This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer File: z9HOEVgucPjVG3hwclwV72fgxlE.cer (raw, json) Hash identifier: ZsvdEIS7IFfqr/vXRFZrdkfWyH68rCVi0KpIeIelgKU= Subject key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 38FF Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:13:41 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37538 IP: 41.207.232.0/22 IP: 154.72.240.0/20 IP: 2c0f:f8e0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14591 (0x38ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:13:41 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36DB4B4AF, serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:0c:6c:ec:f8:09:29:3f:9e:56:b4:d7:f6: c2:48:4b:fd:89:25:fa:f7:a1:55:7b:69:4c:70:54: 14:08:68:dc:4d:34:3b:6b:57:8e:be:6b:bb:13:34: d0:90:44:0d:8b:7f:52:6a:48:95:11:09:93:76:f3: 5e:f4:91:e7:88:f0:78:95:77:a7:ec:d5:4a:40:58: 3e:3f:9c:d3:d2:0f:c5:44:6f:37:44:04:0e:ee:5e: 35:cf:b5:1c:12:0c:ba:8c:d8:28:16:e8:ce:60:17: ee:e7:27:fe:63:cd:73:87:b2:44:ab:a5:70:9b:2c: e6:48:b1:68:da:a1:9b:f9:b4:70:e4:d3:31:15:ad: e3:74:17:93:03:64:ae:fe:25:32:97:92:ac:12:d7: ae:c3:6a:f6:0a:ee:d4:c6:14:da:bf:4b:2e:d8:1f: e6:4a:b4:de:eb:e9:2c:75:f7:6d:e8:81:ec:45:dd: 4a:90:f3:61:cb:2e:21:26:49:7e:e9:42:1a:72:74: de:3d:a4:18:49:eb:66:f3:95:f0:2a:96:5b:83:d8: a0:a8:0d:79:3a:08:47:1b:6a:7b:ba:38:14:95:4f: 9d:23:5e:df:29:c2:43:c2:87:75:47:96:1c:9d:3d: ba:0f:16:f1:54:e9:58:11:33:bc:6c:1b:c4:a6:d5: 10:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37538 sbgp-ipAddrBlock: critical IPv4: 41.207.232.0/22 154.72.240.0/20 IPv6: 2c0f:f8e0::/32 Signature Algorithm: sha256WithRSAEncryption 33:b9:96:f6:48:a2:20:3d:bd:b3:73:ee:0d:b8:98:e1:d4:5c: 70:d9:eb:30:60:63:11:3b:07:b5:2e:1c:cb:59:3c:dd:7c:95: b1:cb:cc:01:ba:79:8e:8c:93:8a:45:3b:a1:a8:24:0d:0f:0e: 33:14:c8:19:db:cb:da:aa:b8:95:bf:56:e9:2d:ab:d4:1f:69: 02:c4:0e:29:55:b9:cd:9a:43:3a:9f:81:cf:c2:54:79:b1:93: d7:38:8f:ed:03:4f:bb:6b:62:f0:97:71:42:09:55:7e:9d:dc: ac:9b:10:72:f3:86:b1:35:a2:90:bf:76:90:47:d7:9c:13:4e: dd:7d:62:5c:a0:aa:2e:5e:df:90:94:4d:74:b7:90:24:bb:df: 67:61:3e:03:8b:6a:dd:8b:65:7e:c7:2a:07:67:1e:74:d7:7c: 26:ae:ce:5e:fb:d7:2b:b2:68:f7:50:59:73:3f:0d:74:6b:b5: c0:98:bd:6e:88:5c:d6:26:99:8e:16:57:bd:3b:21:9e:db:51: ad:2d:47:41:c7:3c:ba:34:14:02:6f:9e:29:ea:f1:f5:22:bf: a8:b6:62:10:c0:3c:99:66:89:7f:e5:8b:20:ab:b8:9d:4f:5d: 00:72:ed:3a:fb:e4:87:39:4d:5f:46:c1:f2:ec:fe:89:a3:86: 23:6f:13:ec -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOP8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTEzNDFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkRCNEI0QUYxMTAvBgNVBAUTKENGRDFDRTExNTgyRTcwRjhENTFCNzg3 MDcyNUMxNUVGNjdFMEM2NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfGwxs7PgJKT+eVrTX9sJIS/2JJfr3oVV7aUxwVBQIaNxNNDtrV46+a7sTNNCQ RA2Lf1JqSJURCZN28170keeI8HiVd6fs1UpAWD4/nNPSD8VEbzdEBA7uXjXPtRwS DLqM2CgW6M5gF+7nJ/5jzXOHskSrpXCbLOZIsWjaoZv5tHDk0zEVreN0F5MDZK7+ JTKXkqwS167DavYK7tTGFNq/Sy7YH+ZKtN7r6Sx1923ogexF3UqQ82HLLiEmSX7p QhpydN49pBhJ62bzlfAqlluD2KCoDXk6CEcbanu6OBSVT50jXt8pwkPCh3VHlhyd PboPFvFU6VgRM7xsG8Sm1RBzAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUz9HOEVgu cPjVG3hwclwV72fgxlEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZEQjRCNC9DRUVFQURFQ0I0NjEx MUU1QjRBOTA4NTRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2REI0QjQvQ0VFRUFERUNCNDYxMTFFNUI0QTkwODU0RjhBRUEyMjgvejlIT0VW Z3VjUGpWRzNod2Nsd1Y3MmZneGxFLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkqIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIpz+gDBASaSPAwDQQC AAIwBwMFACwP+OAwDQYJKoZIhvcNAQELBQADggEBADO5lvZIoiA9vbNz7g24mOHU XHDZ6zBgYxE7B7UuHMtZPN18lbHLzAG6eY6Mk4pFO6GoJA0PDjMUyBnby9qquJW/ Vuktq9QfaQLEDilVuc2aQzqfgc/CVHmxk9c4j+0DT7trYvCXcUIJVX6d3KybEHLz hrE1opC/dpBH15wTTt19Ylygqi5e35CUTXS3kCS732dhPgOLat2LZX7HKgdnHnTX fCauzl771yuyaPdQWXM/DXRrtcCYvW6IXNYmmY4WV707IZ7bUa0tR0HHPLo0FAJv ninq8fUiv6i2YhDAPJlmiX/liyCruJ1PXQBy7Tr75Ic5TV9GwfLs/omjhiNvE+w= -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:47 2026 by rpki-client