This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer File: RtQFVYABqLApuWqxNAbWmh3XQEU.cer (raw, json) Hash identifier: 8CFNVRc4UrqXzRKRh6GkF07pYupPfZJrYmKKmGaZiQk= Subject key identifier: 46:D4:05:55:80:01:A8:B0:29:B9:6A:B1:34:06:D6:9A:1D:D7:40:45 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 37B8 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:13 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 36974 AS: 36995 IP: 41.67.64.0/20 IP: 41.67.88.0 -- 41.67.127.255 IP: 41.73.16.0/20 IP: 41.74.96.0/20 IP: 41.75.16.0 -- 41.75.47.255 IP: 41.76.136.0/21 IP: 41.76.160.0/21 IP: 41.76.232.0/21 IP: 41.77.160.0/21 IP: 41.77.216.0/22 IP: 41.77.248.0/21 IP: 41.78.12.0/22 IP: 41.78.44.0/22 IP: 41.78.68.0/22 IP: 41.78.92.0/22 IP: 41.78.104.0/22 IP: 41.78.132.0/22 IP: 41.78.144.0/22 IP: 41.78.152.0/22 IP: 41.78.160.0/22 IP: 41.78.176.0/21 IP: 41.78.236.0/22 IP: 41.79.0.0/22 IP: 41.79.12.0/22 IP: 41.79.84.0/22 IP: 41.79.100.0/22 IP: 41.79.112.0/22 IP: 41.79.140.0/22 IP: 41.84.160.0/19 IP: 41.87.32.0/19 IP: 41.139.64.0/18 IP: 41.189.96.0 -- 41.189.159.255 IP: 41.190.160.0 -- 41.190.223.255 IP: 41.190.240.0/22 IP: 41.190.252.0 -- 41.191.63.255 IP: 41.191.92.0/22 IP: 41.191.108.0 -- 41.191.115.255 IP: 41.191.208.0/22 IP: 41.202.96.0/19 IP: 41.205.160.0/19 IP: 41.206.64.0/19 IP: 41.206.224.0/19 IP: 41.207.224.0/22 IP: 41.209.128.0/18 IP: 41.211.192.0/18 IP: 41.215.192.0/20 IP: 41.215.224.0/21 IP: 41.216.0.0/19 IP: 41.216.240.0/20 IP: 41.217.196.0/22 IP: 41.217.208.0/22 IP: 41.217.248.0/21 IP: 41.219.192.0/18 IP: 41.221.112.0/20 IP: 41.222.80.0/21 IP: 41.223.0.0/22 IP: 41.223.12.0/22 IP: 41.223.68.0/22 IP: 41.223.188.0/22 IP: 41.223.208.0/22 IP: 41.242.132.0/22 IP: 41.242.176.0/20 IP: 41.245.0.0/17 IP: 102.22.100.0/22 IP: 102.136.0.0/14 IP: 105.235.0.0/17 IP: 154.0.144.0/21 IP: 154.65.56.0/22 IP: 154.66.96.0/22 IP: 154.66.116.0/22 IP: 154.66.212.0/22 IP: 154.71.32.0 -- 154.71.127.255 IP: 154.72.0.0/22 IP: 154.119.128.0/20 IP: 154.232.0.0/14 IP: 196.1.119.0/24 IP: 196.3.180.0/22 IP: 196.6.0.0/24 IP: 196.6.200.0/24 IP: 196.6.218.0/23 IP: 196.10.0.0/24 IP: 196.10.137.0/24 IP: 196.10.251.0/24 IP: 196.13.191.0/24 IP: 196.22.8.0/22 IP: 196.29.208.0/20 IP: 196.32.160.0/19 IP: 196.32.228.0/23 IP: 196.40.128.0/20 IP: 196.43.217.0/24 IP: 196.43.227.0/24 IP: 196.43.233.0/24 IP: 196.43.245.0/24 IP: 196.44.48.0/20 IP: 196.45.0.0/20 IP: 196.45.64.0/19 IP: 196.45.240.0/20 IP: 196.46.17.0/24 IP: 196.46.24.0/24 IP: 196.46.116.0/22 IP: 196.47.128.0/18 IP: 196.180.0.0/14 IP: 196.192.120.0/22 IP: 196.192.125.0 -- 196.192.139.255 IP: 196.200.208.0/20 IP: 196.201.0.0/24 IP: 