This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer File: wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer (raw, json) Hash identifier: YXKVeXk0w+DOQcEQXZ9Hz2upoBHsRqRGjcvFBe90ibo= Subject key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C0D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:09:54 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 15964 IP: 41.204.64.0/19 IP: 154.72.128.0/18 IP: 197.159.0.0/19 IP: 2001:4268::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15373 (0x3c0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:09:54 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:5e:4e:8c:a3:20:7d:1c:93:22:a8:2a:86: 23:cc:a3:e9:31:45:9e:d2:30:71:46:d2:4a:08:77: 5e:9a:42:f4:ca:46:7f:f3:f2:f2:0d:92:82:ed:5b: af:f7:0f:f5:87:46:a0:e1:7d:89:80:e3:a3:1e:90: 9e:3e:91:5f:d0:dd:dd:45:a8:f7:72:48:38:05:0e: 2e:34:e8:ab:3e:29:44:02:ed:db:27:3e:67:ad:2d: df:59:50:61:0e:d8:fb:2d:6a:26:f2:52:ac:fb:4a: b6:00:11:d0:0c:b4:e9:35:16:ae:eb:de:b3:d9:7c: e4:db:a2:17:57:3d:cc:28:66:ee:ff:f3:1d:2b:12: 61:95:d6:23:af:eb:6d:29:ff:0a:f0:8c:5d:7f:b3: 43:3d:4c:d9:a1:01:18:f5:cc:57:09:91:fc:69:15: f2:45:69:58:ba:9b:ca:1f:52:39:82:2a:8a:07:6f: e8:23:e5:14:c6:fa:79:54:c9:6b:35:48:84:93:fe: 8a:d2:80:f6:87:81:60:e3:63:8f:eb:49:ca:23:ce: 58:b8:42:56:fb:0e:f0:8a:02:76:22:2a:79:c2:82: 93:21:d7:5d:2b:75:ea:ee:52:ba:93:8f:b4:17:57: 3c:db:61:1e:dd:6a:40:11:28:f6:a9:d1:65:bc:fa: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 15964 sbgp-ipAddrBlock: critical IPv4: 41.204.64.0/19 154.72.128.0/18 197.159.0.0/19 IPv6: 2001:4268::/32 Signature Algorithm: sha256WithRSAEncryption 27:3c:d3:ac:b2:e0:f1:6d:33:22:34:98:95:79:d7:36:c3:11: a0:bd:71:95:71:90:3b:3e:7b:b9:73:bf:2f:07:b4:09:b4:f2: 6f:db:7f:d1:ba:7a:d0:72:c1:54:dc:fa:b5:7b:34:c3:c9:8c: da:f3:98:67:63:f3:5a:0d:16:f2:2f:04:88:ba:3a:83:f7:4c: 8b:2c:fc:0f:0c:32:30:b4:7b:0a:b1:f9:eb:3a:e0:86:6a:55: 8a:8a:f0:8f:ee:0c:9b:26:ab:9d:67:ba:1e:3f:09:62:3e:a8: 46:8c:0d:de:f8:43:c6:5e:ef:22:39:2b:f3:b4:65:91:10:1f: 9c:b6:c8:94:88:96:0d:4c:c3:8e:31:df:13:56:a7:19:cf:3e: 0a:12:66:28:f0:e2:c7:e9:67:20:15:48:58:09:90:0b:b2:26: 78:cb:23:f4:f6:39:2d:84:31:f5:1b:48:2e:44:b8:5f:3f:9e: 5c:4a:8d:59:7d:6e:d7:1a:1a:39:d1:e2:d2:e7:c4:de:7e:77: 6c:f6:35:0e:38:27:4e:18:8a:fa:88:12:77:b0:d9:8b:97:dd: 96:e5:0f:b6:37:7a:5a:5d:e8:c2:52:f3:78:6e:42:1c:55:a4: 0b:fd:67:60:bc:48:25:aa:a1:22:2b:4d:83:89:40:ef:7f:48: c6:99:64:21 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgICPA0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzA5NTRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjk1OTFDQUYxMTAvBgNVBAUTKEMxMDkwRDM3REE5RkZFRUUxQTlDMjI5 QkFGRjExOTBCRDIyRTg5MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4XV5OjKMgfRyTIqgqhiPMo+kxRZ7SMHFG0koId16aQvTKRn/z8vINkoLtW6/3 D/WHRqDhfYmA46MekJ4+kV/Q3d1FqPdySDgFDi406Ks+KUQC7dsnPmetLd9ZUGEO 2PstaibyUqz7SrYAEdAMtOk1Fq7r3rPZfOTbohdXPcwoZu7/8x0rEmGV1iOv620p /wrwjF1/s0M9TNmhARj1zFcJkfxpFfJFaVi6m8ofUjmCKooHb+gj5RTG+nlUyWs1 SIST/orSgPaHgWDjY4/rScojzli4Qlb7DvCKAnYiKnnCgpMh110rderuUrqTj7QX VzzbYR7dakARKPap0WW8+q9xAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUwQkNN9qf /u4anCKbr/EZC9IuiTQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5NTkxQy8zNDc0MDMyRUMyNDcx MUVEQUZBNkM3OUZGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OTU5MUMvMzQ3NDAzMkVDMjQ3MTFFREFGQTZDNzlGRjEyMjI0Njgvd1FrTk45 cWZfdTRhbkNLYnJfRVpDOUl1aVRRLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgI+XDA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBSnMQAMEBppIgAMEBcWf ADANBAIAAjAHAwUAIAFCaDANBgkqhkiG9w0BAQsFAAOCAQEAJzzTrLLg8W0zIjSY lXnXNsMRoL1xlXGQOz57uXO/Lwe0CbTyb9t/0bp60HLBVNz6tXs0w8mM2vOYZ2Pz Wg0W8i8EiLo6g/dMiyz8DwwyMLR7CrH56zrghmpViorwj+4MmyarnWe6Hj8JYj6o RowN3vhDxl7vIjkr87RlkRAfnLbIlIiWDUzDjjHfE1anGc8+ChJmKPDix+lnIBVI WAmQC7ImeMsj9PY5LYQx9RtILkS4Xz+eXEqNWX1u1xoaOdHi0ufE3n53bPY1Djgn ThiK+ogSd7DZi5fdluUPtjd6Wl3owlLzeG5CHFWkC/1nYLxIJaqhIitNg4lA739I xplkIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:50 2026 by rpki-client