This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer File: WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer (raw, json) Hash identifier: w2k7EVp78LmH7mIkxpTcRjIJDJppX/NCstlSrm17ve4= Subject key identifier: 5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 36D4 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Sat 15 Nov 2025 00:00:18 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 37215 AS: 329663 IP: 41.70.0.0/17 IP: 102.206.152.0/22 IP: 2c0e:7e80::/28 IP: 2c0f:4120::/32 IP: 2c0f:ea60::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14036 (0x36d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Nov 15 00:00:18 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36152D2AF, serialNumber=5A467BB4937EAC6BEFB96B4F4FE35BD7FD2A40FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:c1:ae:12:bc:1f:68:e5:1d:93:a5:e9:cb: 83:90:62:07:e8:11:00:6e:ed:dc:f5:a2:0d:02:5a: 01:d3:ef:66:22:c5:ce:0e:c0:d0:f9:23:90:f7:83: 81:ab:ea:f2:4d:71:4e:0e:2f:f0:fb:73:8b:5a:33: f4:89:af:02:c6:b7:7f:ae:c6:38:43:0e:53:db:7f: 61:7c:cc:53:ee:b5:25:79:bd:bc:98:0e:1e:0f:f3: c0:55:9f:4c:38:56:ce:34:27:f0:13:41:96:ac:08: 7c:9c:b9:35:8a:8a:c6:82:eb:17:5f:2d:77:f3:6c: 5f:63:dc:0d:4a:7c:b2:99:b5:7f:32:c4:09:29:8d: 9b:dd:25:bc:82:50:16:52:e5:3f:a4:aa:d4:90:7e: 2a:6e:b4:a7:6a:11:72:79:5a:02:a7:40:1d:98:43: 5d:23:14:cb:5a:79:5e:87:6c:4c:31:98:39:6b:34: c2:bb:23:13:bb:e6:13:86:a7:27:ef:ba:fc:61:1d: 9e:a1:af:5b:74:c9:7b:e1:c1:23:38:df:bb:4f:e6: bf:f6:2d:db:09:0d:1f:d9:b5:b4:1d:49:3a:b0:18: 4c:0e:12:95:65:16:ee:c7:fd:08:b4:85:f6:af:4e: 06:5d:33:b6:e6:2b:44:fd:91:c8:ce:52:f7:73:f0: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37215 329663 sbgp-ipAddrBlock: critical IPv4: 41.70.0.0/17 102.206.152.0/22 IPv6: 2c0e:7e80::/28 2c0f:4120::/32 2c0f:ea60::/32 Signature Algorithm: sha256WithRSAEncryption c0:9f:f3:58:9e:99:17:3d:87:0b:8d:77:b2:89:d7:41:c4:51: ad:2e:43:55:5b:c7:86:38:5e:09:00:5a:c8:02:78:cd:02:fc: 1d:b0:fb:ad:d4:a9:de:8b:57:a5:f1:c1:e4:77:f5:be:8e:26: 67:1b:c4:3e:15:ff:20:ea:dc:3f:c2:58:8a:ae:59:1e:a2:56: 38:e2:a7:32:3a:b4:91:2d:62:44:6b:bf:7b:09:11:76:95:89: a5:b0:f0:e7:db:8f:c2:43:d4:a3:b7:61:c4:7a:1b:43:f5:d9: de:df:f3:c6:2b:6d:1d:7f:f3:b6:9e:1e:18:55:de:fa:87:a9: 4c:32:cf:3e:fd:16:5e:87:9a:80:6e:a4:1d:44:32:b9:e9:69: 05:97:85:66:71:1d:84:32:ec:d8:75:92:95:06:60:a7:a2:4a: 2d:aa:4d:b1:68:72:b1:06:a7:8c:27:ec:ae:d6:79:54:a2:4f: 77:47:3d:24:1e:22:5d:a4:f3:05:27:3e:71:c5:6a:47:df:9b: 55:cd:62:91:b2:b6:62:91:c8:7e:55:48:d4:b0:d2:00:4e:fe: 9f:cf:9f:6a:a5:ff:92:d0:42:c6:eb:80:f2:ff:3c:6b:52:73: c7:df:ec:30:a9:af:d8:27:ee:4a:3b:de:cb:32:5d:06:9e:a1: 4b:50:9a:9f -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgICNtQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTExMTUwMDAwMThaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE1MkQyQUYxMTAvBgNVBAUTKDVBNDY3QkI0OTM3RUFDNkJFRkI5NkI0 RjRGRTM1QkQ3RkQyQTQwRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRdsGuErwfaOUdk6Xpy4OQYgfoEQBu7dz1og0CWgHT72Yixc4OwND5I5D3g4Gr 6vJNcU4OL/D7c4taM/SJrwLGt3+uxjhDDlPbf2F8zFPutSV5vbyYDh4P88BVn0w4 Vs40J/ATQZasCHycuTWKisaC6xdfLXfzbF9j3A1KfLKZtX8yxAkpjZvdJbyCUBZS 5T+kqtSQfiputKdqEXJ5WgKnQB2YQ10jFMtaeV6HbEwxmDlrNMK7IxO75hOGpyfv uvxhHZ6hr1t0yXvhwSM437tP5r/2LdsJDR/ZtbQdSTqwGEwOEpVlFu7H/Qi0hfav TgZdM7bmK0T9kcjOUvdz8AcPAgMBAAGjggMzMIIDLzAdBgNVHQ4EFgQUWkZ7tJN+ rGvvuWtPT+Nb1/0qQPowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNTJEMi81Q0YxQTBBRUQ1NkEx MUU5OTc3NTQ2NEJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTUyRDIvNUNGMUEwQUVENTZBMTFFOTk3NzU0NjRCRjhBRUEyMjgvV2taN3RK Ti1yR3Z2dVd0UFQtTmIxXzBxUVBvLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAkV8CAwUHvzBCBggrBgEFBQcBBwEB/wQzMDEwEgQCAAEwDAMEBylGAAMEAmbO mDAbBAIAAjAVAwUELA5+gAMFACwPQSADBQAsD+pgMA0GCSqGSIb3DQEBCwUAA4IB AQDAn/NYnpkXPYcLjXeyiddBxFGtLkNVW8eGOF4JAFrIAnjNAvwdsPut1Knei1el 8cHkd/W+jiZnG8Q+Ff8g6tw/wliKrlkeolY44qcyOrSRLWJEa797CRF2lYmlsPDn 24/CQ9Sjt2HEehtD9dne3/PGK20df/O2nh4YVd76h6lMMs8+/RZeh5qAbqQdRDK5 6WkFl4VmcR2EMuzYdZKVBmCnokotqk2xaHKxBqeMJ+yu1nlUok93Rz0kHiJdpPMF Jz5xxWpH35tVzWKRsrZikch+VUjUsNIATv6fz59qpf+S0ELG64Dy/zxrUnPH3+ww qa/YJ+5KO97LMl0GnqFLUJqf -----END CERTIFICATE-----Generated at Mon Dec 8 16:22:52 2025 by rpki-client