This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer File: gSd0TaTuADsp3hEDT3LeuN_sKP0.cer (raw, json) Hash identifier: 5yeyUT9LGfT7l1zf9Jy25MbYpF105gRaTZp2h2/uRF0= Subject key identifier: 81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CA9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:32:38 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37063 IP: 41.77.72.0/21 IP: 41.191.76.0/22 IP: 102.219.72.0/23 IP: 154.0.128.0/20 IP: 2c0f:fd60::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15529 (0x3ca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:32:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A31C5AF, serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c4:85:4b:0c:55:ed:dc:c8:cf:86:64:32:a3: fe:95:72:81:e4:31:98:96:25:e0:b1:77:21:c0:a5: 0a:bd:18:63:60:2b:a7:cf:9e:fb:ab:5c:21:33:cb: 21:47:15:69:aa:51:64:ab:c3:eb:eb:e9:4a:c9:68: 8c:a0:53:36:20:3f:42:93:c7:2c:7d:95:a8:c4:eb: e2:08:c6:32:d6:e9:f8:c2:e0:5e:bd:b6:ba:85:05: 3e:c6:26:d2:19:9d:6e:c9:79:e3:13:26:39:51:d5: 5c:5c:5f:5d:a9:81:d4:43:86:58:86:81:a7:ec:09: b1:e9:f9:89:ac:f1:11:d9:6f:53:0a:8b:ea:e9:29: ce:2c:dd:f6:d2:1a:54:22:12:67:5e:51:5e:6b:5b: b0:c9:52:f4:c1:19:23:2d:c0:cd:63:cf:80:95:06: 39:38:db:b4:fd:8a:c3:f9:91:29:97:38:37:dc:fe: c8:74:20:8c:9e:fa:fd:47:a9:c3:a1:01:21:1b:57: b7:3a:cd:ad:2c:8d:96:a4:36:d5:8e:95:f8:03:9f: a1:1a:b1:8b:2f:38:35:26:3a:fb:22:5d:76:58:5d: ed:88:6d:ee:b8:47:cc:c9:a2:67:f7:ee:f9:00:cb: be:d6:b6:20:af:61:e5:60:8b:34:85:39:eb:5c:77: ad:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37063 sbgp-ipAddrBlock: critical IPv4: 41.77.72.0/21 41.191.76.0/22 102.219.72.0/23 154.0.128.0/20 IPv6: 2c0f:fd60::/32 Signature Algorithm: sha256WithRSAEncryption 7f:f4:ca:62:81:2a:00:b4:b2:f6:40:74:0f:73:75:89:2a:d1: b2:65:c5:39:d8:96:ba:95:48:61:aa:36:23:4c:e7:97:cc:c0: a7:e4:cd:b3:fc:b5:a5:86:a9:01:9d:2f:f0:0f:cc:9d:72:43: 70:98:0d:36:be:7d:3f:53:92:58:8d:05:71:76:19:43:93:e9: fd:bf:e2:da:45:3e:d7:c8:4a:e0:4e:62:65:a1:b7:25:c2:ad: 54:1a:ea:a5:f4:1e:0d:73:6e:6e:ba:d1:f2:81:d9:e8:cb:8c: 14:1a:26:de:1a:9d:8d:ff:d0:30:4a:40:b6:bc:79:19:d7:f2: f7:8d:7d:56:51:d6:df:74:bb:75:fa:e7:11:79:71:0c:fa:8e: a3:c2:a7:04:8d:2d:c3:0b:03:3f:68:70:ef:2d:80:20:5c:db: 44:53:b5:1d:40:79:6c:68:f2:bf:88:3e:d7:b9:7b:6f:8c:eb: ec:70:48:a1:95:3c:78:26:7c:a6:53:2d:83:f1:1d:f0:57:f2: 8f:9a:02:6c:c0:3b:61:f8:13:a8:ed:44:21:a4:25:7d:05:de: e4:4f:69:11:ee:cf:7b:26:55:bd:c5:75:89:0c:27:61:07:80: 7b:1d:2f:f9:b0:66:3e:9d:22:aa:29:1f:12:5e:25:74:bb:7a: b8:67:89:76 -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICPKkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzMyMzhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkEzMUM1QUYxMTAvBgNVBAUTKDgxMjc3NDREQTRFRTAwM0IyOURFMTEw MzRGNzJERUI4REZFQzI4RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfxIVLDFXt3MjPhmQyo/6VcoHkMZiWJeCxdyHApQq9GGNgK6fPnvurXCEzyyFH FWmqUWSrw+vr6UrJaIygUzYgP0KTxyx9lajE6+IIxjLW6fjC4F69trqFBT7GJtIZ nW7JeeMTJjlR1VxcX12pgdRDhliGgafsCbHp+Yms8RHZb1MKi+rpKc4s3fbSGlQi EmdeUV5rW7DJUvTBGSMtwM1jz4CVBjk427T9isP5kSmXODfc/sh0IIye+v1HqcOh ASEbV7c6za0sjZakNtWOlfgDn6EasYsvODUmOvsiXXZYXe2Ibe64R8zJomf37vkA y77WtiCvYeVgizSFOetcd611AgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUgSd0TaTu ADsp3hEDT3LeuN/sKP0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBMzFDNS82RjkwNjE4QUFEN0Yx MUVGQTU0OTg2OTc3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTMxQzUvNkY5MDYxOEFBRDdGMTFFRkE1NDk4Njk3NzYyRTk1MUEvZ1NkMFRh VHVBRHNwM2hFRFQzTGV1Tl9zS1AwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkMcwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAMpTUgDBAIpv0wDBAFm 20gDBASaAIAwDQQCAAIwBwMFACwP/WAwDQYJKoZIhvcNAQELBQADggEBAH/0ymKB KgC0svZAdA9zdYkq0bJlxTnYlrqVSGGqNiNM55fMwKfkzbP8taWGqQGdL/APzJ1y Q3CYDTa+fT9TkliNBXF2GUOT6f2/4tpFPtfISuBOYmWhtyXCrVQa6qX0Hg1zbm66 0fKB2ejLjBQaJt4anY3/0DBKQLa8eRnX8veNfVZR1t90u3X65xF5cQz6jqPCpwSN LcMLAz9ocO8tgCBc20RTtR1AeWxo8r+IPte5e2+M6+xwSKGVPHgmfKZTLYPxHfBX 8o+aAmzAO2H4E6jtRCGkJX0F3uRPaRHuz3smVb3FdYkMJ2EHgHsdL/mwZj6dIqop HxJeJXS7erhniXY= -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:07 2026 by rpki-client