This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer File: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer (raw, json) Hash identifier: EGjcoJIH1gALER1fSKfdJI9HaEgUBdDzdW8bVnzddPY= Subject key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D68 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:02:26 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 33785 IP: 41.77.136.0/21 IP: 41.215.240.0/22 IP: 41.223.52.0/22 IP: 102.223.184.0/22 IP: 196.46.188.0/22 IP: 2c0f:fee0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15720 (0x3d68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:02:26 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:71:3a:29:b9:f2:9e:31:e7:12:86:8a:8f:55: 77:2d:06:bb:7c:46:f1:aa:d3:23:e0:3e:c4:b6:47: d3:2d:33:db:d6:be:3b:b6:a9:95:18:97:9b:18:26: 1e:24:6a:89:37:a8:ce:ee:0e:59:01:93:30:8a:b5: 31:bf:87:6a:13:e5:06:f3:dc:f1:0d:21:ba:2b:8b: ee:5e:7a:b9:6f:80:e5:d6:0c:d5:dc:66:2f:ff:2a: 15:4e:5e:b6:0e:9f:97:7d:b7:6b:d1:32:a3:bd:51: 7f:78:99:20:93:5d:9f:c3:67:28:c3:5f:14:c8:0b: 6b:aa:94:38:91:d7:21:94:c6:01:b3:a7:7a:74:1e: 82:90:4b:4b:0b:40:c6:69:6c:9e:a9:36:9a:e5:2e: e0:3c:3f:c5:09:5c:55:b2:42:c0:f3:c9:0b:09:e7: c3:00:c0:3a:90:78:44:41:4f:1f:a0:fb:3d:66:da: 66:c0:a5:52:f0:f4:7e:5a:74:42:43:f4:f5:19:f6: de:b1:95:7a:9e:d3:1e:14:46:06:35:3a:9d:05:54: dd:21:46:14:7e:1d:70:51:4e:3a:9f:80:08:ad:3c: cb:0b:fb:7c:98:c2:61:ae:26:39:29:5c:43:d4:82: d2:5e:84:8f:41:fc:54:f2:6b:ba:f8:a3:b3:f4:2f: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 33785 sbgp-ipAddrBlock: critical IPv4: 41.77.136.0/21 41.215.240.0/22 41.223.52.0/22 102.223.184.0/22 196.46.188.0/22 IPv6: 2c0f:fee0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:bb:f8:77:14:19:dc:c2:b9:0c:3b:78:9a:18:2b:0d:f9:9b: 5f:00:f3:02:f7:89:97:fd:5d:1d:5d:86:97:16:5b:04:75:c2: 30:42:c7:12:0f:8d:87:38:a9:eb:49:dd:50:d5:ab:88:24:43: 19:64:3c:b8:b5:ff:3b:03:67:42:42:30:37:49:51:0e:03:ac: d6:50:ba:91:59:39:fc:0b:f7:74:5d:7c:de:00:b3:05:61:e0: ed:56:f0:d5:87:cf:48:62:aa:11:70:10:a6:28:ce:9d:33:8b: fe:55:6c:99:de:e3:71:32:5d:8e:8d:04:d5:c4:39:21:86:86: c1:77:88:f1:65:b1:a8:62:02:9f:be:fa:9d:19:21:9b:90:61: 04:dd:57:be:6f:59:b6:00:4b:30:8d:63:7a:1c:e7:99:54:2d: 0e:eb:d3:a1:d7:89:27:76:e6:e0:56:12:01:c0:37:32:ad:c7: 21:e6:b4:9c:d5:a7:49:32:72:1c:29:c4:3a:19:ee:38:55:26: 0c:5e:32:21:eb:05:c4:9e:23:98:f6:bf:86:ef:cf:18:63:7b: 7e:32:88:3b:cc:91:9f:e8:4d:3a:a9:87:db:34:e2:1a:f5:20: df:23:ab:2b:30:de:93:b9:5e:2e:69:f6:9f:70:3c:93:67:d5: 4f:a0:80:44 -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgICPWgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDAyMjZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkJDODBBQUYxMTAvBgNVBAUTKDhDOEY4Q0UyQUQ1NUI5MzY2QkVDNkVE RjQ5MkNEOUMxNDk4RTA2NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIcTopufKeMecShoqPVXctBrt8RvGq0yPgPsS2R9MtM9vWvju2qZUYl5sYJh4k aok3qM7uDlkBkzCKtTG/h2oT5Qbz3PENIbori+5eerlvgOXWDNXcZi//KhVOXrYO n5d9t2vRMqO9UX94mSCTXZ/DZyjDXxTIC2uqlDiR1yGUxgGzp3p0HoKQS0sLQMZp bJ6pNprlLuA8P8UJXFWyQsDzyQsJ58MAwDqQeERBTx+g+z1m2mbApVLw9H5adEJD 9PUZ9t6xlXqe0x4URgY1Op0FVN0hRhR+HXBRTjqfgAitPMsL+3yYwmGuJjkpXEPU gtJehI9B/FTya7r4o7P0L4HLAgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQUjI+M4q1V uTZr7G7fSSzZwUmOBmQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCQzgwQS80NzJFRjVCMkU3NUMx MUVDOUQ3RjkwRDhGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QkM4MEEvNDcyRUY1QjJFNzVDMTFFQzlEN0Y5MEQ4RjEyMjI0NjgvakktTTRx MVZ1VFpyN0c3ZlNTelp3VW1PQm1RLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAg/kwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAMpTYgDBAIp1/ADBAIp 3zQDBAJm37gDBALELrwwDQQCAAIwBwMFACwP/uAwDQYJKoZIhvcNAQELBQADggEB AA+7+HcUGdzCuQw7eJoYKw35m18A8wL3iZf9XR1dhpcWWwR1wjBCxxIPjYc4qetJ 3VDVq4gkQxlkPLi1/zsDZ0JCMDdJUQ4DrNZQupFZOfwL93RdfN4AswVh4O1W8NWH z0hiqhFwEKYozp0zi/5VbJne43EyXY6NBNXEOSGGhsF3iPFlsahiAp+++p0ZIZuQ YQTdV75vWbYASzCNY3oc55lULQ7r06HXiSd25uBWEgHANzKtxyHmtJzVp0kychwp xDoZ7jhVJgxeMiHrBcSeI5j2v4bvzxhje34yiDvMkZ/oTTqph9s04hr1IN8jqysw 3pO5Xi5p9p9wPJNn1U+ggEQ= -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:32 2026 by rpki-client