196.201.12.0/22 IP: 196.201.160.0/19 IP: 196.201.248.0/21 IP: 196.216.171.0/24 IP: 196.216.184.0/22 IP: 196.216.204.0/24 IP: 196.216.214.0/24 IP: 196.216.244.0/24 IP: 196.216.254.0/24 IP: 196.223.11.0/24 IP: 196.223.26.0/24 IP: 196.223.46.0/24 IP: 197.148.192.0/19 IP: 197.149.132.0/22 IP: 197.149.140.0/22 IP: 197.149.152.0/22 IP: 197.149.164.0/22 IP: 197.149.172.0/22 IP: 197.155.208.0/20 IP: 197.155.240.0/21 IP: 197.157.236.0/22 IP: 197.157.248.0/22 IP: 197.159.224.0/19 IP: 197.214.120.0/21 IP: 197.215.224.0/20 IP: 197.220.32.0/19 IP: 197.231.212.0/22 IP: 197.231.224.0/22 IP: 197.231.240.0/22 IP: 197.234.228.0/22 IP: 197.234.248.0/21 IP: 197.239.192.0/18 IP: 197.242.208.0 -- 197.242.239.255 IP: 2c0e:7f80::/27 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14264 (0x37b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3619C8CAF, serialNumber=46D405558001A8B029B96AB13406D69A1DD74045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:8e:81:e9:c7:54:73:0a:ae:39:bd:70:c3: ec:de:a4:67:4b:5e:26:41:65:c3:20:64:ea:8b:9a: 07:c3:42:d6:1a:14:44:c1:ae:b2:46:bc:51:e9:be: 5f:f8:82:28:8a:23:f0:9d:66:a8:f8:5d:d2:3a:44: e0:72:35:b6:bb:ff:42:b6:ad:6f:c4:04:34:c0:40: a9:4e:77:98:02:67:03:fd:f9:00:3a:ab:7d:8b:f9: be:f3:d3:2c:94:fb:76:45:24:3d:77:8c:10:11:67: 76:78:e8:b6:c5:a1:5c:f4:3d:39:f6:00:fd:58:07: 89:fa:4e:ff:40:93:b2:f8:73:75:fa:3f:15:d9:03: 86:4c:79:49:39:c5:d1:61:d1:f6:a2:fb:cf:07:94: 18:8f:8c:99:50:15:3f:66:fc:5c:41:0f:7c:be:31: 01:92:5b:7e:51:c8:3e:a2:49:d1:0c:9d:b9:50:5c: 12:b2:3a:6b:46:b9:47:72:dc:fb:59:58:7c:02:0b: 07:ce:1b:87:b3:51:fd:f1:79:4c:53:29:b5:c2:c6: 68:04:59:5e:09:e4:64:dc:f6:2a:6e:21:69:1a:4d: 21:a5:20:16:82:e3:70:5f:20:4d:69:76:bc:ca:be: 87:79:44:4b:f6:02:c9:49:fc:9a:be:28:01:61:d8: a2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D4:05:55:80:01:A8:B0:29:B9:6A:B1:34:06:D6:9A:1D:D7:40:45 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 36974 36995 sbgp-ipAddrBlock: critical IPv4: 41.67.64.0/20 41.67.88.0-41.67.127.255 41.73.16.0/20 41.74.96.0/20 41.75.16.0-41.75.47.255 41.76.136.0/21 41.76.160.0/21 41.76.232.0/21 41.77.160.0/21 41.77.216.0/22 41.77.248.0/21 41.78.12.0/22 41.78.44.0/22 41.78.68.0/22 41.78.92.0/22 41.78.104.0/22 41.78.132.0/22 41.78.144.0/22 41.78.152.0/22 41.78.160.0/22 41.78.176.0/21 41.78.236.0/22 41.79.0.0/22 41.79.12.0/22 41.79.84.0/22 41.79.100.0/22 41.79.112.0/22 41.79.140.0/22 41.84.160.0/19 41.87.32.0/19 41.139.64.0/18 41.189.96.0-41.189.159.255 41.190.160.0-41.190.223.255 41.190.240.0/22 41.190.252.0-41.191.63.255 41.191.92.0/22 41.191.108.0-41.191.115.255 41.191.208.0/22 41.202.96.0/19 41.205.160.0/19 