This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer File: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer (raw, json) Hash identifier: iMqPM9wrjGJl6meljcCDY0TCQO6Znlgm146zeYW7XJI= Subject key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3FA8 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Fri 23 Jan 2026 00:06:03 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37148 AS: 328309 IP: 41.203.64.0/19 IP: 102.203.104.0/22 IP: 102.213.84.0/22 IP: 197.211.32.0/19 IP: 2c0f:f9e0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16296 (0x3fa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 23 00:06:03 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:ce:c9:f0:0c:c8:32:ce:70:dd:4a:a5:83: c7:59:b0:3c:6b:a4:94:c1:78:b4:ce:ea:84:0e:60: 28:89:a2:ca:e3:61:ac:7b:93:77:8d:8d:4b:95:c2: f8:f7:e9:7f:ec:3b:46:a4:95:ec:31:8a:8b:a0:e8: 76:1b:bf:ac:41:18:ab:9d:5f:53:3e:29:6b:ff:8d: 31:17:87:ea:6c:12:d6:33:00:39:99:37:0d:d2:83: 82:e2:af:a2:21:72:40:e3:bf:28:32:16:17:15:1d: c2:a5:6f:c7:46:4c:5e:60:a6:4f:04:7b:e6:a4:0b: 98:5b:eb:e3:b3:3e:37:42:dc:43:ef:ba:a8:31:a6: 35:d2:fd:6e:74:e1:29:52:1b:d0:7e:37:72:17:b0: 8f:62:8d:d8:22:78:e3:83:c5:a2:b4:b4:8b:03:e4: 68:c6:97:99:95:dc:94:c9:9b:6f:75:69:ee:ad:79: 31:5b:6c:46:6e:d2:95:61:03:bc:4b:23:41:ff:0e: ac:9d:fa:72:9e:9e:da:97:4d:d2:13:d3:bd:ec:db: 8f:65:15:11:50:38:f6:75:32:80:d4:4c:24:28:73: b9:97:d6:45:04:ee:c7:fd:20:23:94:a2:49:8c:69: 54:8a:75:8b:6c:c4:b6:16:6a:4e:a4:67:09:ca:09: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37148 328309 sbgp-ipAddrBlock: critical IPv4: 41.203.64.0/19 102.203.104.0/22 102.213.84.0/22 197.211.32.0/19 IPv6: 2c0f:f9e0::/32 Signature Algorithm: sha256WithRSAEncryption 75:4c:0f:3a:3e:05:e0:49:d4:84:98:43:c8:60:44:03:85:02: 66:9f:76:c3:1a:d6:e8:51:68:8d:ce:28:57:58:d6:09:ab:10: 70:4e:f1:38:86:aa:c9:23:f1:d0:98:3a:97:f6:f1:0f:6d:ce: 53:bd:1b:13:72:af:95:d9:46:79:81:7d:d0:93:f3:fe:8e:91: f2:c9:34:db:f7:dd:67:2d:74:5b:06:0e:a7:cc:06:3c:8b:c9: d1:ce:bb:fc:de:3f:bd:c0:a6:81:5c:68:7a:cb:47:51:3f:1f: 80:e4:72:c7:23:58:ed:da:53:85:c7:90:fc:33:a1:59:3d:d3: 41:fb:d3:b7:f2:e7:06:c9:2c:76:d8:6c:42:f9:aa:39:f4:88: 51:9f:fb:51:38:49:a8:82:b5:58:3c:45:60:a3:bc:c6:ff:1a: 2e:9b:47:6a:c3:03:03:f4:f1:fb:e8:cf:97:00:21:22:f6:b0: c9:c6:52:1e:f0:93:bd:82:01:a5:55:fb:23:e4:96:ba:98:5e: 8e:1d:92:24:1c:09:21:8a:31:b8:3f:c6:f9:6e:a4:a4:37:5e: 73:33:07:bc:52:7f:0e:b7:e6:9f:a7:77:3b:ed:1f:61:87:ee: 35:ee:b6:97:85:ac:97:60:98:51:e0:b8:58:a2:46:05:41:ad: 91:e1:8b:f2 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgICP6gwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMjMwMDA2MDNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkVDQUEyQUYxMTAvBgNVBAUTKDgzM0Q0QTI0RTM5Q0RDOTQyQ0JDNTc4 MjU0MUI4MUQ0REQ5NkFFQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7H87J8AzIMs5w3Uqlg8dZsDxrpJTBeLTO6oQOYCiJosrjYax7k3eNjUuVwvj3 6X/sO0aklewxioug6HYbv6xBGKudX1M+KWv/jTEXh+psEtYzADmZNw3Sg4Lir6Ih ckDjvygyFhcVHcKlb8dGTF5gpk8Ee+akC5hb6+OzPjdC3EPvuqgxpjXS/W504SlS G9B+N3IXsI9ijdgieOODxaK0tIsD5GjGl5mV3JTJm291ae6teTFbbEZu0pVhA7xL I0H/Dqyd+nKentqXTdIT073s249lFRFQOPZ1MoDUTCQoc7mX1kUE7sf9ICOUokmM aVSKdYtsxLYWak6kZwnKCY+nAgMBAAGjggMxMIIDLTAdBgNVHQ4EFgQUgz1KJOOc 3JQsvFeCVBuB1N2WrqgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFQ0FBMi81M0FFMUVEQ0E2MDkx MUVEOTQyMkMxQjlGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RUNBQTIvNTNBRTFFRENBNjA5MTFFRDk0MjJDMUI5RjEyMjI0NjgvZ3oxS0pP T2MzSlFzdkZlQ1ZCdUIxTjJXcnFnLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAkRwCAwUCdTBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEBSnLQAMEAmbL aAMEAmbVVAMEBcXTIDANBAIAAjAHAwUALA/54DANBgkqhkiG9w0BAQsFAAOCAQEA dUwPOj4F4EnUhJhDyGBEA4UCZp92wxrW6FFojc4oV1jWCasQcE7xOIaqySPx0Jg6 l/bxD23OU70bE3KvldlGeYF90JPz/o6R8sk02/fdZy10WwYOp8wGPIvJ0c67/N4/ vcCmgVxoestHUT8fgORyxyNY7dpThceQ/DOhWT3TQfvTt/LnBsksdthsQvmqOfSI UZ/7UThJqIK1WDxFYKO8xv8aLptHasMDA/Tx++jPlwAhIvawycZSHvCTvYIBpVX7 I+SWuphejh2SJBwJIYoxuD/G+W6kpDdeczMHvFJ/Drfmn6d3O+0fYYfuNe62l4Ws l2CYUeC4WKJGBUGtkeGL8g== -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:13 2026 by rpki-client