This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer File: hv7S7RnCBnpIIiG2RdYMRaTVap0.cer (raw, json) Hash identifier: v7sCvP146ff6JSzWZrlvAeYO0of0ROVjBE4hrX+68JM= Subject key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3940 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:23:55 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 33766 AS: 36874 IP: 41.177.0.0/16 IP: 105.233.0.0/16 IP: 196.6.121.0/24 IP: 196.22.240.0/20 IP: 196.41.96.0/19 IP: 2c0f:fbe0::/28 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14656 (0x3940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:23:55 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36472E5AF, serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:ab:78:aa:33:06:2b:ef:a8:fb:ee:7d:db: 78:6f:12:3d:d1:31:51:bd:21:74:ef:af:1b:e3:3b: ad:5f:0a:e8:f3:09:5a:d9:ac:be:34:d4:61:e6:3f: 5f:8d:95:b9:00:75:4e:ee:65:54:ee:f0:32:d0:a3: 85:4b:67:5f:e8:6d:30:28:1b:10:f7:eb:de:d3:be: 2b:01:d8:bb:e0:1c:dc:f5:f5:46:02:fd:c3:f3:d8: 57:d7:8f:41:9b:06:33:cb:6c:d3:88:bf:48:36:f2: cd:41:f7:ed:c4:71:9d:5f:54:71:79:bf:60:97:34: f6:6f:ba:57:06:5e:8c:64:b5:1e:88:9c:30:b2:3b: b1:05:78:68:4a:78:78:de:03:43:b9:6e:1a:c0:3d: 75:ae:cc:b4:2e:98:28:96:cb:cf:fe:bd:db:5e:86: e0:00:07:3b:61:df:4e:79:35:c8:62:96:41:25:1f: 0b:05:00:e7:6b:a4:64:db:a8:89:f9:07:f9:d4:02: 8f:be:16:e9:ee:c2:96:36:b9:bf:0c:8a:c0:af:6b: f0:bb:66:61:92:56:e2:07:48:9f:67:78:61:5a:56: 8c:9f:1a:c2:5d:bb:6a:95:e6:0b:f7:93:f2:1c:ad: 8c:c8:6e:54:b0:20:90:48:f9:ea:a5:82:97:8d:1b: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 33766 36874 sbgp-ipAddrBlock: critical IPv4: 41.177.0.0/16 105.233.0.0/16 196.6.121.0/24 196.22.240.0/20 196.41.96.0/19 IPv6: 2c0f:fbe0::/28 Signature Algorithm: sha256WithRSAEncryption 54:81:44:13:92:01:4e:90:1d:bc:64:d6:69:a3:06:15:64:6c: 62:45:ee:c3:47:ed:7d:aa:dd:3b:43:54:fa:23:a3:0c:8e:00: af:14:e0:47:ff:26:a2:95:ea:e6:b9:17:de:df:9a:9c:01:cf: b8:3a:e0:9f:04:9c:94:a0:e8:ad:44:6b:1c:4f:5f:f6:fa:92: 03:9b:99:db:8e:b9:cf:a9:2e:e8:a9:01:a3:d9:86:7e:1c:0f: e4:8a:ca:0b:bb:9f:f3:40:2c:a9:c0:b9:75:83:66:c0:75:55: a9:c1:6c:02:1c:0c:af:d9:d8:65:4c:8e:c4:1a:6d:e8:e6:49: ea:a7:2b:b5:d0:81:5e:70:d4:88:bd:cd:6d:bc:a6:a0:3d:fe: a4:59:86:0a:ab:59:ba:08:6e:58:d5:c4:5f:4e:fa:17:62:03: 01:31:41:06:62:46:aa:11:cb:f3:05:10:b3:96:31:d5:6c:47: c9:65:05:3b:70:75:24:bb:6a:19:fe:b5:8b:3d:7a:58:3b:f1: ce:5c:32:93:6d:12:46:e6:34:8b:b1:f0:58:93:6e:ba:82:f7: 91:5c:00:c9:0e:98:50:3a:f9:41:ed:df:fa:af:8f:6d:b4:6e: f6:80:43:3f:2c:32:2d:da:f8:0e:7c:52:09:91:a8:a1:75:49: 86:89:4a:25 -----BEGIN CERTIFICATE----- MIIGQDCCBSigAwIBAgICOUAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTIzNTVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQ3MkU1QUYxMTAvBgNVBAUTKDg2RkVEMkVEMTlDMjA2N0E0ODIyMjFC NjQ1RDYwQzQ1QTRENTZBOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8nat4qjMGK++o++5923hvEj3RMVG9IXTvrxvjO61fCujzCVrZrL401GHmP1+N lbkAdU7uZVTu8DLQo4VLZ1/obTAoGxD3697TvisB2LvgHNz19UYC/cPz2FfXj0Gb BjPLbNOIv0g28s1B9+3EcZ1fVHF5v2CXNPZvulcGXoxktR6InDCyO7EFeGhKeHje A0O5bhrAPXWuzLQumCiWy8/+vdtehuAABzth3055NchilkElHwsFAOdrpGTbqIn5 B/nUAo++FunuwpY2ub8MisCva/C7ZmGSVuIHSJ9neGFaVoyfGsJdu2qV5gv3k/Ic rYzIblSwIJBI+eqlgpeNG8lDAgMBAAGjggM1MIIDMTAdBgNVHQ4EFgQUhv7S7RnC BnpIIiG2RdYMRaTVap0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0NzJFNS84REI2NTQ3QTU2RDcx MUU1ODUzNTZENjBGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDcyRTUvOERCNjU0N0E1NkQ3MTFFNTg1MzU2RDYwRjhBRUEyMjgvaHY3UzdS bkNCbnBJSWlHMlJkWU1SYVRWYXAwLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAg+YCAwCQCjBEBggrBgEFBQcBBwEB/wQ1MDMwIgQCAAEwHAMDACmxAwMAaekD BADEBnkDBATEFvADBAXEKWAwDQQCAAIwBwMFBCwP++AwDQYJKoZIhvcNAQELBQAD ggEBAFSBRBOSAU6QHbxk1mmjBhVkbGJF7sNH7X2q3TtDVPojowyOAK8U4Ef/JqKV 6ua5F97fmpwBz7g64J8EnJSg6K1EaxxPX/b6kgObmduOuc+pLuipAaPZhn4cD+SK ygu7n/NALKnAuXWDZsB1VanBbAIcDK/Z2GVMjsQabejmSeqnK7XQgV5w1Ii9zW28 pqA9/qRZhgqrWboIbljVxF9O+hdiAwExQQZiRqoRy/MFELOWMdVsR8llBTtwdSS7 ahn+tYs9elg78c5cMpNtEkbmNIux8FiTbrqC95FcAMkOmFA6+UHt3/qvj220bvaA Qz8sMi3a+A58UgmRqKF1SYaJSiU= -----END CERTIFICATE-----Generated at Sun Jan 25 13:49:35 2026 by rpki-client