This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer File: Ga2syP-jkxMYpsdToKwbKukpXgM.cer (raw, json) Hash identifier: k+HSvweDGoySLeIhvDHbO1WF459P4jyEp5HuDVSSo6Y= Subject key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D28 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:52:16 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 41.82.0.0/15 IP: 41.208.128.0/18 IP: 41.214.0.0/17 IP: 154.124.0.0/15 IP: 196.207.192.0/18 IP: 2001:4278::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15656 (0x3d28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:52:16 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:37:3e:85:95:20:7e:ff:f0:2a:51:52:a2: fe:11:75:c7:52:32:e9:51:15:eb:99:c2:95:a8:e3: af:ca:33:93:0b:69:d5:72:aa:11:d7:d3:63:8b:ad: f1:3a:1f:02:2f:d2:c1:c7:55:bb:46:38:b7:c4:ec: 4a:1e:8c:9a:47:65:6b:cd:ca:9e:67:a3:32:2b:25: df:ea:9c:0b:49:2f:f3:d1:dc:44:b7:2a:f2:e1:ef: 8b:ec:c6:0c:bd:80:b4:7d:15:fa:31:48:17:a8:a3: 51:28:97:29:5c:ee:5c:85:67:a0:c7:91:18:c1:05: e4:74:10:26:a0:a0:06:88:5b:57:7b:18:bd:d7:3e: 78:04:93:e2:74:5d:80:5c:fb:ed:23:fc:ca:e8:a9: 03:5e:ab:eb:41:d2:29:e7:bd:14:15:7e:4f:b1:a0: ad:ae:29:ac:dd:c1:14:0a:dd:22:a0:7d:fb:34:ae: 53:a6:6f:40:e8:66:0a:2e:7a:b3:b3:40:00:68:b6: ee:30:d9:87:54:e7:a3:c8:81:0f:b9:30:da:26:b4: 28:5e:ab:6e:f6:f1:52:ca:dc:c2:e2:58:3d:d2:16: f5:5d:c2:ca:ba:1a:dc:9c:35:4c:27:98:22:21:85: f0:d1:a8:fa:3e:db:e5:d3:29:96:fa:21:9d:ee:5e: 5d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft sbgp-ipAddrBlock: critical IPv4: 41.82.0.0/15 41.208.128.0/18 41.214.0.0/17 154.124.0.0/15 196.207.192.0/18 IPv6: 2001:4278::/32 Signature Algorithm: sha256WithRSAEncryption 0b:44:82:b0:c6:77:93:1f:12:1f:3f:2d:46:c3:b7:4d:6b:81: fc:ce:22:fb:ff:f3:8e:38:36:81:f4:7d:9a:bf:5d:7d:9e:4d: 81:f2:10:cf:25:7f:2f:3e:9b:22:81:d8:86:78:78:d3:3e:1a: 61:60:3d:1e:c1:be:f6:2d:d9:66:e3:65:6b:42:e0:c0:69:4e: f1:87:1f:09:bf:af:fa:e7:14:84:26:c7:14:fd:be:00:3f:a6: cb:7a:0d:95:84:e6:09:fe:a1:83:24:d4:88:52:8e:9c:4e:27: 56:71:c0:14:d7:d2:ba:b6:9b:d0:a2:91:96:6b:49:ed:56:92: f2:98:6a:00:5b:70:24:76:c1:b0:91:81:04:bb:5a:cb:39:8e: 9d:0f:0d:e5:3d:f1:6f:7f:8f:cc:c0:de:80:ed:64:92:38:f3: 47:d2:f3:90:70:9e:e8:4d:f7:31:a8:78:e3:63:e3:aa:3a:7c: d7:8d:14:b6:86:c2:c6:06:3b:5e:bc:0e:81:9d:bb:85:73:d1: db:93:eb:cb:08:6c:a8:14:7c:b0:b6:11:42:ba:b4:60:d3:95: a1:ba:01:8f:4d:63:a6:c9:37:d9:09:05:9a:47:71:09:44:40: 0d:7d:da:a3:af:c0:09:0a:5e:05:a0:ed:37:60:c4:f1:ac:a7: ff:b3:5c:88 -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgICPSgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzUyMTZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkI1MkE2QUYxMTAvBgNVBAUTKDE5QURBQ0M4RkZBMzkzMTMxOEE2Qzc1 M0EwQUMxQjJBRTkyOTVFMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzKTc+hZUgfv/wKlFSov4RdcdSMulRFeuZwpWo46/KM5MLadVyqhHX02OLrfE6 HwIv0sHHVbtGOLfE7EoejJpHZWvNyp5nozIrJd/qnAtJL/PR3ES3KvLh74vsxgy9 gLR9FfoxSBeoo1Eolylc7lyFZ6DHkRjBBeR0ECagoAaIW1d7GL3XPngEk+J0XYBc ++0j/MroqQNeq+tB0innvRQVfk+xoK2uKazdwRQK3SKgffs0rlOmb0DoZgouerOz QABotu4w2YdU56PIgQ+5MNomtCheq2728VLK3MLiWD3SFvVdwsq6GtycNUwnmCIh hfDRqPo+2+XTKZb6IZ3uXl3HAgMBAAGjggMUMIIDEDAdBgNVHQ4EFgQUGa2syP+j kxMYpsdToKwbKukpXgMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCNTJBNi82QUUzMDdCNjZGRkQx MUU5QTY5Q0MxMzRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QjUyQTYvNkFFMzA3QjY2RkZEMTFFOUE2OUNDMTM0RjhBRUEyMjgvR2Eyc3lQ LWpreE1ZcHNkVG9Ld2JLdWtwWGdNLm1mdDBEBggrBgEFBQcBBwEB/wQ1MDMwIgQC AAEwHAMDASlSAwQGKdCAAwQHKdYAAwMBmnwDBAbEz8AwDQQCAAIwBwMFACABQngw DQYJKoZIhvcNAQELBQADggEBAAtEgrDGd5MfEh8/LUbDt01rgfzOIvv/8444NoH0 fZq/XX2eTYHyEM8lfy8+myKB2IZ4eNM+GmFgPR7BvvYt2WbjZWtC4MBpTvGHHwm/ r/rnFIQmxxT9vgA/pst6DZWE5gn+oYMk1IhSjpxOJ1ZxwBTX0rq2m9CikZZrSe1W kvKYagBbcCR2wbCRgQS7Wss5jp0PDeU98W9/j8zA3oDtZJI480fS85BwnuhN9zGo eONj46o6fNeNFLaGwsYGO168DoGdu4Vz0duT68sIbKgUfLC2EUK6tGDTlaG6AY9N Y6bJN9kJBZpHcQlEQA192qOvwAkKXgWg7TdgxPGsp/+zXIg= -----END CERTIFICATE-----Generated at Thu Jan 1 12:28:58 2026 by rpki-client