This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer File: SFHRgvoW_XO9dxRU8g2Z_JWGIF8.cer (raw, json) Hash identifier: J7/Clzb6dcoEP/UUkKM/d9PAMWWbyMEfy098Jr7iJxs= Subject key identifier: 48:51:D1:82:FA:16:FD:73:BD:77:14:54:F2:0D:99:FC:95:86:20:5F Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B3F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:39:59 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37532 IP: 41.63.0.0/18 IP: 2c0f:f670::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15167 (0x3b3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:39:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F367DA9BAF, serialNumber=4851D182FA16FD73BD771454F20D99FC9586205F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:06:cc:3f:4d:11:58:c7:97:cb:d2:c3:d6: 16:a1:20:79:6c:1b:05:38:2a:d9:4e:11:33:3a:9b: 10:07:94:10:b8:ac:dc:de:26:72:5c:96:99:92:72: 1a:3d:f2:40:b6:09:b4:bb:8e:46:e0:50:c3:21:93: 80:3b:53:ec:8a:fe:a1:cf:44:b3:fc:9c:5f:21:ea: 54:47:b0:1a:23:1c:9c:cb:4c:48:53:cb:e2:7f:a6: a4:bb:0d:84:24:25:2d:29:c7:bd:6b:04:ef:fc:20: 5e:8e:cb:3d:d3:d4:d3:25:d5:63:69:66:36:38:18: da:56:4e:08:b7:e8:ce:c8:fc:94:27:04:04:77:6b: c6:e5:d6:0b:72:58:4d:d3:b5:05:fc:cf:92:ed:8b: 20:97:94:68:cf:e6:a1:c8:4b:f6:43:97:93:a3:a4: 7d:e2:f9:df:a8:e3:07:06:b4:c2:43:e8:06:2a:61: fb:0e:65:88:52:7c:bf:7a:5e:26:a0:cb:1d:14:82: 9b:f6:1a:d6:c4:9c:68:03:d6:16:66:00:e8:1f:61: c2:66:ba:ed:ae:d9:b2:71:31:99:5c:37:96:7e:69: e9:3f:99:c6:61:a4:95:73:90:8b:67:7a:6c:1f:20: a2:90:f6:d4:85:05:ef:16:6b:4b:d8:9b:65:9d:b0: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:51:D1:82:FA:16:FD:73:BD:77:14:54:F2:0D:99:FC:95:86:20:5F X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/89B3558A964911ED8DA75EF4F1222468/SFHRgvoW_XO9dxRU8g2Z_JWGIF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37532 sbgp-ipAddrBlock: critical IPv4: 41.63.0.0/18 IPv6: 2c0f:f670::/32 Signature Algorithm: sha256WithRSAEncryption 58:e0:e6:43:ab:50:3e:de:95:77:3c:1e:f7:62:83:66:c5:58: 51:d6:d1:de:3f:a6:72:a7:4d:f1:ff:29:51:9a:63:94:cc:dd: be:ec:2d:8c:2d:3f:b9:2c:dd:36:5a:65:c8:d9:74:67:be:ad: 9a:87:29:f5:25:4f:d5:e8:74:45:7e:b4:58:68:45:49:e6:2b: 30:cc:aa:13:c7:d2:5a:77:8c:ae:ef:52:86:62:9b:18:06:15: 1d:7f:ae:05:58:35:5f:c0:f7:d7:04:5e:73:57:fe:65:4c:41: f9:d4:83:8e:db:27:40:e2:6c:02:52:20:48:5e:74:a3:3b:19: 26:26:07:0a:e3:51:31:65:c5:9b:74:52:3c:21:8f:81:f1:b6: 20:ee:42:55:1e:33:85:b6:0f:39:c8:e9:14:29:78:95:ac:a5: a9:d3:46:b4:a5:e2:a5:df:28:93:bf:88:29:f3:33:09:3c:63: 17:eb:1e:1d:02:91:1e:4c:36:87:28:f7:c0:20:09:db:81:d2: 8f:13:4d:bb:be:b0:ce:16:98:c8:46:cd:0b:7d:4f:ab:34:5e: 5d:84:81:ea:b9:e8:ff:3f:46:fc:7a:ff:dd:a0:fd:48:15:4e: 46:6f:58:09:41:ca:74:21:cc:0b:5a:4d:e5:18:c9:ef:7e:52: 18:69:bf:b9 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOz8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjM5NTlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjdEQTlCQUYxMTAvBgNVBAUTKDQ4NTFEMTgyRkExNkZENzNCRDc3MTQ1 NEYyMEQ5OUZDOTU4NjIwNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLKAbMP00RWMeXy9LD1hahIHlsGwU4KtlOETM6mxAHlBC4rNzeJnJclpmScho9 8kC2CbS7jkbgUMMhk4A7U+yK/qHPRLP8nF8h6lRHsBojHJzLTEhTy+J/pqS7DYQk JS0px71rBO/8IF6Oyz3T1NMl1WNpZjY4GNpWTgi36M7I/JQnBAR3a8bl1gtyWE3T tQX8z5LtiyCXlGjP5qHIS/ZDl5OjpH3i+d+o4wcGtMJD6AYqYfsOZYhSfL96Xiag yx0Ugpv2GtbEnGgD1hZmAOgfYcJmuu2u2bJxMZlcN5Z+aek/mcZhpJVzkItnemwf IKKQ9tSFBe8Wa0vYm2WdsNSnAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUSFHRgvoW /XO9dxRU8g2Z/JWGIF8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3REE5Qi84OUIzNTU4QTk2NDkx MUVEOERBNzVFRjRGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2N0RBOUIvODlCMzU1OEE5NjQ5MTFFRDhEQTc1RUY0RjEyMjI0NjgvU0ZIUmd2 b1dfWE85ZHhSVThnMlpfSldHSUY4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkpwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAYpPwAwDQQCAAIwBwMF ACwP9nAwDQYJKoZIhvcNAQELBQADggEBAFjg5kOrUD7elXc8Hvdig2bFWFHW0d4/ pnKnTfH/KVGaY5TM3b7sLYwtP7ks3TZaZcjZdGe+rZqHKfUlT9XodEV+tFhoRUnm KzDMqhPH0lp3jK7vUoZimxgGFR1/rgVYNV/A99cEXnNX/mVMQfnUg47bJ0DibAJS IEhedKM7GSYmBwrjUTFlxZt0Ujwhj4HxtiDuQlUeM4W2DznI6RQpeJWspanTRrSl 4qXfKJO/iCnzMwk8YxfrHh0CkR5MNoco98AgCduB0o8TTbu+sM4WmMhGzQt9T6s0 Xl2Egeq56P8/Rvx6/92g/UgVTkZvWAlBynQhzAtaTeUYye9+Uhhpv7k= -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:25 2026 by rpki-client