This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer File: ih_PKB86N6VQ5kE32QhVCuiQIzo.cer (raw, json) Hash identifier: 3LZ/yndQFFHd2JT7h02U/msPykxpAEms9EkihXu/gDE= Subject key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CB1 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:33:40 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37192 IP: 41.78.88.0/22 IP: 2c0f:ff88::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15537 (0x3cb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:33:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A3983AF, serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:58:35:5d:1e:18:bf:66:ca:3a:88:99:bb: 55:47:b3:7b:bd:2e:fe:ae:01:71:14:e4:ef:75:9a: 30:80:78:5b:de:f7:31:53:aa:43:bc:bb:1b:d3:d7: 96:e9:d7:89:47:35:c4:62:07:51:93:34:3b:0e:e6: 37:b9:9b:69:90:83:33:4d:71:df:63:27:26:b5:91: f0:80:cd:09:e3:78:02:f3:c8:44:11:74:fa:bd:97: e9:ad:2a:34:fb:20:5a:aa:b0:e7:61:e2:cf:61:c6: 61:87:be:5b:25:f4:07:04:c2:e9:3b:82:e9:96:f2: e5:00:3e:60:98:76:55:d7:ee:40:4c:cc:26:3f:13: e9:fa:c1:e3:0f:9a:5e:ae:5f:1d:f0:3b:59:6a:a9: d2:02:b8:9d:76:be:a5:38:f2:14:5a:01:12:35:16: ab:91:ac:35:01:a6:6e:31:38:cf:a5:b4:f9:d4:9f: c1:e2:cc:ce:76:d8:19:14:73:95:c5:db:23:18:70: 7a:7f:32:ab:01:2f:34:ad:2d:2a:44:45:64:0c:e1: 3c:46:25:c5:da:a3:1a:1e:25:40:66:d3:ed:ed:e9: 84:9b:11:72:5b:39:5e:9e:f6:6d:7b:ce:f2:96:e8: 86:7f:bb:5a:eb:05:8b:ad:5c:a0:ad:0e:1a:d2:c1: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37192 sbgp-ipAddrBlock: critical IPv4: 41.78.88.0/22 IPv6: 2c0f:ff88::/32 Signature Algorithm: sha256WithRSAEncryption 81:b8:2a:be:1d:d5:18:13:7a:5c:f3:3b:e5:21:b7:54:50:db: f2:6e:f9:b9:d5:b2:d3:33:1a:b6:3b:e2:43:00:6f:43:35:5c: 0c:73:28:3b:f3:9b:d4:7a:17:c5:4c:48:49:19:0e:f7:4f:3d: 20:bf:ae:ac:6f:4a:ad:66:a2:c5:80:64:d9:07:95:34:5e:8a: 6d:e7:54:74:0c:be:98:d2:8d:e8:77:41:62:67:4d:7e:4a:3b: 88:99:f5:2b:c7:d0:04:de:67:56:9f:9b:d4:6a:9e:fc:a2:6a: da:e4:7d:9a:74:7f:47:e6:f6:d2:7b:e1:c2:77:e0:22:72:f2: 34:8c:c3:0f:01:d2:7d:ec:eb:1f:9b:fc:ae:48:80:80:2d:17: 8b:5c:37:11:d7:7f:36:c0:cf:0b:6f:28:4d:61:5e:29:64:07: 14:f8:b0:27:a5:79:2e:17:68:48:6e:87:70:0f:32:c2:ec:1f: 68:ff:39:9e:eb:1b:0b:51:42:f9:57:9e:cf:62:c3:7a:cf:1c: 11:7d:f4:11:3f:50:bb:65:dc:29:4b:09:79:ad:03:7e:02:c4: fb:13:2d:02:54:a8:64:56:b4:81:08:08:a1:24:76:55:7b:50: c7:89:94:78:5e:9b:a4:b2:df:b6:19:1a:7b:3b:eb:4c:3b:3f: bb:38:de:cd -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPLEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzMzNDBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkEzOTgzQUYxMTAvBgNVBAUTKDhBMUZDRjI4MUYzQTM3QTU1MEU2NDEz N0Q5MDg1NTBBRTg5MDIzM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8EVg1XR4Yv2bKOoiZu1VHs3u9Lv6uAXEU5O91mjCAeFve9zFTqkO8uxvT15bp 14lHNcRiB1GTNDsO5je5m2mQgzNNcd9jJya1kfCAzQnjeALzyEQRdPq9l+mtKjT7 IFqqsOdh4s9hxmGHvlsl9AcEwuk7gumW8uUAPmCYdlXX7kBMzCY/E+n6weMPml6u Xx3wO1lqqdICuJ12vqU48hRaARI1FquRrDUBpm4xOM+ltPnUn8HizM522BkUc5XF 2yMYcHp/MqsBLzStLSpERWQM4TxGJcXaoxoeJUBm0+3t6YSbEXJbOV6e9m17zvKW 6IZ/u1rrBYutXKCtDhrSwTfPAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUih/PKB86 N6VQ5kE32QhVCuiQIzowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBMzk4My8wOUI4MTgzRTlCOUMx MUVGQTAxMkY5NEY3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTM5ODMvMDlCODE4M0U5QjlDMTFFRkEwMTJGOTRGNzYyRTk1MUEvaWhfUEtC ODZONlZRNWtFMzJRaFZDdWlRSXpvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkUgwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIpTlgwDQQCAAIwBwMF ACwP/4gwDQYJKoZIhvcNAQELBQADggEBAIG4Kr4d1RgTelzzO+Uht1RQ2/Ju+bnV stMzGrY74kMAb0M1XAxzKDvzm9R6F8VMSEkZDvdPPSC/rqxvSq1mosWAZNkHlTRe im3nVHQMvpjSjeh3QWJnTX5KO4iZ9SvH0ATeZ1afm9RqnvyiatrkfZp0f0fm9tJ7 4cJ34CJy8jSMww8B0n3s6x+b/K5IgIAtF4tcNxHXfzbAzwtvKE1hXilkBxT4sCel eS4XaEhuh3APMsLsH2j/OZ7rGwtRQvlXns9iw3rPHBF99BE/ULtl3ClLCXmtA34C xPsTLQJUqGRWtIEICKEkdlV7UMeJlHhem6Sy37YZGns760w7P7s43s0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:23 2026 by rpki-client