This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer File: vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer (raw, json) Hash identifier: Shy+T3SrWk6H5mSiUsLMReHTXHlJDo2v5m7htY8jvDY= Subject key identifier: BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EA8 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:53:12 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37254 IP: 41.76.216.0/21 IP: 102.69.168.0 -- 102.69.179.255 IP: 102.222.196.0/22 IP: 2c0f:f4a8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16040 (0x3ea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:53:12 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E8561AF, serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:57:c6:1f:45:b0:9e:d0:19:e3:14:cb:7e: a4:d2:07:0e:12:f8:04:ad:e6:a7:8f:f2:79:02:65: 3d:cf:38:bf:55:8b:cd:61:30:b9:46:3d:6f:6d:2f: 14:b2:e8:dc:33:79:4e:a3:f4:1d:bd:92:99:b4:67: 12:b6:9b:31:a8:df:9c:53:16:4c:83:04:7f:e8:05: 05:18:6e:5b:e9:f8:2d:43:1c:40:3a:6a:97:89:ca: bd:bb:d1:37:44:88:8e:86:cf:b1:fa:b0:99:d6:7a: 25:9c:f6:07:74:ef:29:07:19:e9:c9:49:a4:f2:f9: cc:19:0c:eb:95:84:c0:b5:da:94:63:00:f5:1b:e5: b0:84:e9:16:27:06:ef:42:e9:cc:81:f8:32:95:9b: db:ac:9e:4a:89:99:d5:9a:f0:85:74:70:22:61:98: 41:37:82:2c:a6:2d:ed:7e:9c:52:e4:3c:d8:4f:2d: 43:dc:7f:ae:49:b9:c0:73:63:a4:58:c7:12:cd:c6: d2:a5:b7:f6:8a:97:82:26:fb:e4:0d:8d:76:d8:59: 8b:38:76:e3:d9:87:75:44:48:8b:f4:e2:e1:e1:94: ac:d7:1e:da:fc:01:73:2d:9e:99:d1:fa:6b:55:bb: 65:5c:40:a1:7d:fc:e7:7e:3e:49:77:16:a0:63:61: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37254 sbgp-ipAddrBlock: critical IPv4: 41.76.216.0/21 102.69.168.0-102.69.179.255 102.222.196.0/22 IPv6: 2c0f:f4a8::/32 Signature Algorithm: sha256WithRSAEncryption 41:88:4b:b4:58:2d:4f:bb:a7:9f:c9:2f:06:1a:3f:38:b5:d6: d0:bd:db:33:dc:b1:d4:59:28:13:fd:06:ab:71:17:03:7d:18: 1b:23:df:3b:f6:79:45:63:cb:1e:fb:d7:4c:16:4a:03:28:ed: 87:e0:3b:2a:58:7a:0c:70:ad:7d:4f:42:96:b9:68:98:f7:4c: d1:d9:ee:3b:61:44:29:fa:b9:4c:5d:6d:86:4a:6b:55:7e:94: ff:90:a6:ac:4e:c8:e0:c4:fa:f5:8c:cf:7b:f1:47:04:ac:11: a8:b8:ba:03:0e:81:12:0c:24:03:56:5a:29:65:29:e5:d5:41: 6c:26:a7:de:c3:b6:5b:0d:86:23:36:83:42:49:7b:e5:ab:1a: 06:c8:1a:46:56:54:56:d9:92:8e:ba:7d:7f:11:e7:09:6e:b6: b7:1d:83:c4:e6:1a:87:84:92:d6:4a:5b:87:b2:49:85:0b:3d: 82:bf:1b:5a:eb:cb:ac:23:2b:d6:be:e9:67:c5:86:34:37:f5: 9c:16:22:70:7e:e6:96:3e:69:df:b6:b4:37:01:fc:52:e6:da: 82:30:d6:38:e0:99:34:2b:b7:f4:1e:e7:ee:27:85:da:cb:2f: 68:94:45:c8:d9:d8:88:9b:76:22:76:f7:7d:45:d3:81:ce:28: e1:d3:ae:90 -----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgICPqgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDUzMTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkU4NTYxQUYxMTAvBgNVBAUTKEJERjZGOTlDRDA4MkMxM0JFREE1REEw RTg5ODg4REQ1MzJDODYzMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCVVfGH0WwntAZ4xTLfqTSBw4S+ASt5qeP8nkCZT3POL9Vi81hMLlGPW9tLxSy 6NwzeU6j9B29kpm0ZxK2mzGo35xTFkyDBH/oBQUYblvp+C1DHEA6apeJyr270TdE iI6Gz7H6sJnWeiWc9gd07ykHGenJSaTy+cwZDOuVhMC12pRjAPUb5bCE6RYnBu9C 6cyB+DKVm9usnkqJmdWa8IV0cCJhmEE3giymLe1+nFLkPNhPLUPcf65JucBzY6RY xxLNxtKlt/aKl4Im++QNjXbYWYs4duPZh3VESIv04uHhlKzXHtr8AXMtnpnR+mtV u2VcQKF9/Od+Pkl3FqBjYVvZAgMBAAGjggMuMIIDKjAdBgNVHQ4EFgQUvfb5nNCC wTvtpdoOiYiN1TLIYwcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFODU2MS9CMEQ3MjBFMDFDM0Yx MUVDQkEyMjBEMEJEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTg1NjEvQjBENzIwRTAxQzNGMTFFQ0JBMjIwRDBCRDhBMDE0Q0UvdmZiNW5O Q0N3VHZ0cGRvT2lZaU4xVExJWXdjLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkYYwQgYIKwYBBQUHAQcBAf8EMzAxMCAEAgABMBoDBAMpTNgwDAMEA2ZFqAME AmZFsAMEAmbexDANBAIAAjAHAwUALA/0qDANBgkqhkiG9w0BAQsFAAOCAQEAQYhL tFgtT7unn8kvBho/OLXW0L3bM9yx1FkoE/0Gq3EXA30YGyPfO/Z5RWPLHvvXTBZK Ayjth+A7Klh6DHCtfU9ClrlomPdM0dnuO2FEKfq5TF1thkprVX6U/5CmrE7I4MT6 9YzPe/FHBKwRqLi6Aw6BEgwkA1ZaKWUp5dVBbCan3sO2Ww2GIzaDQkl75asaBsga RlZUVtmSjrp9fxHnCW62tx2DxOYah4SS1kpbh7JJhQs9gr8bWuvLrCMr1r7pZ8WG NDf1nBYicH7mlj5p37a0NwH8UubagjDWOOCZNCu39B7n7ieF2ssvaJRFyNnYiJt2 Inb3fUXTgc4o4dOukA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:58 2026 by rpki-client