This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer File: ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer (raw, json) Hash identifier: zFtBuRg4sKR43axw7Get4oz9RPYs3mG2JtK29zKuUwc= Subject key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3E8D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:48:44 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 36912 IP: 41.202.192.0/19 IP: 102.244.0.0/14 IP: 2c0f:f070::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16013 (0x3e8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:48:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:b8:99:22:0e:df:01:1f:83:5c:42:59:1b: e6:23:2d:25:30:0c:d2:ec:1a:c6:db:d6:29:5a:78: f3:ab:69:2d:87:ff:b1:d1:a4:19:0b:b3:06:ab:24: d2:ce:62:8d:75:f5:9c:c8:50:59:dd:27:9c:72:e2: 14:a1:f7:f4:6f:84:e1:32:21:9a:e7:dd:0b:5a:1c: b5:6a:36:e9:cd:c0:be:42:07:de:fc:2e:85:01:54: 48:d1:ee:29:1e:2d:48:e9:df:34:b2:59:b8:87:5f: 73:d7:74:52:e7:99:ed:46:69:66:13:63:f2:85:18: 25:13:b8:b8:97:f9:58:dc:39:5a:31:50:8b:5f:fe: 27:c6:c5:8d:e0:6c:95:4c:b0:9f:2b:59:b8:d6:71: 94:a2:87:d8:4a:18:18:1a:d9:7e:12:f6:0f:6d:a0: 64:af:66:f2:dc:fc:07:9d:5e:d3:f7:41:4e:19:52: 0a:1d:a8:1a:72:93:e7:d3:b4:db:e9:92:20:36:35: 1d:8d:07:78:03:c1:1d:44:6c:b8:f3:da:2c:4d:a3: 0a:20:bb:7a:4a:bf:13:65:a4:d6:2a:3c:da:96:b1: 1c:25:3a:c9:c3:14:e4:e0:fa:da:23:43:76:86:4e: a7:31:1b:63:4d:e0:80:4d:61:d2:23:2f:39:e5:2b: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 36912 sbgp-ipAddrBlock: critical IPv4: 41.202.192.0/19 102.244.0.0/14 IPv6: 2c0f:f070::/32 Signature Algorithm: sha256WithRSAEncryption 6a:c1:76:b3:2e:25:3a:e8:15:97:32:93:96:7a:0d:ae:60:04: ba:21:3f:ad:cc:ba:01:ce:6f:b0:73:f8:80:cf:40:a5:4a:84: fc:72:8a:70:ab:bb:f3:cd:dd:b2:b1:8f:00:39:5c:20:52:04: 72:e6:2b:2f:60:f7:75:32:77:b0:1c:fe:40:5f:15:98:8f:e5: 0b:3d:85:78:df:d7:c5:04:ae:d2:8b:41:d2:78:db:1c:f8:75: 9c:c2:e4:17:af:78:96:25:9c:9b:a6:de:71:42:8d:ba:94:4e: 85:80:c4:0f:8d:b1:ff:3a:40:9e:f0:00:d1:92:91:96:23:20: 93:d7:ba:21:06:d8:7f:30:dd:de:0a:bd:b1:62:4e:1a:99:64: 95:18:4d:60:3e:29:f2:a1:90:46:f8:9c:2d:f1:e0:10:a2:80: 53:4d:8b:ab:46:4f:4a:3e:b1:f1:56:a1:73:f4:66:d0:d4:ec: a9:0a:5c:18:bf:a5:75:d0:a0:b3:07:ac:32:cc:a3:c5:a7:c2: e2:7b:3e:de:3a:0a:e2:07:52:ef:0e:32:55:ab:4e:18:2d:99: 81:1d:23:b7:7b:28:cf:57:14:8b:75:52:e0:58:30:fe:b4:f9: bf:41:e9:50:5a:60:17:5c:f9:96:6d:58:28:5a:b2:d2:c8:42: 57:fc:50:39 -----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgICPo0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDQ4NDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkU0QjY5QUYxMTAvBgNVBAUTKENBNjY0MkVBOUFGQ0M3M0FBMjRBQTQw NDc1NDRCMTdDMjYwM0NCRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3jriZIg7fAR+DXEJZG+YjLSUwDNLsGsbb1ilaePOraS2H/7HRpBkLswarJNLO Yo119ZzIUFndJ5xy4hSh9/RvhOEyIZrn3QtaHLVqNunNwL5CB978LoUBVEjR7ike LUjp3zSyWbiHX3PXdFLnme1GaWYTY/KFGCUTuLiX+VjcOVoxUItf/ifGxY3gbJVM sJ8rWbjWcZSih9hKGBga2X4S9g9toGSvZvLc/AedXtP3QU4ZUgodqBpyk+fTtNvp kiA2NR2NB3gDwR1EbLjz2ixNowogu3pKvxNlpNYqPNqWsRwlOsnDFOTg+tojQ3aG TqcxG2NN4IBNYdIjLznlK1XFAgMBAAGjggMfMIIDGzAdBgNVHQ4EFgQUymZC6pr8 xzqiSqQEdUSxfCYDy9IwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFNEI2OS9ERTE0NzcwRTg4NzMx MUVFODlCODExNDM0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTRCNjkvREUxNDc3MEU4ODczMTFFRTg5QjgxMTQzNEFEOUU2RkMveW1aQzZw cjh4enFpU3FRRWRVU3hmQ1lEeTlJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkDAwMwYIKwYBBQUHAQcBAf8EJDAiMBEEAgABMAsDBAUpysADAwJm9DANBAIA AjAHAwUALA/wcDANBgkqhkiG9w0BAQsFAAOCAQEAasF2sy4lOugVlzKTlnoNrmAE uiE/rcy6Ac5vsHP4gM9ApUqE/HKKcKu7883dsrGPADlcIFIEcuYrL2D3dTJ3sBz+ QF8VmI/lCz2FeN/XxQSu0otB0njbHPh1nMLkF694liWcm6becUKNupROhYDED42x /zpAnvAA0ZKRliMgk9e6IQbYfzDd3gq9sWJOGplklRhNYD4p8qGQRvicLfHgEKKA U02Lq0ZPSj6x8Vahc/Rm0NTsqQpcGL+lddCgswesMsyjxafC4ns+3joK4gdS7w4y VatOGC2ZgR0jt3soz1cUi3VS4Fgw/rT5v0HpUFpgF1z5lm1YKFqy0shCV/xQOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:11 2026 by rpki-client