This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer File: e5q4nC36bjo-yHXuV_4sDZpxQcA.cer (raw, json) Hash identifier: cM/8eWfioSaflPdIZ99w38hZhoW1I6aU+qPEShVAyYY= Subject key identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E99 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:50:47 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 36946 AS: 329666 IP: 196.49.0.0/24 IP: 196.223.4.0/24 IP: 2001:43f8:940::/47 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16025 (0x3e99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:50:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E6854AF, serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:92:e8:72:5b:2b:43:cf:ad:10:7d:de:e6: c8:33:c3:b0:be:3e:1c:a6:15:95:22:bd:a8:e0:18: dc:ce:16:16:9f:b5:d0:89:89:cd:03:56:22:4c:83: 2a:31:ba:86:9b:f9:10:75:93:31:b1:43:42:aa:49: 9e:44:a1:7c:68:d8:32:5f:25:e0:3f:b3:cb:57:aa: 06:cc:b7:25:ea:ed:8f:64:35:72:68:b4:f5:55:c6: b9:62:75:a5:b5:c7:36:a7:4a:0e:ee:d3:19:05:3c: d1:59:5c:01:2b:02:00:61:86:58:09:7b:48:24:a0: f4:99:33:f0:09:31:a0:81:95:5f:9c:a4:80:16:a6: d2:ed:86:0d:6c:62:38:98:b2:3f:52:64:28:15:8c: f6:79:1b:30:14:cb:c3:9a:1e:6f:73:86:3d:8c:7b: 28:9d:c1:18:7a:95:23:38:ba:4f:aa:a1:a4:d2:a6: a4:be:96:68:03:93:e9:c2:c6:8f:bb:4c:5c:b6:4a: 44:6e:64:52:77:91:d6:03:7a:0f:63:c2:cc:15:83: b0:6a:0e:b1:04:18:69:59:b8:e7:27:67:77:ad:92: 72:d1:1d:a6:f6:89:c4:33:ca:2e:83:5a:b4:39:62: 7c:1f:27:97:f6:23:a2:f3:96:5b:08:b7:3f:58:cf: 58:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 36946 329666 sbgp-ipAddrBlock: critical IPv4: 196.49.0.0/24 196.223.4.0/24 IPv6: 2001:43f8:940::/47 Signature Algorithm: sha256WithRSAEncryption c4:ff:18:a7:4c:fd:c7:05:b1:e8:15:28:69:a5:d8:c2:0c:f5: fb:ed:69:15:6c:f2:51:6f:6a:26:93:9a:19:be:76:f8:bd:55: e6:8c:65:36:65:36:97:c3:6a:bc:45:f8:2d:1e:f3:6a:1c:4b: e1:28:d0:bd:d9:3e:60:89:df:ea:ea:26:c6:e8:6c:39:3c:cd: b5:2e:78:b2:0d:b5:a4:be:9e:86:20:6b:0a:0a:d8:4f:d7:59: 0c:98:9c:68:0d:72:43:96:db:22:f2:7d:16:aa:2f:4d:b2:e0: d9:25:8b:39:11:77:30:bc:17:93:6f:de:f8:ed:5f:cf:b4:0c: d6:2f:84:38:03:0e:b5:64:56:36:c9:51:a5:00:f4:1f:4f:31: 2c:71:96:4e:54:6d:7f:dd:b7:65:09:84:2d:78:4e:08:27:1a: 4a:4b:59:11:a4:5b:cc:59:b6:9e:ab:60:aa:66:7a:ce:4a:35: 23:35:65:7a:81:83:82:b6:ea:a9:40:19:95:99:04:25:2f:b9: dc:68:b6:e8:6e:5c:08:7e:67:c5:1f:83:1c:1a:d8:89:96:d5: a2:bb:67:ba:e4:99:9e:00:3f:ed:52:1c:22:21:d8:78:62:39: f6:d5:69:c2:18:d5:39:a7:2c:53:fc:f5:a9:15:7c:e9:c5:c4: a3:12:35:74 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgICPpkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDUwNDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkU2ODU0QUYxMTAvBgNVBAUTKDdCOUFCODlDMkRGQTZFM0EzRUM4NzVF RTU3RkUyQzBEOUE3MTQxQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzLJLoclsrQ8+tEH3e5sgzw7C+PhymFZUivajgGNzOFhaftdCJic0DViJMgyox uoab+RB1kzGxQ0KqSZ5EoXxo2DJfJeA/s8tXqgbMtyXq7Y9kNXJotPVVxrlidaW1 xzanSg7u0xkFPNFZXAErAgBhhlgJe0gkoPSZM/AJMaCBlV+cpIAWptLthg1sYjiY sj9SZCgVjPZ5GzAUy8OaHm9zhj2MeyidwRh6lSM4uk+qoaTSpqS+lmgDk+nCxo+7 TFy2SkRuZFJ3kdYDeg9jwswVg7BqDrEEGGlZuOcnZ3etknLRHab2icQzyi6DWrQ5 YnwfJ5f2I6LzllsItz9Yz1iNAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQUe5q4nC36 bjo+yHXuV/4sDZpxQcAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFNjg1NC8zODVGQkU5MjIzMEQx MUVGQTI3QzgxMjc3RERDMjRDMi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTY4NTQvMzg1RkJFOTIyMzBEMTFFRkEyN0M4MTI3N0REQzI0QzIvZTVxNG5D MzZiam8teUhYdVZfNHNEWnB4UWNBLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAkFICAwUHwjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMQxAAMEAMTf BDAPBAIAAjAJAwcBIAFD+AlAMA0GCSqGSIb3DQEBCwUAA4IBAQDE/xinTP3HBbHo FShppdjCDPX77WkVbPJRb2omk5oZvnb4vVXmjGU2ZTaXw2q8RfgtHvNqHEvhKNC9 2T5gid/q6ibG6Gw5PM21LniyDbWkvp6GIGsKCthP11kMmJxoDXJDltsi8n0Wqi9N suDZJYs5EXcwvBeTb9747V/PtAzWL4Q4Aw61ZFY2yVGlAPQfTzEscZZOVG1/3bdl CYQteE4IJxpKS1kRpFvMWbaeq2CqZnrOSjUjNWV6gYOCtuqpQBmVmQQlL7ncaLbo blwIfmfFH4McGtiJltWiu2e65JmeAD/tUhwiIdh4Yjn21WnCGNU5pyxT/PWpFXzp xcSjEjV0 -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:15 2026 by rpki-client