This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer File: Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer (raw, json) Hash identifier: 33B/GcOI/kB8oNccO6PU+VaMRX0J7Z2JNTHZffRzqDI= Subject key identifier: 41:BE:93:66:6A:A3:C8:89:C6:A9:ED:25:AF:FF:6B:86:5C:81:E8:0A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CDB Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:39:44 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 41.76.0.0/21 IP: 41.77.32.0/21 IP: 196.40.112.0/20 IP: 197.242.160.0/20 IP: 2c0f:fb90::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15579 (0x3cdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:39:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FDB6DAF, serialNumber=41BE93666AA3C889C6A9ED25AFFF6B865C81E80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:0a:1f:36:5d:38:ae:0e:ee:55:fa:c7:58: 78:b0:f0:eb:04:51:03:76:64:be:91:d7:fa:45:77: 1c:fd:60:97:78:af:46:b1:3d:43:c4:b5:15:cb:1b: 82:77:b6:7c:0e:c0:37:11:4c:c5:0f:35:cd:c6:8e: 35:0b:24:bb:01:02:e1:4c:d0:83:e3:25:51:70:d3: ed:cf:02:54:c1:f7:e4:ba:96:67:1d:b1:6a:b7:16: 5f:95:c3:c8:ed:f8:f7:be:41:2c:ed:71:b6:c3:e1: 23:23:78:be:1b:d0:40:e2:e0:8e:52:ea:be:ea:52: 0c:9d:26:b7:93:2f:76:46:8b:a8:f2:48:fb:a4:5f: 6f:df:d8:cf:b0:ca:eb:d7:98:60:36:01:3b:18:13: 93:24:b2:ea:1b:1f:41:fb:89:31:72:ce:d7:f2:d2: 6a:80:fb:22:1d:97:12:a8:72:3e:df:11:10:98:64: 4f:dc:c5:90:c5:43:a8:76:c4:de:b2:f8:e5:8b:20: 85:3f:ec:73:d6:8a:68:f4:0a:32:d1:1d:df:4c:be: e4:cf:64:a1:e6:27:7f:22:67:65:26:2a:90:af:3e: 49:35:ba:c0:86:c5:97:37:00:c6:ea:9a:cf:c9:8d: 2f:a4:00:c8:7e:05:38:7c:71:82:d9:a9:8b:00:1e: ac:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BE:93:66:6A:A3:C8:89:C6:A9:ED:25:AF:FF:6B:86:5C:81:E8:0A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft sbgp-ipAddrBlock: critical IPv4: 41.76.0.0/21 41.77.32.0/21 196.40.112.0/20 197.242.160.0/20 IPv6: 2c0f:fb90::/32 Signature Algorithm: sha256WithRSAEncryption af:0c:94:36:b8:21:2e:01:0e:bb:52:c1:ef:df:f6:a8:0c:7b: bb:bb:1a:20:62:4b:b4:49:26:50:33:82:22:9c:dc:56:1c:dc: 6e:3f:83:9e:4a:f2:ba:97:ac:3a:96:ea:3d:5f:73:7f:6c:db: 59:74:00:c5:5e:2b:9c:39:d4:2f:8a:d1:d7:46:8d:6f:1f:7b: a8:fa:b0:e7:4a:0b:2b:07:2a:ca:0f:ee:92:17:fe:44:57:24: 7a:08:e9:f9:6c:00:96:b6:be:6d:dd:4c:be:3e:2d:9c:9e:33: 17:05:b7:53:12:f1:98:30:2c:7f:6e:88:e3:4d:23:3d:8d:ba: 03:92:d2:0c:d0:c5:3f:92:5b:a7:5b:fd:43:ff:19:89:aa:f7: d7:a7:64:f9:4e:b1:10:c1:6a:0c:8d:42:14:72:01:41:36:d0: 4b:4a:03:05:83:f5:11:8b:15:13:b1:86:0b:df:6f:12:e6:8f: c8:f3:5c:fe:8c:da:a8:e6:cb:2e:d9:21:3f:90:b8:ba:87:9c: 7e:c8:0e:b7:4f:6d:a9:5a:ce:44:dc:b5:b7:f0:f3:68:1c:bc: 09:6c:41:bd:19:0e:58:e0:e8:f4:ff:6d:4a:cc:91:36:ab:4a: 7f:85:e0:31:55:78:5b:b2:fe:aa:ac:b6:4b:e2:04:b7:6e:4a: 60:d8:97:83 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgICPNswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzM5NDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkZEQjZEQUYxMTAvBgNVBAUTKDQxQkU5MzY2NkFBM0M4ODlDNkE5RUQy NUFGRkY2Qjg2NUM4MUU4MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJrwofNl04rg7uVfrHWHiw8OsEUQN2ZL6R1/pFdxz9YJd4r0axPUPEtRXLG4J3 tnwOwDcRTMUPNc3GjjULJLsBAuFM0IPjJVFw0+3PAlTB9+S6lmcdsWq3Fl+Vw8jt +Pe+QSztcbbD4SMjeL4b0EDi4I5S6r7qUgydJreTL3ZGi6jySPukX2/f2M+wyuvX mGA2ATsYE5MksuobH0H7iTFyztfy0mqA+yIdlxKocj7fERCYZE/cxZDFQ6h2xN6y +OWLIIU/7HPWimj0CjLRHd9MvuTPZKHmJ38iZ2UmKpCvPkk1usCGxZc3AMbqms/J jS+kAMh+BTh8cYLZqYsAHqxlAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUQb6TZmqj yInGqe0lr/9rhlyB6AowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGREI2RC8yMzdBN0JGMDgxNkUx MUVCQTQ3QTI5NUJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RkRCNkQvMjM3QTdCRjA4MTZFMTFFQkE0N0EyOTVCRjhBRUEyMjgvUWI2VFpt cWp5SW5HcWUwbHJfOXJobHlCNkFvLm1mdDBABggrBgEFBQcBBwEB/wQxMC8wHgQC AAEwGAMEAylMAAMEAylNIAMEBMQocAMEBMXyoDANBAIAAjAHAwUALA/7kDANBgkq hkiG9w0BAQsFAAOCAQEArwyUNrghLgEOu1LB79/2qAx7u7saIGJLtEkmUDOCIpzc Vhzcbj+DnkryupesOpbqPV9zf2zbWXQAxV4rnDnUL4rR10aNbx97qPqw50oLKwcq yg/ukhf+RFckegjp+WwAlra+bd1Mvj4tnJ4zFwW3UxLxmDAsf26I400jPY26A5LS DNDFP5Jbp1v9Q/8Ziar316dk+U6xEMFqDI1CFHIBQTbQS0oDBYP1EYsVE7GGC99v EuaPyPNc/ozaqObLLtkhP5C4uoecfsgOt09tqVrORNy1t/DzaBy8CWxBvRkOWODo 9P9tSsyRNqtKf4XgMVV4W7L+qqy2S+IEt25KYNiXgw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:41 2026 by rpki-client