41.206.64.0/19 41.206.224.0/19 41.207.224.0/22 41.209.128.0/18 41.211.192.0/18 41.215.192.0/20 41.215.224.0/21 41.216.0.0/19 41.216.240.0/20 41.217.196.0/22 41.217.208.0/22 41.217.248.0/21 41.219.192.0/18 41.221.112.0/20 41.222.80.0/21 41.223.0.0/22 41.223.12.0/22 41.223.68.0/22 41.223.188.0/22 41.223.208.0/22 41.242.132.0/22 41.242.176.0/20 41.245.0.0/17 102.22.100.0/22 102.136.0.0/14 105.235.0.0/17 154.0.144.0/21 154.65.56.0/22 154.66.96.0/22 154.66.116.0/22 154.66.212.0/22 154.71.32.0-154.71.127.255 154.72.0.0/22 154.119.128.0/20 154.232.0.0/14 196.1.119.0/24 196.3.180.0/22 196.6.0.0/24 196.6.200.0/24 196.6.218.0/23 196.10.0.0/24 196.10.137.0/24 196.10.251.0/24 196.13.191.0/24 196.22.8.0/22 196.29.208.0/20 196.32.160.0/19 196.32.228.0/23 196.40.128.0/20 196.43.217.0/24 196.43.227.0/24 196.43.233.0/24 196.43.245.0/24 196.44.48.0/20 196.45.0.0/20 196.45.64.0/19 196.45.240.0/20 196.46.17.0/24 196.46.24.0/24 196.46.116.0/22 196.47.128.0/18 196.180.0.0/14 196.192.120.0/22 196.192.125.0-196.192.139.255 196.200.208.0/20 196.201.0.0/24 196.201.12.0/22 196.201.160.0/19 196.201.248.0/21 196.216.171.0/24 196.216.184.0/22 196.216.204.0/24 196.216.214.0/24 196.216.244.0/24 196.216.254.0/24 196.223.11.0/24 196.223.26.0/24 196.223.46.0/24 197.148.192.0/19 197.149.132.0/22 197.149.140.0/22 197.149.152.0/22 197.149.164.0/22 197.149.172.0/22 197.155.208.0/20 197.155.240.0/21 197.157.236.0/22 197.157.248.0/22 197.159.224.0/19 197.214.120.0/21 197.215.224.0/20 197.220.32.0/19 197.231.212.0/22 197.231.224.0/22 197.231.240.0/22 197.234.228.0/22 197.234.248.0/21 197.239.192.0/18 197.242.208.0-197.242.239.255 IPv6: 2c0e:7f80::/27 Signature Algorithm: sha256WithRSAEncryption 2b:dd:43:04:71:7e:54:47:53:70:d1:29:f2:b3:4b:eb:8e:65: 24:c1:90:f9:c4:bc:e6:d4:5d:a5:0d:a9:78:c1:24:49:00:15: d0:ae:39:23:55:87:9c:d9:bf:04:d8:96:9f:37:8d:c1:38:e2: 13:3b:5b:5b:7b:2d:72:3b:29:df:28:4f:d6:30:ea:63:1f:f0: 1d:71:e1:03:05:98:cb:f6:2d:49:bb:10:77:8a:62:45:b6:68: 25:68:bd:ce:06:5b:63:fc:a3:ee:fb:18:5c:7e:6c:2f:da:9e: 51:28:07:7e:b2:e4:c0:de:c5:86:ad:2f:86:39:0c:67:64:5f: 37:72:12:61:04:ad:d1:ea:c3:7b:f5:23:f5:49:1b:78:4f:6a: 65:c6:17:21:aa:da:c3:b7:45:31:bb:a4:3c:5c:ce:0b:25:ff: dd:de:ab:32:92:fd:48:8f:d7:68:46:9c:22:92:52:67:0b:a3: 7b:29:94:2a:dd:49:9c:81:67:2d:2a:87:36:b0:fe:5c:45:3b: 98:98:72:7f:53:74:97:71:a0:9d:97:56:9a:5e:8c:96:6f:67: ae:b7:b6:f4:2a:21:bd:e5:f9:c9:82:d9:19:2d:bc:99:b5:71: 6b:65:46:51:f1:43:52:3e:13:45:45:9c:16:02:27:8f:b4:01: 35:13:3f:a2 -----BEGIN CERTIFICATE----- MIIJtTCCCJ2gAwIBAgICN7gwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDE4MTNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE5QzhDQUYxMTAvBgNVBAUTKDQ2RDQwNTU1ODAwMUE4QjAyOUI5NkFC MTM0MDZENjlBMURENzQwNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHhY6B6cdUcwquOb1ww+zepGdLXiZBZcMgZOqLmgfDQtYaFETBrrJGvFHpvl/4 giiKI/CdZqj4XdI6ROByNba7/0K2rW/EBDTAQKlOd5gCZwP9+QA6q32L+b7z0yyU +3ZFJD13jBARZ3Z46LbFoVz0PTn2AP1YB4n6Tv9Ak7L4c3X6PxXZA4ZMeUk5xdFh 0fai+88HlBiPjJlQFT9m/FxBD3y+MQGSW35RyD6iSdEMnblQXBKyOmtGuUdy3PtZ WHwCCwfOG4ezUf3xeUxTKbXCxmgEWV4J5GTc9ipuIWkaTSGlIBaC43BfIE1pdrzK vod5REv2AslJ/Jq+KAFh2KLNAgMBAAGjggaqMIIGpjAdBgNVHQ4EFgQURtQFVYAB qLApuWqxNAbWmh3XQEUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxOUM4Qy9DM0UxMEFGQzVGREEx MUVGOEVFNTlBQTk3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTlDOEMvQzNFMTBBRkM1RkRBMTFFRjhFRTU5QUE5NzYyRTk1MUEvUnRRRlZZ QUJxTEFwdVdxeE5BYldtaDNYUUVVLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAkG4CAwCQgzCCA7cGCCsGAQUFBwEHAQH/BIIDpjCCA6IwggOPBAIAATCCA4cD BAQpQ0AwDAMEAylDWAMEBylDAAMEBClJEAMEBClKYDAMAwQEKUsQAwQEKUsgAwQD KUyIAwQDKUygAwQDKUzoAwQDKU2gAwQCKU3YAwQDKU34AwQCKU4MAwQCKU4sAwQC KU5EAwQCKU5cAwQCKU5oAwQCKU6EAwQCKU6QAwQCKU6YAwQCKU6gAwQDKU6wAwQC KU7sAwQCKU8AAwQCKU8MAwQCKU9UAwQCKU9kAwQCKU9wAwQCKU+MAwQFKVSgAwQF KVcgAwQGKYtAMAwDBAUpvWADBAUpvYAwDAMEBSm+oAMEBSm+wAMEAim+8DAMAwQC Kb78AwQGKb8AAwQCKb9cMAwDBAIpv2wDBAIpv3ADBAIpv9ADBAUpymADBAUpzaAD BAUpzkADBAUpzuADBAIpz+ADBAYp0YADBAYp08ADBAQp18ADBAMp1+ADBAUp2AAD BAQp2PADBAIp2cQDBAIp2dADBAMp2fgDBAYp28ADBAQp3XADBAMp3lADBAIp3wAD BAIp3wwDBAIp30QDBAIp37wDBAIp39ADBAIp8oQDBAQp8rADBAcp9QADBAJmFmQD AwJmiAMEB2nrAAMEA5oAkAMEAppBOAMEAppCYAMEAppCdAMEAppC1DAMAwQFmkcg AwQHmkcAAwQCmkgAAwQEmneAAwMCmugDBADEAXcDBALEA7QDBADEBgADBADEBsgD BAHEBtoDBADECgADBADECokDBADECvsDBADEDb8DBALEFggDBATEHdADBAXEIKAD BAHEIOQDBATEKIADBADEK9kDBADEK+MDBADEK+kDBADEK/UDBATELDADBATELQAD BAXELUADBATELfADBADELhEDBADELhgDBALELnQDBAbEL4ADAwLEtAMEAsTAeDAM AwQAxMB9AwQCxMCIAwQExMjQAwQAxMkAAwQCxMkMAwQFxMmgAwQDxMn4AwQAxNir AwQCxNi4AwQAxNjMAwQAxNjWAwQAxNj0AwQAxNj+AwQAxN8LAwQAxN8aAwQAxN8u AwQFxZTAAwQCxZWEAwQCxZWMAwQCxZWYAwQCxZWkAwQCxZWsAwQExZvQAwQDxZvw AwQCxZ3sAwQCxZ34AwQFxZ/gAwQDxdZ4AwQExdfgAwQFxdwgAwQCxefUAwQCxefg AwQCxefwAwQCxerkAwQDxer4AwQGxe/AMAwDBATF8tADBATF8uAwDQQCAAIwBwMF BSwOf4AwDQYJKoZIhvcNAQELBQADggEBACvdQwRxflRHU3DRKfKzS+uOZSTBkPnE vObUXaUNqXjBJEkAFdCuOSNVh5zZvwTYlp83jcE44hM7W1t7LXI7Kd8oT9Yw6mMf 8B1x4QMFmMv2LUm7EHeKYkW2aCVovc4GW2P8o+77GFx+bC/anlEoB36y5MDexYat L4Y5DGdkXzdyEmEErdHqw3v1I/VJG3hPamXGFyGq2sO3RTG7pDxczgsl/93eqzKS /UiP12hGnCKSUmcLo3splCrdSZyBZy0qhzaw/lxFO5iYcn9TdJdxoJ2XVppejJZv Z663tvQqIb3l+cmC2RktvJm1cWtlRlHxQ1I+E0VFnBYCJ4+0ATUTP6I= -----END CERTIFICATE-----Generated at Sun Jan 25 04:21:19 2026 by rpki-client