c6: 12:fc:cd:81:76:79:36:fa:d2:f1:d6:59:c1:48:ae:51:93:6a: 48:b9:49:ef:e4:fd:ce:e9:89:7a:1d:08:d3:b4:53:7b:26:9f: eb:e3:0d:19:c4:b6:5c:58:02:29:59:1d:67:f4:02:31:5e:3d: 78:89:c0:56:fa:27:cf:35:a9:ae:ed:ac:b5:d1:a5:a0:2d:4d: 5d:a0:09:7c:8d:88:aa:fd:c7:98:e7:53:53:8c:63:33:28:de: f1:bd:8b:da:5a:e5:7e:3b:2c:df:10:b4:50:51:c9:fb:d3:8b: a2:9a:15:03:bc:f4:bf:39:1a:d8:41:7b:0e:a2:69:06:66:dd: af:29:82:23:a5:c7:4f:d1:4d:96:07:b2:40:ad:d4:9b:52:45: c6:98:ac:11 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgICPikwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDMyMjFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkQ1QzE5QUYxMTAvBgNVBAUTKDQwRTQzNUQ3RjMxNDE1QUZDRTU3RDBE RTk1MDlCNzg2MkY5NjBBNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUvZ2GRqUJ6QahNucPl3lw/zmuDaW2q/tcFuT522bqY2u8EiJ8EYQcWYU26bPi OBphmrGqPenzk6fafbM8iFlNEZCiDjRcjassY6j6zGY21jdY/V/JLEJjrfnETBFL JN/J70VDC/n9LqybC6iKS698Ft7+dg71rVebcLRVFpskwLT2l8RWXazMYcuHWbYX oBh7qO0Wy+jrOhU9rLZLX6h+1TSZZwTxenuvYwAHqnwKwD1JbTlEgzl66WpuMT/W D/z/VQQHbsZbEIbJo6ji9jJdLKIbGiRg32HebxdIejefxFNFvKpBgMYN+Pf6/1Vo RZUG1d74iqMW9bfppWKer/05AgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUQOQ11/MU Fa/OV9DelQm3hi+WClcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZENUMxOS82RDExQjcxNjdCQTcx MUU5QjA5MTU1M0NGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RDVDMTkvNkQxMUI3MTY3QkE3MTFFOUIwOTE1NTNDRjhBRUEyMjgvUU9RMTFf TVVGYV9PVjlEZWxRbTNoaS1XQ2xjLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAknkCAwUEgDA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBJpCsAMEA8WU QDANBAIAAjAHAwUALA/56DANBgkqhkiG9w0BAQsFAAOCAQEADYlPVFq7RjwOaOTL 8jydVVLLNEf16Ad051PVN/SRBTKlZVDeMMsRGsds97k06g3NdUfI382r2KmXlu7v eRi75YGmkp3hKJE3Nwho7ULPME4N4DP5rgZ2HBnGmL0MiaLtdteL7I0nqMkXfJXG EvzNgXZ5NvrS8dZZwUiuUZNqSLlJ7+T9zumJeh0I07RTeyaf6+MNGcS2XFgCKVkd Z/QCMV49eInAVvonzzWpru2stdGloC1NXaAJfI2Iqv3HmOdTU4xjMyje8b2L2lrl fjss3xC0UFHJ+9OLopoVA7z0vzka2EF7DqJpBmbdrymCI6XHT9FNlgeyQK3Um1JF xpisEQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:38 2026 by rpki-client