This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer File: 2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer (raw, json) Hash identifier: 9pRzgZn6HMzUUVaNhb1IK/99Yv/Usc77oZOG9qFrGKQ= Subject key identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B97 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:52:31 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37887 AS: 327866 IP: 196.49.13.0/24 IP: 196.223.41.0/24 IP: 2001:43f8:a10::/47 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15255 (0x3b97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:52:31 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3686F75AF, serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:2a:c8:54:09:12:d3:c2:03:7b:8d:dc:bb: c9:10:d8:8f:80:47:6a:9c:6e:d5:7d:a2:7f:91:9b: c0:78:a2:9f:d7:f1:1c:f7:d4:84:61:0f:ca:dd:f3: 2a:01:20:d2:a4:e7:81:0c:cc:ff:23:3a:92:45:ed: 9d:ef:77:5b:c2:7f:b4:69:b8:41:28:f0:04:70:ca: e6:27:55:e2:f4:d9:0c:7e:ce:60:38:77:a4:39:cb: a1:bc:03:57:c2:0a:a9:21:7b:9e:a8:f4:41:a7:fc: 5c:a2:b0:cb:1e:ae:f2:42:ec:0e:5e:34:9c:a3:f0: 38:61:a7:b3:1c:f9:00:04:0b:d7:09:cb:71:16:2f: 2f:d5:cb:fa:7b:4a:1c:80:c3:0e:2a:bb:91:1c:46: 02:c7:54:f8:c5:39:eb:66:24:f0:67:41:54:4f:ec: f9:fc:c9:9c:40:00:d9:0a:39:3e:c1:6f:b5:6d:b8: 49:ba:b1:b7:3e:29:45:b8:3e:dd:05:14:04:81:dc: 61:50:f9:2a:e6:b1:d0:49:b8:f5:32:f5:2d:f2:88: f8:39:00:89:bc:35:86:24:1e:fb:ec:2a:02:23:86: 2f:9c:df:e9:93:eb:54:db:2b:17:b1:2b:52:ce:52: f3:c0:79:b6:93:d4:37:b6:31:bb:bb:74:86:a7:01: 01:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37887 327866 sbgp-ipAddrBlock: critical IPv4: 196.49.13.0/24 196.223.41.0/24 IPv6: 2001:43f8:a10::/47 Signature Algorithm: sha256WithRSAEncryption 84:4b:eb:00:94:4d:82:c9:f9:8d:10:35:ce:6b:57:30:0e:88: 40:25:76:44:4d:d5:3a:28:c1:fe:1d:03:3b:15:71:c9:fb:0a: 0c:1f:72:4d:1a:ce:2e:48:c9:ce:3a:2e:64:53:16:f8:94:ee: db:56:d4:6e:b5:29:3d:d4:a3:59:82:8b:66:33:a5:6c:9b:36: f6:e4:06:7f:a7:d8:9a:d7:be:06:43:f1:1f:b4:20:4b:e6:23: 54:2d:ba:b1:09:93:65:1a:ae:27:29:b6:0a:7c:35:01:b5:64: 9b:db:0f:15:75:48:fb:5d:b7:99:e5:09:9c:47:70:43:ec:d5: e9:dd:15:ae:0f:96:dc:51:db:a8:52:bc:7a:35:55:66:14:67: 33:4a:e3:38:04:45:70:8f:28:2c:21:c1:51:c1:73:88:e1:8d: a8:da:15:23:6f:32:59:db:88:94:d4:ca:ee:5e:af:23:c3:a8: ab:13:5c:0e:f1:31:9f:69:01:02:88:4f:57:2c:97:9c:25:1b: d1:a0:5a:99:05:e0:9d:a8:96:e4:b5:49:63:93:c5:b1:b4:5a: b1:16:9b:08:d6:98:b1:54:78:61:2b:83:9d:7f:37:7b:e2:24: 93:26:5d:80:01:29:3f:55:b7:71:4d:92:02:03:3a:18:92:5c: 72:7b:f6:28 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgICO5cwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjUyMzFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjg2Rjc1QUYxMTAvBgNVBAUTKEQ5OTc3MEY4RjlCNjJERDAzNkVERTc0 MUYyNzAyQ0RERDY0MERFMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8cyrIVAkS08IDe43cu8kQ2I+AR2qcbtV9on+Rm8B4op/X8Rz31IRhD8rd8yoB INKk54EMzP8jOpJF7Z3vd1vCf7RpuEEo8ARwyuYnVeL02Qx+zmA4d6Q5y6G8A1fC Cqkhe56o9EGn/FyisMservJC7A5eNJyj8Dhhp7Mc+QAEC9cJy3EWLy/Vy/p7ShyA ww4qu5EcRgLHVPjFOetmJPBnQVRP7Pn8yZxAANkKOT7Bb7VtuEm6sbc+KUW4Pt0F FASB3GFQ+SrmsdBJuPUy9S3yiPg5AIm8NYYkHvvsKgIjhi+c3+mT61TbKxexK1LO UvPAebaT1De2Mbu7dIanAQGtAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQU2Zdw+Pm2 LdA27edB8nAs3dZA3h4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4NkY3NS9BNjA3ODA5NjFEMzUx MUVDQjUxMDM0MEFEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODZGNzUvQTYwNzgwOTYxRDM1MTFFQ0I1MTAzNDBBRDhBMDE0Q0UvMlpkdy1Q bTJMZEEyN2VkQjhuQXMzZFpBM2g0Lm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAk/8CAwUAujA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMQxDQMEAMTf KTAPBAIAAjAJAwcBIAFD+AoQMA0GCSqGSIb3DQEBCwUAA4IBAQCES+sAlE2CyfmN EDXOa1cwDohAJXZETdU6KMH+HQM7FXHJ+woMH3JNGs4uSMnOOi5kUxb4lO7bVtRu tSk91KNZgotmM6Vsmzb25AZ/p9ia174GQ/EftCBL5iNULbqxCZNlGq4nKbYKfDUB tWSb2w8VdUj7XbeZ5QmcR3BD7NXp3RWuD5bcUduoUrx6NVVmFGczSuM4BEVwjygs IcFRwXOI4Y2o2hUjbzJZ24iU1MruXq8jw6irE1wO8TGfaQECiE9XLJecJRvRoFqZ BeCdqJbktUljk8WxtFqxFpsI1pixVHhhK4Odfzd74iSTJl2AASk/VbdxTZICAzoY klxye/Yo -----END CERTIFICATE-----Generated at Thu Jan 1 12:28:57 2026 by rpki-client