This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wZn8M3XABV4cIAIEqXeWkq9n_bE.cer File: wZn8M3XABV4cIAIEqXeWkq9n_bE.cer (raw, json) Hash identifier: Em7atFK5wXiBQa7YGQAyAq9dxC+BjY8qThBmpiEJ+C0= Subject key identifier: C1:99:FC:33:75:C0:05:5E:1C:20:02:04:A9:77:96:92:AF:67:FD:B1 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A56 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:06:47 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37723 IP: 102.22.104.0/22 IP: 2c0f:eb60::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14934 (0x3a56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:06:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3665E95AF, serialNumber=C199FC3375C0055E1C200204A9779692AF67FDB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:1d:d2:90:46:c4:ab:33:c9:76:ef:fd:15: 9f:90:e4:16:a3:dc:84:fe:13:5f:5e:2f:6e:85:69: 83:5a:48:9f:67:30:ff:63:20:df:f0:ff:be:03:c2: cd:4a:25:8f:7f:44:fa:be:cd:f5:07:67:58:17:ff: da:02:cc:7d:33:28:5c:e4:60:6c:45:a6:9a:52:c6: fa:52:ea:6f:77:bc:0e:7c:b6:50:7c:46:9c:b4:77: 62:bd:dd:44:25:0d:6f:b3:0a:f5:17:f7:e2:62:22: 58:94:84:92:ee:24:ee:b0:d7:b8:b4:13:8d:f9:40: d7:99:a3:f1:7e:03:f4:b6:8b:88:67:6f:00:4f:1b: 0d:b0:7c:d1:e2:a8:20:c6:5f:24:7c:11:8b:70:4b: 60:e4:91:a6:57:fb:2c:ff:5b:e2:14:95:7d:c2:33: 45:d0:08:93:4e:73:51:33:41:f9:bc:63:df:47:ef: 43:3f:b0:7e:7d:16:e8:50:30:a4:ad:bd:37:fa:1a: ca:0f:e7:1b:80:4f:7c:7e:66:bc:9f:52:9b:6b:85: 90:4c:64:90:76:dc:36:17:c1:54:25:80:50:b4:98: 6f:52:65:5b:4f:c4:6d:f6:95:da:29:28:43:4e:e9: ec:3d:59:f7:3b:da:dd:1d:b3:9f:d3:ba:20:93:33: 2e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:99:FC:33:75:C0:05:5E:1C:20:02:04:A9:77:96:92:AF:67:FD:B1 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3665E95/BB835CD0AD5E11EF9618654E762E951A/wZn8M3XABV4cIAIEqXeWkq9n_bE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37723 sbgp-ipAddrBlock: critical IPv4: 102.22.104.0/22 IPv6: 2c0f:eb60::/32 Signature Algorithm: sha256WithRSAEncryption 47:53:d2:9c:73:6d:c3:3c:ec:7b:62:1a:b7:e1:50:d0:90:10: e1:c1:8e:3e:41:c9:98:f1:cc:af:99:7d:bb:55:d7:2e:68:24: 2b:16:29:6b:ac:d7:a9:c6:7e:46:d4:3d:79:80:29:67:53:8d: a8:84:a8:44:cb:f5:50:99:b4:1f:6b:ef:c5:d5:f0:c9:e1:66: f0:e0:c9:fc:3e:19:61:02:80:8a:1d:4c:94:1c:5f:b2:68:ce: 0e:df:ba:c9:54:62:20:10:f5:21:e2:ad:e4:ed:ba:96:fc:f5: 0f:19:67:ad:b4:86:be:33:a6:1d:da:33:c4:4d:4f:4d:f3:58: fb:fa:ff:8a:c2:c0:a5:e9:ce:f0:26:3e:17:6d:b1:b9:ec:4e: ce:04:34:dc:d6:69:b8:c8:90:ad:89:4d:33:2b:35:7c:e2:a4: 3e:71:b8:0a:0c:ed:bc:69:08:59:63:41:0e:15:fe:f8:5a:e5: 65:ff:b7:2d:c2:49:f4:4e:66:c4:96:bd:0d:aa:e0:65:7e:71: f8:81:1f:a2:30:ab:a2:f8:59:cf:af:25:6e:40:52:56:13:39: 97:4a:71:e1:c7:a4:85:3c:ac:ba:43:dd:16:3b:e7:05:37:49: f9:d9:1c:67:c9:96:b8:bc:5b:d9:ce:e4:d6:e5:b4:c5:be:36: 9c:16:14:05 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOlYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjA2NDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjY1RTk1QUYxMTAvBgNVBAUTKEMxOTlGQzMzNzVDMDA1NUUxQzIwMDIw NEE5Nzc5NjkyQUY2N0ZEQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtgR3SkEbEqzPJdu/9FZ+Q5Baj3IT+E19eL26FaYNaSJ9nMP9jIN/w/74Dws1K JY9/RPq+zfUHZ1gX/9oCzH0zKFzkYGxFpppSxvpS6m93vA58tlB8Rpy0d2K93UQl DW+zCvUX9+JiIliUhJLuJO6w17i0E435QNeZo/F+A/S2i4hnbwBPGw2wfNHiqCDG XyR8EYtwS2DkkaZX+yz/W+IUlX3CM0XQCJNOc1EzQfm8Y99H70M/sH59FuhQMKSt vTf6GsoP5xuAT3x+ZryfUptrhZBMZJB23DYXwVQlgFC0mG9SZVtPxG32ldopKENO 6ew9Wfc72t0ds5/TuiCTMy47AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUwZn8M3XA BV4cIAIEqXeWkq9n/bEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2NUU5NS9CQjgzNUNEMEFENUUx MUVGOTYxODY1NEU3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NjVFOTUvQkI4MzVDRDBBRDVFMTFFRjk2MTg2NTRFNzYyRTk1MUEvd1puOE0z WEFCVjRjSUFJRXFYZVdrcTluX2JFLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAk1swLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmFmgwDQQCAAIwBwMF ACwP62AwDQYJKoZIhvcNAQELBQADggEBAEdT0pxzbcM87HtiGrfhUNCQEOHBjj5B yZjxzK+ZfbtV1y5oJCsWKWus16nGfkbUPXmAKWdTjaiEqETL9VCZtB9r78XV8Mnh ZvDgyfw+GWECgIodTJQcX7Jozg7fuslUYiAQ9SHireTtupb89Q8ZZ620hr4zph3a M8RNT03zWPv6/4rCwKXpzvAmPhdtsbnsTs4ENNzWabjIkK2JTTMrNXzipD5xuAoM 7bxpCFljQQ4V/vha5WX/ty3CSfROZsSWvQ2q4GV+cfiBH6Iwq6L4Wc+vJW5AUlYT OZdKceHHpIU8rLpD3RY75wU3SfnZHGfJlri8W9nO5NbltMW+NpwWFAU= -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:12 2026 by rpki-client