This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer File: F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer (raw, json) Hash identifier: tX0ZxTWT0MFyTWr8AK8pCKc8H+BMcgy4GxfOIbrhv9A= Subject key identifier: 17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D60 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:01:08 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37012 AS: 328571 AS: 328983 IP: 41.222.232.0/22 IP: 196.61.32.0/20 IP: 197.159.128.0/20 IP: 2c0f:7700::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 11:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15712 (0x3d60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:01:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36BB12FAF, serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:1d:9b:2b:8a:6e:7c:eb:71:4f:d9:88:d4: 3a:ae:bb:18:d4:c5:fd:0b:60:c0:e5:3a:b4:21:be: 2d:15:3c:70:e1:b8:2e:42:42:59:a4:f4:7c:29:66: b2:a2:cf:9c:0f:e9:e5:36:0b:ec:3e:48:5a:7a:58: 90:5b:00:84:63:dc:43:88:7e:fd:ab:f3:0b:b1:9f: 76:d3:ef:79:2e:5c:c1:13:2d:89:7a:d1:bc:28:03: 86:4e:7f:e6:73:84:a7:68:c8:f9:1e:71:f7:27:08: c6:a5:79:9c:f2:76:80:3c:44:92:b6:c8:ac:bf:cf: 52:7c:0d:cd:02:bc:35:34:65:eb:34:19:0d:59:e3: c3:8d:95:8c:2f:a4:52:d5:c1:aa:06:29:3a:ed:db: 32:2d:c8:51:d8:88:4f:41:73:00:21:4a:8d:32:95: 15:18:df:ed:07:7a:bf:f8:96:4c:4d:6d:44:dc:65: 26:1f:62:a3:42:b3:08:fe:59:f8:32:c2:29:60:d7: 7f:a7:ad:ea:1b:c9:cf:7e:45:e0:93:db:cf:b3:dd: bf:24:c3:a5:1d:8f:13:a7:60:c9:3b:3d:b5:07:c3: 64:68:de:67:8e:c2:7b:c6:7b:7e:2b:38:4b:aa:cb: 06:ac:d7:6c:ce:cb:1d:41:b3:9c:42:eb:44:b7:45: c6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37012 328571 328983 sbgp-ipAddrBlock: critical IPv4: 41.222.232.0/22 196.61.32.0/20 197.159.128.0/20 IPv6: 2c0f:7700::/32 Signature Algorithm: sha256WithRSAEncryption 74:57:c9:81:39:b9:39:f3:c2:f2:e5:6b:9d:ae:bb:64:82:37: 15:06:a3:43:7d:05:aa:09:68:4f:da:b9:20:1b:61:e4:6b:f7: fd:da:0a:37:b0:06:9e:ab:8c:5b:5b:f7:8b:77:9c:f0:39:a6: 20:cc:18:72:bd:a8:df:9b:c6:ff:f6:aa:87:f8:6d:3f:e1:9e: d2:ab:c2:47:3d:67:1f:3e:8f:2d:d3:ec:f6:47:7a:6b:59:fd: f9:74:89:95:03:44:05:a4:e4:8b:d5:b2:66:23:da:ea:ca:ca: 4e:16:25:cd:c3:eb:84:81:5c:19:56:5f:34:10:12:40:72:a7: 32:75:8b:68:45:10:c9:bc:ed:95:30:bf:88:09:a9:94:2b:7c: 1a:ea:59:76:48:d1:4c:27:46:77:d0:b3:a3:52:8c:26:eb:85: 9a:ac:db:7c:5d:73:5c:fd:ab:7d:55:26:bd:2a:c9:0a:3f:dc: 1b:87:4f:5d:c3:44:86:79:b7:fc:c8:df:44:8c:6f:2e:54:2b: d7:1e:c5:27:89:f8:10:9c:9a:02:2c:92:49:ac:89:23:fc:8c: bd:2e:1d:7a:66:49:db:4f:fe:7e:1b:f8:0d:5a:4b:bd:78:fb: 54:aa:4c:a2:75:80:b4:c4:3e:4b:c9:59:70:3e:3c:6c:9a:bd: 71:6f:84:5c -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgICPWAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDAxMDhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkJCMTJGQUYxMTAvBgNVBAUTKDE3NDRCQzIwQjcwNjA1NzlDOTNFNEUy QUE3RTY1NDI4OUMyQUY3Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsiR2bK4pufOtxT9mI1DquuxjUxf0LYMDlOrQhvi0VPHDhuC5CQlmk9HwpZrKi z5wP6eU2C+w+SFp6WJBbAIRj3EOIfv2r8wuxn3bT73kuXMETLYl60bwoA4ZOf+Zz hKdoyPkecfcnCMaleZzydoA8RJK2yKy/z1J8Dc0CvDU0Zes0GQ1Z48ONlYwvpFLV waoGKTrt2zItyFHYiE9BcwAhSo0ylRUY3+0Her/4lkxNbUTcZSYfYqNCswj+Wfgy wilg13+nreobyc9+ReCT28+z3b8kw6UdjxOnYMk7PbUHw2Ro3meOwnvGe34rOEuq ywas12zOyx1Bs5xC60S3RcY5AgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUF0S8ILcG BXnJPk4qp+ZUKJwq98owHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCQjEyRi81QzA5QzM4MEE3RTUx MUVGQjU2QTBDNTI3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QkIxMkYvNUMwOUMzODBBN0U1MTFFRkI1NkEwQzUyNzYyRTk1MUEvRjBTOElM Y0dCWG5KUGs0cXAtWlVLSndxOThvLm1mdDAkBggrBgEFBQcBCAEB/wQVMBOgETAP AgMAkJQCAwUDewIDBQUXMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCKd7o AwQExD0gAwQExZ+AMA0EAgACMAcDBQAsD3cAMA0GCSqGSIb3DQEBCwUAA4IBAQB0 V8mBObk588Ly5WudrrtkgjcVBqNDfQWqCWhP2rkgG2Hka/f92go3sAaeq4xbW/eL d5zwOaYgzBhyvajfm8b/9qqH+G0/4Z7Sq8JHPWcfPo8t0+z2R3prWf35dImVA0QF pOSL1bJmI9rqyspOFiXNw+uEgVwZVl80EBJAcqcydYtoRRDJvO2VML+ICamUK3wa 6ll2SNFMJ0Z30LOjUowm64WarNt8XXNc/at9VSa9KskKP9wbh09dw0SGebf8yN9E jG8uVCvXHsUnifgQnJoCLJJJrIkj/Iy9Lh16ZknbT/5+G/gNWku9ePtUqkyidYC0 xD5LyVlwPjxsmr1xb4Rc -----END CERTIFICATE-----Generated at Mon Jan 12 14:33:55 2026 by rpki-client