This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer File: 0cZXgBrfziVpTfuxqVxs2kR-O7o.cer (raw, json) Hash identifier: x1ickgB8JfB/GWWNcJIbaYhn6WOEl5sXUS2pt3zQa3I= Subject key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 39B3 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:41:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 36955 IP: 41.211.96.0/19 IP: 102.203.180.0/22 IP: 2c0f:f7d0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14771 (0x39b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:41:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3656387AF, serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7e:a7:24:c2:26:22:5d:79:b6:9c:83:94:7f: 6f:fe:ee:f5:f6:3b:ac:71:50:f9:68:b3:09:02:47: bf:4f:55:e4:c6:57:9a:6e:48:1e:c3:2b:b1:12:ba: 6d:aa:af:e6:fd:b1:f4:70:6e:88:df:e0:0e:a0:46: 05:2e:22:81:b7:e7:e3:e5:bf:e8:5a:09:07:c0:a5: cf:be:92:89:8d:10:f2:bb:d3:f1:e4:f2:d3:f9:3b: d2:7d:a0:27:b4:1d:47:d2:b8:ed:06:af:32:aa:89: 0a:b5:9a:e1:da:d9:25:d4:a5:a2:57:01:ee:3d:cb: 69:37:ec:0b:c5:4b:1a:8a:35:d4:bc:a7:83:14:20: 52:61:a9:84:d3:a4:bf:5a:4b:58:5f:e3:d6:35:3a: 22:fb:99:c2:f5:e4:c8:8c:4f:24:a6:e5:6b:d9:4b: 4f:5b:f6:db:0a:47:3b:db:bc:89:77:3d:c1:b3:8a: 5b:d8:6d:ab:f2:17:e0:e4:17:a5:42:16:db:0b:ac: 97:dc:eb:da:9c:53:62:b9:64:3a:49:02:06:71:13: 7b:1b:46:bc:44:a6:44:27:94:be:b9:3d:4b:dd:82: 83:0e:c2:17:c2:95:ee:a9:15:d5:b8:e9:3e:30:16: 93:08:54:52:91:1e:d5:92:e4:2e:af:4d:94:87:2d: c4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 36955 sbgp-ipAddrBlock: critical IPv4: 41.211.96.0/19 102.203.180.0/22 IPv6: 2c0f:f7d0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:92:dc:36:51:ef:4a:76:ed:c6:86:89:b2:0d:7e:d2:2e:1f: 13:e5:8c:d0:ad:bf:20:ea:49:21:98:a1:38:97:72:a8:af:8a: 92:5a:30:c5:ad:9b:d3:74:9a:83:15:36:75:8e:81:de:27:d9: 59:e1:a0:0b:12:62:85:4f:95:8d:bc:00:ae:01:64:0d:e6:e5: ed:78:ac:bc:f0:b2:9a:de:91:ab:a0:7c:0a:25:19:d2:72:c1: 8c:8a:05:68:a0:89:6b:8f:1f:1e:f8:7e:91:3d:5d:b0:81:00: 01:2d:b1:37:a9:4c:be:5d:00:d5:de:b7:6f:71:5d:d6:c6:73: b8:fc:00:dd:ae:f0:33:03:05:f2:03:88:46:e1:08:3a:7f:8e: 68:b9:13:0a:48:d2:bb:70:86:7f:76:da:86:a5:a0:4d:85:3e: 09:73:e5:63:6b:a9:c3:aa:4d:8d:28:ce:e7:f7:b6:e0:b9:96: 52:33:06:2c:fc:cf:15:22:91:ff:40:51:b4:e2:a9:e2:78:26: 54:ce:66:c5:a8:5a:fd:3d:2b:8e:a4:f1:53:ee:64:ed:56:d3: 42:ff:ff:5e:7a:e4:32:f1:b1:01:0c:ba:dd:25:e7:db:37:df: 15:32:7d:59:e1:55:cb:c3:09:4e:77:1f:ac:f7:49:f4:3d:69: 89:7f:8d:cf -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICObMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTQxNDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjU2Mzg3QUYxMTAvBgNVBAUTKEQxQzY1NzgwMUFERkNFMjU2OTRERkJC MUE5NUM2Q0RBNDQ3RTNCQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmfqckwiYiXXm2nIOUf2/+7vX2O6xxUPloswkCR79PVeTGV5puSB7DK7ESum2q r+b9sfRwbojf4A6gRgUuIoG35+Plv+haCQfApc++komNEPK70/Hk8tP5O9J9oCe0 HUfSuO0GrzKqiQq1muHa2SXUpaJXAe49y2k37AvFSxqKNdS8p4MUIFJhqYTTpL9a S1hf49Y1OiL7mcL15MiMTySm5WvZS09b9tsKRzvbvIl3PcGzilvYbavyF+DkF6VC FtsLrJfc69qcU2K5ZDpJAgZxE3sbRrxEpkQnlL65PUvdgoMOwhfCle6pFdW46T4w FpMIVFKRHtWS5C6vTZSHLcRLAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU0cZXgBrf ziVpTfuxqVxs2kR+O7owHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1NjM4Ny9DNzhFRUY5MDkwQ0Qx MUVDOEI3QjI5QTA1QTQwRDU3Ny8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NTYzODcvQzc4RUVGOTA5MENEMTFFQzhCN0IyOUEwNUE0MEQ1NzcvMGNaWGdC cmZ6aVZwVGZ1eHFWeHMya1ItTzdvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkFswNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAUp02ADBAJmy7QwDQQC AAIwBwMFACwP99AwDQYJKoZIhvcNAQELBQADggEBAAyS3DZR70p27caGibINftIu HxPljNCtvyDqSSGYoTiXcqivipJaMMWtm9N0moMVNnWOgd4n2VnhoAsSYoVPlY28 AK4BZA3m5e14rLzwsprekaugfAolGdJywYyKBWigiWuPHx74fpE9XbCBAAEtsTep TL5dANXet29xXdbGc7j8AN2u8DMDBfIDiEbhCDp/jmi5EwpI0rtwhn922oaloE2F Pglz5WNrqcOqTY0ozuf3tuC5llIzBiz8zxUikf9AUbTiqeJ4JlTOZsWoWv09K46k 8VPuZO1W00L//1565DLxsQEMut0l59s33xUyfVnhVcvDCU53H6z3SfQ9aYl/jc8= -----END CERTIFICATE-----Generated at Thu Jan 1 12:29:24 2026 by rpki-client