This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer File: oTaOi_yA9OpasJcW0lchGTYYKFE.cer (raw, json) Hash identifier: SBVldSVWK14TnyoCiaY0lObImOHKfyI33HFZi/Z2n8U= Subject key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 385F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:48:14 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 11845 IP: 41.193.0.0/16 IP: 102.39.0.0/16 IP: 102.217.196.0/22 IP: 102.219.24.0/22 IP: 102.220.208.0/22 IP: 196.3.164.0 -- 196.3.179.255 IP: 196.22.192.0 -- 196.22.239.255 IP: 196.41.0.0/19 IP: 196.41.192.0/19 IP: 197.245.0.0/16 IP: 2c0f:fd58::/29 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14431 (0x385f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:48:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:b2:9f:56:47:26:bd:94:e2:02:6a:d2:0a: 8e:5a:54:44:d6:d9:98:1e:66:fa:1d:a4:31:ed:6a: 8d:ac:c0:c4:ac:14:b4:2a:b1:67:32:57:d6:38:26: 0c:76:a1:48:05:2d:3c:1d:14:27:89:61:ef:cf:f1: 3d:a9:8f:90:c7:b6:54:60:ce:b4:fe:3c:3a:45:bc: 09:31:df:06:41:eb:16:2e:a4:4b:7d:7e:e3:e0:62: c3:03:92:5f:2d:65:12:1e:60:a7:79:31:56:be:12: ed:7c:2d:36:f9:c2:f3:c1:f3:24:98:82:41:4c:df: 5d:4a:ad:2e:34:11:c4:ce:b4:bb:05:61:99:89:66: ec:d7:cd:0e:25:d9:24:85:84:dc:0c:3a:a4:e6:50: 9d:ba:77:43:20:cf:eb:92:b8:de:a1:db:e3:e4:3d: 14:e9:b9:2b:61:5d:37:a8:32:56:e8:30:3d:cd:d7: e4:29:19:ad:80:ef:c2:6f:5b:9d:e0:2e:d7:fc:db: a6:4c:ca:bb:fb:65:47:ba:30:20:c2:21:9d:49:9c: 60:02:c3:74:13:c6:9f:0d:28:8f:ba:f6:88:cb:5e: 78:79:69:2e:7c:e9:56:82:3a:71:71:da:07:55:79: 89:5e:a6:e4:3f:3b:50:4d:05:c8:74:62:a9:6c:7e: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 11845 sbgp-ipAddrBlock: critical IPv4: 41.193.0.0/16 102.39.0.0/16 102.217.196.0/22 102.219.24.0/22 102.220.208.0/22 196.3.164.0-196.3.179.255 196.22.192.0-196.22.239.255 196.41.0.0/19 196.41.192.0/19 197.245.0.0/16 IPv6: 2c0f:fd58::/29 Signature Algorithm: sha256WithRSAEncryption 31:a6:f0:3a:67:37:c6:67:9e:41:19:51:dd:c2:93:10:f8:c1: a9:f5:43:15:a3:9e:84:88:a7:bb:d4:09:47:eb:29:b1:d6:a5: a1:64:17:70:eb:5a:f7:c7:25:84:3a:b3:5b:b5:d1:88:75:2f: cb:93:e6:59:61:b8:6e:ab:eb:9d:51:72:15:91:19:02:e1:95: 02:71:8f:57:06:d0:f6:49:a9:83:3b:5d:85:93:01:20:5d:e5: 72:3c:1b:95:d2:fa:e1:39:1d:0b:ec:86:8d:d0:81:67:90:b9: fa:c0:77:36:f9:27:17:59:46:ad:1f:bd:71:1a:f3:df:2f:d9: 3f:3a:6a:04:b9:55:6e:4a:57:14:cc:42:78:4c:55:1f:36:29: ee:e5:f3:22:ef:bf:fd:20:31:12:27:d5:df:40:78:e1:f7:64: 2d:7f:05:5a:f8:a8:f6:4f:94:ac:d1:ef:a9:0c:7f:36:22:5f: 53:05:66:8d:41:a1:82:83:3d:65:4a:63:ae:5b:c7:88:19:39: ab:97:82:ca:02:22:76:15:b8:09:18:30:7e:1e:c0:7e:5c:1e: 9e:90:3e:4a:dd:e7:c0:21:dc:3c:b1:d6:9a:53:47:6d:fc:73: a5:a3:62:0f:9b:85:9f:51:f9:98:56:f7:0b:59:6d:fb:2f:ba: bd:a1:88:b5 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgICOF8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDQ4MTRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjJFMzlFQUYxMTAvBgNVBAUTKEExMzY4RThCRkM4MEY0RUE1QUIwOTcx NkQyNTcyMTE5MzYxODI4NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfPLKfVkcmvZTiAmrSCo5aVETW2ZgeZvodpDHtao2swMSsFLQqsWcyV9Y4Jgx2 oUgFLTwdFCeJYe/P8T2pj5DHtlRgzrT+PDpFvAkx3wZB6xYupEt9fuPgYsMDkl8t ZRIeYKd5MVa+Eu18LTb5wvPB8ySYgkFM311KrS40EcTOtLsFYZmJZuzXzQ4l2SSF hNwMOqTmUJ26d0Mgz+uSuN6h2+PkPRTpuSthXTeoMlboMD3N1+QpGa2A78JvW53g Ltf826ZMyrv7ZUe6MCDCIZ1JnGACw3QTxp8NKI+69ojLXnh5aS586VaCOnFx2gdV eYlepuQ/O1BNBch0YqlsfvI5AgMBAAGjggNcMIIDWDAdBgNVHQ4EFgQUoTaOi/yA 9OpasJcW0lchGTYYKFEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyRTM5RS8yMDAxOTE4NDgwQUIx MUU2QTExN0FFNjNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MkUzOUUvMjAwMTkxODQ4MEFCMTFFNkExMTdBRTYzRjhBRUEyMjgvb1RhT2lf eUE5T3Bhc0pjVzBsY2hHVFlZS0ZFLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIuRTBxBggrBgEFBQcBBwEB/wRiMGAwTwQCAAEwSQMDACnBAwMAZicDBAJm2cQD BAJm2xgDBAJm3NAwDAMEAsQDpAMEAsQDsDAMAwQGxBbAAwQExBbgAwQFxCkAAwQF xCnAAwMAxfUwDQQCAAIwBwMFAywP/VgwDQYJKoZIhvcNAQELBQADggEBADGm8Dpn N8ZnnkEZUd3CkxD4wan1QxWjnoSIp7vUCUfrKbHWpaFkF3DrWvfHJYQ6s1u10Yh1 L8uT5llhuG6r651RchWRGQLhlQJxj1cG0PZJqYM7XYWTASBd5XI8G5XS+uE5HQvs ho3QgWeQufrAdzb5JxdZRq0fvXEa898v2T86agS5VW5KVxTMQnhMVR82Ke7l8yLv v/0gMRIn1d9AeOH3ZC1/BVr4qPZPlKzR76kMfzYiX1MFZo1BoYKDPWVKY65bx4gZ OauXgsoCInYVuAkYMH4ewH5cHp6QPkrd58Ah3Dyx1ppTR238c6WjYg+bhZ9R+ZhW 9wtZbfsvur2hiLU= -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:40 2026 by rpki-client