This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer File: kOiZk2355ouadQW_vmO4r6Cneuk.cer (raw, json) Hash identifier: tJhgrXeSuufXSabLwMMsdBbc9nL2r0NGaIT0trAAvTM= Subject key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EF4 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:06:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 26422 AS: 37239 IP: 41.76.200.0/21 IP: 154.70.224.0/19 IP: 154.72.56.0/21 IP: 196.46.184.0/22 IP: 197.234.16.0/20 IP: 2c0f:fe78::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16116 (0x3ef4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:06:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:c3:3b:4a:42:9e:4a:69:98:1c:2d:55:16: 73:b3:3a:98:90:ad:05:00:fd:36:78:d1:b7:bf:c1: cb:98:ff:3b:9f:f0:cc:f5:4c:88:ee:ab:9c:89:ca: 8c:9b:fc:98:8c:c6:c1:8c:a9:e1:9f:0e:23:13:78: 5a:4e:98:ab:2e:84:82:d8:7e:34:5f:34:99:00:f0: 99:a0:03:bc:67:a0:e1:00:50:b5:77:8a:bd:71:8f: 10:fc:cd:3e:bd:8c:4d:d0:e8:92:9a:aa:47:c5:1e: 61:bd:ac:50:e6:b1:b0:c2:6d:fd:72:92:95:d3:39: 3e:11:b6:ae:be:24:a6:ea:ff:8d:37:6f:b3:ff:3b: 7b:33:54:93:c4:a4:3e:dd:9e:32:b8:80:2a:19:57: 4d:cf:3e:d2:ab:98:c5:00:12:cb:28:ed:18:37:2f: 28:f2:30:7c:f1:36:9c:20:fe:22:e9:33:81:5a:a9: 0b:ea:4f:72:58:ad:c5:03:9f:c3:c6:cc:c5:a8:91: 47:50:cd:12:95:85:64:5e:cb:95:de:1f:7d:72:94: cd:ac:1a:ed:f3:64:00:5b:4e:02:00:7d:5d:94:a7: f2:37:dd:27:59:5d:18:51:30:96:64:77:40:c7:ac: 1f:b2:be:0f:c3:be:7b:ae:86:fd:5a:c8:f2:f5:a2: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 26422 37239 sbgp-ipAddrBlock: critical IPv4: 41.76.200.0/21 154.70.224.0/19 154.72.56.0/21 196.46.184.0/22 197.234.16.0/20 IPv6: 2c0f:fe78::/32 Signature Algorithm: sha256WithRSAEncryption 44:d4:82:63:cc:88:68:8a:30:40:90:e8:35:db:7c:63:8a:2b: 83:86:cc:e1:36:77:b0:0d:12:dc:43:d2:b4:8d:ce:e8:9e:b7: ee:4a:72:57:7c:a4:42:39:a0:0d:77:c6:dc:0d:cc:51:5a:87: a0:b9:9b:d6:34:57:f3:4e:3a:fd:2c:42:b6:ad:13:2e:59:96: 3f:cd:47:ac:d5:eb:da:d6:b1:7d:74:b5:0f:b1:f3:51:94:23: 0b:ee:dc:24:d5:cc:5d:12:c6:68:dc:a9:4e:80:3b:d7:c8:7e: 9f:cb:75:0f:8d:3b:ae:64:5d:17:4a:12:a4:20:ba:64:9b:fb: 82:bb:eb:92:fc:2d:a5:71:47:7b:b3:80:df:21:19:45:6e:aa: a2:6f:8e:35:cc:27:ee:97:77:ed:12:7c:1d:bd:a1:ad:f7:9c: cd:d2:28:78:88:74:d7:7e:ca:30:2e:1c:b9:1e:1c:2e:21:12: f4:e9:fc:47:91:55:78:ad:64:52:ce:21:fb:67:7e:df:2f:16: 8f:62:5b:04:fa:39:75:a5:27:12:18:e1:7b:1d:46:04:0c:52: c8:a8:08:76:bf:9c:ef:66:e2:22:02:c8:3e:d7:f6:48:00:d9: 05:4e:c3:12:cc:55:a8:5d:88:e9:82:21:7e:68:b4:0b:08:8f: d8:9d:20:86 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgICPvQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTA2MjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkYyQjE0QUYxMTAvBgNVBAUTKDkwRTg5OTkzNkRGOUU2OEI5QTc1MDVC RkJFNjNCOEFGQTBBNzdBRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGysM7SkKeSmmYHC1VFnOzOpiQrQUA/TZ40be/wcuY/zuf8Mz1TIjuq5yJyoyb /JiMxsGMqeGfDiMTeFpOmKsuhILYfjRfNJkA8JmgA7xnoOEAULV3ir1xjxD8zT69 jE3Q6JKaqkfFHmG9rFDmsbDCbf1ykpXTOT4Rtq6+JKbq/403b7P/O3szVJPEpD7d njK4gCoZV03PPtKrmMUAEsso7Rg3LyjyMHzxNpwg/iLpM4FaqQvqT3JYrcUDn8PG zMWokUdQzRKVhWRey5XeH31ylM2sGu3zZABbTgIAfV2Up/I33SdZXRhRMJZkd0DH rB+yvg/Dvnuuhv1ayPL1oo79AgMBAAGjggM2MIIDMjAdBgNVHQ4EFgQUkOiZk235 5ouadQW/vmO4r6CneukwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGMkIxNC80M0Y4MUI1OEVEMUMx MUVBOUY4MzhDNTVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RjJCMTQvNDNGODFCNThFRDFDMTFFQTlGODM4QzU1RjhBRUEyMjgva09pWmsy MzU1b3VhZFFXX3ZtTzRyNkNuZXVrLm1mdDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJ AgJnNgIDAJF3MEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDKUzIAwQFmkbg AwQDmkg4AwQCxC64AwQExeoQMA0EAgACMAcDBQAsD/54MA0GCSqGSIb3DQEBCwUA A4IBAQBE1IJjzIhoijBAkOg123xjiiuDhszhNnewDRLcQ9K0jc7onrfuSnJXfKRC OaANd8bcDcxRWoeguZvWNFfzTjr9LEK2rRMuWZY/zUes1eva1rF9dLUPsfNRlCML 7twk1cxdEsZo3KlOgDvXyH6fy3UPjTuuZF0XShKkILpkm/uCu+uS/C2lcUd7s4Df IRlFbqqib441zCful3ftEnwdvaGt95zN0ih4iHTXfsowLhy5HhwuIRL06fxHkVV4 rWRSziH7Z37fLxaPYlsE+jl1pScSGOF7HUYEDFLIqAh2v5zvZuIiAsg+1/ZIANkF TsMSzFWoXYjpgiF+aLQLCI/YnSCG -----END CERTIFICATE-----Generated at Sun Jan 25 04:19:53 2026 by rpki-client