This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer File: Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer (raw, json) Hash identifier: 7TNuD4iw70rLdCiGMfwWJrTl9dUcUhTq9fJn46aw37Y= Subject key identifier: 67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D3B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:55:04 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37349 IP: 41.79.68.0/22 IP: 41.207.240.0/21 IP: 102.210.200.0/22 IP: 102.212.108.0/22 IP: 196.200.224.0/20 IP: 2c0f:fda8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15675 (0x3d3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:55:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36EBDD7AF, serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:ca:4f:4f:d6:14:e1:4c:0c:37:1f:f7:f3: 70:35:0b:88:52:1d:10:42:8b:ac:54:6e:4c:af:28: 7e:6d:ae:6d:2c:6a:67:ea:4f:75:1d:40:ca:61:79: 91:4e:1a:b7:71:d2:e1:f2:57:6e:44:94:e2:ce:aa: c4:3e:52:a2:de:6b:52:b5:ed:33:69:40:01:60:d5: 70:6f:5b:61:bd:d5:6c:3c:53:48:e8:14:3c:49:3a: b4:bb:82:10:10:0a:ce:59:33:5a:03:e6:75:a0:1a: 62:53:fd:aa:62:d3:df:8f:e0:88:18:72:2d:c7:64: 88:85:49:95:15:77:ef:aa:eb:dc:db:fe:2b:68:6a: fb:62:ce:47:c6:f6:db:2c:14:52:4a:97:c0:81:93: df:96:92:a1:9d:eb:2e:31:8b:02:25:c2:67:78:9b: e7:22:3c:c9:33:41:75:fb:49:0d:a8:67:90:38:ec: 4f:1b:3d:eb:a9:44:aa:ed:1f:6e:04:ce:49:93:72: 82:e5:c9:e3:68:a1:58:ca:8c:6f:7c:d5:c1:6f:36: db:51:8e:ad:90:f9:24:b7:fa:e3:67:a3:f4:31:4b: 79:35:e5:88:4d:db:81:04:03:ab:a5:5f:02:68:80: 27:3a:0c:da:6a:f5:b1:8e:c6:ea:3c:0a:ac:9b:d5: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37349 sbgp-ipAddrBlock: critical IPv4: 41.79.68.0/22 41.207.240.0/21 102.210.200.0/22 102.212.108.0/22 196.200.224.0/20 IPv6: 2c0f:fda8::/32 Signature Algorithm: sha256WithRSAEncryption 77:e7:ea:0f:91:e5:9a:21:e5:64:55:fc:f5:33:fb:79:80:e0: de:22:91:f1:1c:a5:cb:93:37:ae:e1:86:b9:4d:f6:f7:c9:e6: 09:66:8a:0f:9e:1c:77:2f:33:c3:16:53:a0:30:e8:0a:ba:0f: 31:02:58:ec:bf:3d:a4:20:56:d3:96:0b:67:c0:af:e5:8c:bf: 0d:75:4e:d9:e7:d0:9f:23:98:68:74:d9:5c:68:74:2f:08:06: 46:52:87:76:7a:77:ab:83:d6:1c:a9:8e:b2:b9:ab:d5:c6:54: ed:89:ce:73:4e:fe:05:ae:dc:06:d1:33:ec:c1:a4:27:e4:3e: 23:ab:1f:d1:dc:a6:ea:f0:94:a8:eb:64:92:e0:a5:ba:90:b4: 9d:a9:cf:e4:8d:ac:bf:29:b7:27:a4:11:6b:7b:bf:42:ee:46: a8:fa:30:a8:12:77:e4:16:fb:56:fd:f7:aa:02:c1:0a:46:a5: a9:57:42:de:4a:83:ba:17:44:92:38:ec:8a:00:30:b7:4c:ed: 7f:fe:0d:7f:18:3d:4c:dd:40:f9:2f:b7:c5:14:b3:8c:b1:c2: c4:02:c8:35:e9:45:7a:b5:e6:29:d7:34:09:61:6e:9f:db:12: e5:11:7b:54:f3:d2:28:b4:70:4d:ad:b0:b1:ce:ae:86:87:91: 5d:66:8c:a5 -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgICPTswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzU1MDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkVCREQ3QUYxMTAvBgNVBAUTKDY3MTc2MkRGMkY0QjY1RTgzNTBFRjQz REZFNkUzNDc3NjU3NTFCNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6SMpPT9YU4UwMNx/383A1C4hSHRBCi6xUbkyvKH5trm0samfqT3UdQMpheZFO Grdx0uHyV25ElOLOqsQ+UqLea1K17TNpQAFg1XBvW2G91Ww8U0joFDxJOrS7ghAQ Cs5ZM1oD5nWgGmJT/api09+P4IgYci3HZIiFSZUVd++q69zb/itoavtizkfG9tss FFJKl8CBk9+WkqGd6y4xiwIlwmd4m+ciPMkzQXX7SQ2oZ5A47E8bPeupRKrtH24E zkmTcoLlyeNooVjKjG981cFvNttRjq2Q+SS3+uNno/QxS3k15YhN24EEA6ulXwJo gCc6DNpq9bGOxuo8Cqyb1S3xAgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQUZxdi3y9L Zeg1DvQ9/m40d2V1G2cwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFQkRENy81OTkwNzQ2MEJFMUQx MUVCOUEzNDhCNDJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RUJERDcvNTk5MDc0NjBCRTFEMTFFQjlBMzQ4QjQyRjhBRUEyMjgvWnhkaTN5 OUxaZWcxRHZROV9tNDBkMlYxRzJjLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkeUwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAIpT0QDBAMpz/ADBAJm 0sgDBAJm1GwDBATEyOAwDQQCAAIwBwMFACwP/agwDQYJKoZIhvcNAQELBQADggEB AHfn6g+R5Zoh5WRV/PUz+3mA4N4ikfEcpcuTN67hhrlN9vfJ5glmig+eHHcvM8MW U6Aw6Aq6DzECWOy/PaQgVtOWC2fAr+WMvw11Ttnn0J8jmGh02VxodC8IBkZSh3Z6 d6uD1hypjrK5q9XGVO2JznNO/gWu3AbRM+zBpCfkPiOrH9HcpurwlKjrZJLgpbqQ tJ2pz+SNrL8ptyekEWt7v0LuRqj6MKgSd+QW+1b996oCwQpGpalXQt5Kg7oXRJI4 7IoAMLdM7X/+DX8YPUzdQPkvt8UUs4yxwsQCyDXpRXq15inXNAlhbp/bEuURe1Tz 0ii0cE2tsLHOroaHkV1mjKU= -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:47 2026 by rpki-client