This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer File: T0jn6jDJibFdNjk3djVToH4WzY4.cer (raw, json) Hash identifier: y+6UYvCw4pXdCHH9gl3T5F26HZ6dYfu2IEEljknbu2k= Subject key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B2D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:37:11 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328866 IP: 41.92.128.0/21 IP: 41.92.152.0/21 IP: 41.92.180.0 -- 41.92.187.255 IP: 41.92.196.0 -- 41.92.203.255 IP: 41.92.208.0 -- 41.92.219.255 IP: 41.92.224.0/24 IP: 41.92.248.0/21 IP: 41.190.224.0/22 IP: 41.217.148.0/22 IP: 2c0f:7c40::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15149 (0x3b2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:37:11 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F367BA6AAF, serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:7b:93:90:83:2e:f8:a7:2c:df:09:c4:f3: ba:13:2a:ea:a6:d5:02:03:a1:5b:30:52:23:23:4b: 51:d1:4f:4b:2f:f1:72:59:32:2c:f6:b2:43:cb:98: 2c:de:e6:dc:21:7a:ee:69:50:d7:fa:59:ea:52:03: f2:fa:70:7f:93:23:a7:ec:93:da:3d:a2:d0:67:a3: f6:ae:7b:fe:3c:28:cf:69:fd:70:8a:2d:d3:9a:7b: ff:be:70:b9:72:a5:3f:2b:75:d1:2a:2f:16:e7:3c: 63:0f:14:3c:90:c0:ae:bd:28:e5:84:f3:82:7a:5b: 77:f3:db:91:48:89:dc:65:c9:26:ba:61:6d:08:b0: 8e:18:44:cf:84:b9:95:ae:8b:83:a8:2f:8a:1e:5d: 51:24:55:a2:7f:ca:e7:8f:cd:95:18:3e:15:c2:85: 7e:c3:6c:aa:24:ed:ce:d5:56:df:c7:41:4a:78:04: 69:e4:a6:33:86:8b:2e:76:89:46:3f:ae:6a:ce:4a: 41:14:aa:7b:fe:5c:9f:33:d7:67:6e:d0:7a:bf:25: c9:d4:09:c6:b0:04:16:cc:b0:3a:8b:54:71:09:d9: 76:d5:d1:a4:55:eb:ef:cc:c1:c4:74:05:a3:99:18: ba:92:ab:7f:4f:35:fc:8a:21:4e:a7:d8:71:bc:10: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328866 sbgp-ipAddrBlock: critical IPv4: 41.92.128.0/21 41.92.152.0/21 41.92.180.0-41.92.187.255 41.92.196.0-41.92.203.255 41.92.208.0-41.92.219.255 41.92.224.0/24 41.92.248.0/21 41.190.224.0/22 41.217.148.0/22 IPv6: 2c0f:7c40::/32 Signature Algorithm: sha256WithRSAEncryption af:84:2d:a2:25:9e:89:8f:e1:6e:ee:9e:c8:1f:13:8a:76:7e: da:21:f5:29:a8:59:62:65:e5:bc:20:7f:cb:a5:17:00:bf:91: 53:85:df:cb:8b:5c:67:9a:84:a6:6b:2d:58:b5:e9:35:c0:05: 8e:bb:98:72:85:90:9d:09:3e:e6:df:bb:d2:ce:b4:12:25:db: 90:44:3a:98:81:c8:01:ba:15:28:ad:7b:8b:d8:ca:32:35:db: 75:9c:fc:25:e2:22:e7:4f:a1:b8:a9:58:ca:80:98:90:4e:af: 38:57:c6:d7:d0:07:63:22:97:e6:13:0e:55:ff:d5:3f:6f:5f: 5d:6d:c1:1f:0c:b2:a7:7d:11:c7:b3:65:4e:c1:0a:e2:3e:6c: 6a:e8:d4:fc:c4:d3:8f:44:ae:06:e6:ad:57:51:b3:6b:de:95: d7:bf:6a:6c:02:9f:36:12:76:57:f0:21:d7:7f:42:29:c6:9e: 60:5f:40:12:0e:cb:d3:6a:c3:c4:b9:23:08:a3:ec:2c:c9:0e: c9:da:c1:4b:ec:a7:3a:e2:b2:5e:a3:85:79:87:da:6d:5d:6e: dd:25:56:41:4b:51:ff:82:5b:83:1d:1f:48:24:91:c2:11:cc: 6f:b8:6c:df:e8:e0:fd:5c:70:fa:a9:d7:49:25:ef:57:30:ff: a3:d0:fa:71 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgICOy0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjM3MTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjdCQTZBQUYxMTAvBgNVBAUTKDRGNDhFN0VBMzBDOTg5QjE1RDM2Mzkz Nzc2MzU1M0EwN0UxNkNEOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdOHuTkIMu+Kcs3wnE87oTKuqm1QIDoVswUiMjS1HRT0sv8XJZMiz2skPLmCze 5twheu5pUNf6WepSA/L6cH+TI6fsk9o9otBno/aue/48KM9p/XCKLdOae/++cLly pT8rddEqLxbnPGMPFDyQwK69KOWE84J6W3fz25FIidxlySa6YW0IsI4YRM+EuZWu i4OoL4oeXVEkVaJ/yuePzZUYPhXChX7DbKok7c7VVt/HQUp4BGnkpjOGiy52iUY/ rmrOSkEUqnv+XJ8z12du0Hq/JcnUCcawBBbMsDqLVHEJ2XbV0aRV6+/MwcR0BaOZ GLqSq39PNfyKIU6n2HG8EFZNAgMBAAGjggNiMIIDXjAdBgNVHQ4EFgQUT0jn6jDJ ibFdNjk3djVToH4WzY4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3QkE2QS8wRjRBMzdGNEVDRDkx MUVFOUY3MzJDNjc3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2N0JBNkEvMEY0QTM3RjRFQ0Q5MTFFRTlGNzMyQzY3Nzc1NDEyRTYvVDBqbjZq REppYkZkTmprM2RqVlRvSDRXelk0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBKIwdgYIKwYBBQUHAQcBAf8EZzBlMFQEAgABME4DBAMpXIADBAMpXJgwDAME AilctAMEAilcuDAMAwQCKVzEAwQCKVzIMAwDBAQpXNADBAIpXNgDBAApXOADBAMp XPgDBAIpvuADBAIp2ZQwDQQCAAIwBwMFACwPfEAwDQYJKoZIhvcNAQELBQADggEB AK+ELaIlnomP4W7unsgfE4p2ftoh9SmoWWJl5bwgf8ulFwC/kVOF38uLXGeahKZr LVi16TXABY67mHKFkJ0JPubfu9LOtBIl25BEOpiByAG6FSite4vYyjI123Wc/CXi IudPobipWMqAmJBOrzhXxtfQB2Mil+YTDlX/1T9vX11twR8Msqd9EcezZU7BCuI+ bGro1PzE049ErgbmrVdRs2velde/amwCnzYSdlfwIdd/QinGnmBfQBIOy9Nqw8S5 Iwij7CzJDsnawUvspzrisl6jhXmH2m1dbt0lVkFLUf+CW4MdH0gkkcIRzG+4bN/o 4P1ccPqp10kl71cw/6PQ+nE= -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:14 2026 by rpki-client