This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer File: VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer (raw, json) Hash identifier: AjBTGrsKfT9ljOFZLMk9ZvRswyPDoUrPiinSaHSL4OU= Subject key identifier: 55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3798 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:11:57 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 41.136.0.0/16 IP: 41.212.128.0/17 IP: 196.27.64.0/19 IP: 196.192.96.0/20 IP: 197.224.0.0/14 IP: 2001:4290::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14232 (0x3798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:11:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3617560AF, serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:e1:76:2d:9d:8c:6c:da:12:bb:cb:29:f8: 1e:ef:53:68:44:ed:be:e9:33:4a:52:0c:ed:6b:2c: a5:63:94:81:b2:dc:c3:b7:41:f5:5c:75:a8:32:95: d8:80:0e:09:12:53:42:c5:b4:f5:ef:14:2e:c6:5a: 66:7a:ba:79:18:72:82:07:88:48:b6:77:78:fe:89: c4:e5:a1:2b:a8:f7:d3:fa:cd:93:56:17:44:96:c7: 06:02:21:05:5f:35:72:06:79:f9:32:d1:10:bd:31: 57:42:57:52:ee:31:4a:8f:08:40:df:79:17:3b:17: 38:30:5d:0f:9c:1a:d7:31:1d:5a:6b:0f:f8:ea:44: 03:f5:85:e3:d0:05:78:fd:f1:10:2b:c3:af:04:44: 58:08:7f:f3:94:96:fb:bf:92:1b:8e:1f:34:9c:06: 5e:88:e2:b1:59:32:c5:48:1f:eb:09:37:8f:5d:ac: 8e:f4:b4:b6:30:3d:55:62:fb:fc:9b:cc:23:93:0a: ee:ae:56:3a:1d:43:7a:99:53:1e:dc:89:da:f0:86: 48:ee:cb:86:ba:24:ea:d3:d0:ef:5a:a5:6d:16:9d: 1a:e2:f4:cd:4d:0c:f6:5f:41:54:7c:52:1b:e4:de: 13:3d:51:25:9b:46:29:da:1c:84:a7:f8:d9:04:00: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft sbgp-ipAddrBlock: critical IPv4: 41.136.0.0/16 41.212.128.0/17 196.27.64.0/19 196.192.96.0/20 197.224.0.0/14 IPv6: 2001:4290::/32 Signature Algorithm: sha256WithRSAEncryption 8d:1c:f3:1e:d3:d9:3d:55:d2:04:1a:e3:ae:95:1c:3a:5b:51: 0c:92:1c:02:a1:0a:61:de:9f:27:b7:f1:77:ed:5d:54:2b:35: c0:b5:d0:ab:32:57:90:cd:87:23:05:b0:37:aa:af:e8:b8:53: dc:b9:05:c0:54:24:67:57:c7:bd:74:dd:11:2d:86:74:66:4f: 64:d0:d4:59:68:3c:a3:f3:ac:08:6c:27:26:55:02:4c:95:ee: d4:60:eb:c7:ef:d7:62:65:6d:51:02:43:bf:82:4d:3f:3d:73: 91:0b:d7:23:b6:21:d5:c2:6a:65:e1:b0:c1:2d:be:65:dc:63: f2:02:5a:88:4e:4c:2c:30:47:5b:3a:83:e4:fd:15:ee:fe:94: 7d:19:3a:b1:90:b4:36:0d:c1:a6:96:ba:ea:d9:00:d6:de:8d: 89:c5:15:9c:c6:43:3d:c6:e4:16:d6:a0:ba:d9:9e:bc:5e:b7: 9b:68:f8:fa:da:4d:4c:4d:b9:14:4c:b9:1e:bd:7c:ce:91:24: cf:89:91:3b:e0:ff:59:52:1b:6f:42:37:0d:6a:43:97:ae:e4: 79:62:a1:db:2d:6c:ff:a5:4a:34:b2:75:37:c2:b9:92:d6:47: 91:66:ed:ed:6b:60:0c:8e:31:aa:71:1d:6c:07:ba:62:ba:4c: 4b:75:ed:20 -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgICN5gwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDExNTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE3NTYwQUYxMTAvBgNVBAUTKDU1OTYwOEYxOTA1QzE3QjJDMUVCODg4 MTM0Q0MzODNDOEZENEVFRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsdeF2LZ2MbNoSu8sp+B7vU2hE7b7pM0pSDO1rLKVjlIGy3MO3QfVcdagyldiA DgkSU0LFtPXvFC7GWmZ6unkYcoIHiEi2d3j+icTloSuo99P6zZNWF0SWxwYCIQVf NXIGefky0RC9MVdCV1LuMUqPCEDfeRc7FzgwXQ+cGtcxHVprD/jqRAP1hePQBXj9 8RArw68ERFgIf/OUlvu/khuOHzScBl6I4rFZMsVIH+sJN49drI70tLYwPVVi+/yb zCOTCu6uVjodQ3qZUx7cidrwhkjuy4a6JOrT0O9apW0WnRri9M1NDPZfQVR8Uhvk 3hM9USWbRinaHISn+NkEAHYPAgMBAAGjggMUMIIDEDAdBgNVHQ4EFgQUVZYI8ZBc F7LB64iBNMw4PI/U7vQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNzU2MC8zMEM0NTQyQ0YyNTkx MUVDOTBEMDI5QzJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTc1NjAvMzBDNDU0MkNGMjU5MTFFQzkwRDAyOUMyRjEyMjI0NjgvVlpZSTha QmNGN0xCNjRpQk5NdzRQSV9VN3ZRLm1mdDBEBggrBgEFBQcBBwEB/wQ1MDMwIgQC AAEwHAMDACmIAwQHKdSAAwQFxBtAAwQExMBgAwMCxeAwDQQCAAIwBwMFACABQpAw DQYJKoZIhvcNAQELBQADggEBAI0c8x7T2T1V0gQa466VHDpbUQySHAKhCmHenye3 8XftXVQrNcC10KsyV5DNhyMFsDeqr+i4U9y5BcBUJGdXx7103REthnRmT2TQ1Flo PKPzrAhsJyZVAkyV7tRg68fv12JlbVECQ7+CTT89c5EL1yO2IdXCamXhsMEtvmXc Y/ICWohOTCwwR1s6g+T9Fe7+lH0ZOrGQtDYNwaaWuurZANbejYnFFZzGQz3G5BbW oLrZnrxet5to+PraTUxNuRRMuR69fM6RJM+JkTvg/1lSG29CNw1qQ5eu5Hliodst bP+lSjSydTfCuZLWR5Fm7e1rYAyOMapxHWwHumK6TEt17SA= -----END CERTIFICATE-----Generated at Sun Jan 25 04:17:42 2026 by rpki-client