This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer File: WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer (raw, json) Hash identifier: tkL5xUWwyS9Z3pw+eEem2RVh4W6JZqLu0sp4j0R+Row= Subject key identifier: 5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3782 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:08:14 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37215 AS: 329663 IP: 41.70.0.0/17 IP: 102.206.152.0/22 IP: 2c0e:7e80::/28 IP: 2c0f:4120::/32 IP: 2c0f:ea60::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14210 (0x3782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:08:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36152D2AF, serialNumber=5A467BB4937EAC6BEFB96B4F4FE35BD7FD2A40FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:c1:ae:12:bc:1f:68:e5:1d:93:a5:e9:cb: 83:90:62:07:e8:11:00:6e:ed:dc:f5:a2:0d:02:5a: 01:d3:ef:66:22:c5:ce:0e:c0:d0:f9:23:90:f7:83: 81:ab:ea:f2:4d:71:4e:0e:2f:f0:fb:73:8b:5a:33: f4:89:af:02:c6:b7:7f:ae:c6:38:43:0e:53:db:7f: 61:7c:cc:53:ee:b5:25:79:bd:bc:98:0e:1e:0f:f3: c0:55:9f:4c:38:56:ce:34:27:f0:13:41:96:ac:08: 7c:9c:b9:35:8a:8a:c6:82:eb:17:5f:2d:77:f3:6c: 5f:63:dc:0d:4a:7c:b2:99:b5:7f:32:c4:09:29:8d: 9b:dd:25:bc:82:50:16:52:e5:3f:a4:aa:d4:90:7e: 2a:6e:b4:a7:6a:11:72:79:5a:02:a7:40:1d:98:43: 5d:23:14:cb:5a:79:5e:87:6c:4c:31:98:39:6b:34: c2:bb:23:13:bb:e6:13:86:a7:27:ef:ba:fc:61:1d: 9e:a1:af:5b:74:c9:7b:e1:c1:23:38:df:bb:4f:e6: bf:f6:2d:db:09:0d:1f:d9:b5:b4:1d:49:3a:b0:18: 4c:0e:12:95:65:16:ee:c7:fd:08:b4:85:f6:af:4e: 06:5d:33:b6:e6:2b:44:fd:91:c8:ce:52:f7:73:f0: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37215 329663 sbgp-ipAddrBlock: critical IPv4: 41.70.0.0/17 102.206.152.0/22 IPv6: 2c0e:7e80::/28 2c0f:4120::/32 2c0f:ea60::/32 Signature Algorithm: sha256WithRSAEncryption 65:4f:c1:08:9f:1a:53:a2:c0:67:8b:12:31:b0:b2:8f:d8:1a: 2b:e3:cb:b7:20:18:5a:07:a1:2a:05:22:45:ec:2f:77:30:73: c2:c0:76:ac:f8:1d:42:89:81:be:a5:cc:cb:b0:3d:0c:1a:bd: 4a:1c:90:ef:7d:da:83:e1:f7:ea:a7:f1:a9:84:6e:f6:20:cc: 53:2a:8e:c3:bd:f8:1d:73:92:f6:a8:39:25:7e:4d:35:c7:9d: 3a:9d:f5:86:1f:b8:7b:66:fb:06:05:4a:0a:61:0a:33:1e:a5: 8e:d9:53:0f:fd:f1:0f:61:fe:1f:71:c2:6c:a2:84:c4:83:cc: 3a:3f:a7:81:1a:d9:78:c0:72:28:ea:ed:b8:c5:ab:10:2c:41: 56:ce:31:09:d8:50:ff:5c:a6:97:2f:4f:9b:8d:0b:43:f6:68: 42:4e:91:ca:e7:cc:c0:cc:ab:75:6e:a5:ce:ab:11:8b:ec:fe: be:66:66:56:2a:8b:e7:01:66:38:6c:af:f3:21:e8:6d:3d:a5: fd:1d:16:1b:ec:7f:26:77:60:aa:ef:2b:96:96:94:1b:5a:e7: 77:ed:ad:1b:3e:ef:ee:64:b8:84:ab:98:c1:44:4d:bb:a2:12: 88:8a:ac:09:1d:b0:d5:f6:3b:bc:43:97:22:50:dd:67:a3:3d: 1a:53:28:43 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgICN4IwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDA4MTRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjE1MkQyQUYxMTAvBgNVBAUTKDVBNDY3QkI0OTM3RUFDNkJFRkI5NkI0 RjRGRTM1QkQ3RkQyQTQwRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRdsGuErwfaOUdk6Xpy4OQYgfoEQBu7dz1og0CWgHT72Yixc4OwND5I5D3g4Gr 6vJNcU4OL/D7c4taM/SJrwLGt3+uxjhDDlPbf2F8zFPutSV5vbyYDh4P88BVn0w4 Vs40J/ATQZasCHycuTWKisaC6xdfLXfzbF9j3A1KfLKZtX8yxAkpjZvdJbyCUBZS 5T+kqtSQfiputKdqEXJ5WgKnQB2YQ10jFMtaeV6HbEwxmDlrNMK7IxO75hOGpyfv uvxhHZ6hr1t0yXvhwSM437tP5r/2LdsJDR/ZtbQdSTqwGEwOEpVlFu7H/Qi0hfav TgZdM7bmK0T9kcjOUvdz8AcPAgMBAAGjggMzMIIDLzAdBgNVHQ4EFgQUWkZ7tJN+ rGvvuWtPT+Nb1/0qQPowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNTJEMi81Q0YxQTBBRUQ1NkEx MUU5OTc3NTQ2NEJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MTUyRDIvNUNGMUEwQUVENTZBMTFFOTk3NzU0NjRCRjhBRUEyMjgvV2taN3RK Ti1yR3Z2dVd0UFQtTmIxXzBxUVBvLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAkV8CAwUHvzBCBggrBgEFBQcBBwEB/wQzMDEwEgQCAAEwDAMEBylGAAMEAmbO mDAbBAIAAjAVAwUELA5+gAMFACwPQSADBQAsD+pgMA0GCSqGSIb3DQEBCwUAA4IB AQBlT8EInxpTosBnixIxsLKP2Bor48u3IBhaB6EqBSJF7C93MHPCwHas+B1CiYG+ pczLsD0MGr1KHJDvfdqD4ffqp/GphG72IMxTKo7Dvfgdc5L2qDklfk01x506nfWG H7h7ZvsGBUoKYQozHqWO2VMP/fEPYf4fccJsooTEg8w6P6eBGtl4wHIo6u24xasQ LEFWzjEJ2FD/XKaXL0+bjQtD9mhCTpHK58zAzKt1bqXOqxGL7P6+ZmZWKovnAWY4 bK/zIehtPaX9HRYb7H8md2Cq7yuWlpQbWud37a0bPu/uZLiEq5jBRE27ohKIiqwJ HbDV9ju8Q5ciUN1noz0aUyhD -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:52 2026 by rpki-client