This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer File: KvCNgqXIimbwBbMcgOhymuKM11U.cer (raw, json) Hash identifier: j3jznx0YDMoXijpMMEmfTxap8XqDg865Th7aEeo75Y8= Subject key identifier: 2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 38F6 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:12:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37159 IP: 41.78.28.0/22 IP: 2c0f:ea08::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14582 (0x38f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:12:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36406D3AF, serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:49:9e:81:79:7c:42:43:32:60:da:67:0a: 09:78:be:06:5b:fc:06:71:86:01:15:00:42:21:e4: d7:62:9f:75:f3:73:14:e6:3d:ae:54:91:38:29:00: 85:62:0a:6c:b6:31:89:fe:98:8f:c1:a5:9f:ed:81: cd:eb:80:c6:2a:4d:c7:b0:b1:68:3e:d3:6d:97:a9: 51:91:23:a5:f8:f6:d2:af:8f:85:f9:f3:bc:a0:82: 31:14:05:4c:46:50:c1:30:67:f5:be:a6:42:a8:b4: d2:16:ef:c6:9b:1b:e3:1f:fa:14:6e:c5:e9:38:a2: c1:c7:cb:bc:5c:02:e2:09:3b:bb:fc:b4:80:95:eb: 49:65:a7:c0:97:c2:f3:d3:54:43:86:bd:ab:97:af: 48:38:06:09:0a:9a:aa:64:54:99:e5:50:01:c2:1a: 27:29:d6:ab:e1:da:44:00:53:79:e7:2c:8f:8e:c9: f8:8d:ed:28:44:2f:6a:1f:0a:d7:1a:62:89:47:16: 85:26:97:64:06:52:fc:a2:aa:bc:10:0c:95:29:85: 58:37:37:b1:b7:45:48:c7:2b:d3:eb:cc:40:88:d9: c9:c8:4f:b0:d9:0c:ab:89:3d:fe:e5:26:76:ed:af: ff:4d:a1:3d:c9:10:81:7c:68:ec:b0:5a:0e:fc:d1: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37159 sbgp-ipAddrBlock: critical IPv4: 41.78.28.0/22 IPv6: 2c0f:ea08::/32 Signature Algorithm: sha256WithRSAEncryption 6e:9f:64:ae:53:dd:ad:84:2a:87:4d:f9:3d:81:0b:2e:a1:1b: 44:45:df:24:5c:dc:36:06:2d:83:d4:d0:2e:7f:e7:7c:3c:17: 45:ec:ae:27:bc:4a:72:2e:bd:90:b2:8c:1e:19:66:57:72:45: 48:a6:18:54:ab:d7:09:b4:83:a4:c2:5a:06:eb:9f:8e:90:28: df:ac:59:ed:4d:43:b3:29:dd:1e:7c:a5:2d:80:70:4a:bb:5f: 80:0d:89:88:44:94:96:37:3c:ce:5f:6a:be:77:2b:7d:e4:8d: 8c:1b:7f:47:54:34:a3:37:f2:a1:bb:42:f0:11:0e:2a:85:6b: c2:06:99:d4:4d:5d:f5:68:99:22:40:10:41:60:16:46:65:12: 49:3e:72:ff:50:4c:bf:04:49:f6:f8:23:44:1b:de:c3:66:1c: a7:90:81:ee:24:3d:76:d8:16:f3:1c:10:81:c0:31:bb:97:43: b8:ae:4d:de:ce:94:66:b0:e8:43:ff:b3:ff:50:10:75:72:e6: cc:22:87:c2:a5:f1:c7:aa:cd:4d:05:ce:33:3a:2f:69:0c:de: f8:b2:d0:d7:f3:78:ad:03:df:7e:d9:dc:6f:81:48:a5:5b:a2: c7:42:ad:87:24:0b:7c:b9:a7:08:ef:7c:c3:dc:3a:a4:a5:ca: 09:d8:35:2e -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOPYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTEyMjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQwNkQzQUYxMTAvBgNVBAUTKDJBRjA4RDgyQTVDODhBNjZGMDA1QjMx QzgwRTg3MjlBRTI4Q0Q3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjeUmegXl8QkMyYNpnCgl4vgZb/AZxhgEVAEIh5Ndin3XzcxTmPa5UkTgpAIVi Cmy2MYn+mI/BpZ/tgc3rgMYqTcewsWg+022XqVGRI6X49tKvj4X587yggjEUBUxG UMEwZ/W+pkKotNIW78abG+Mf+hRuxek4osHHy7xcAuIJO7v8tICV60llp8CXwvPT VEOGvauXr0g4BgkKmqpkVJnlUAHCGicp1qvh2kQAU3nnLI+OyfiN7ShEL2ofCtca YolHFoUml2QGUvyiqrwQDJUphVg3N7G3RUjHK9PrzECI2cnIT7DZDKuJPf7lJnbt r/9NoT3JEIF8aOywWg780Rx3AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUKvCNgqXI imbwBbMcgOhymuKM11UwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0MDZEMy9GQjY0M0MzNjg3NkYx MUU5OTQ5NThCMzJGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDA2RDMvRkI2NDNDMzY4NzZGMTFFOTk0OTU4QjMyRjhBRUEyMjgvS3ZDTmdx WElpbWJ3QmJNY2dPaHltdUtNMTFVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkScwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIpThwwDQQCAAIwBwMF ACwP6ggwDQYJKoZIhvcNAQELBQADggEBAG6fZK5T3a2EKodN+T2BCy6hG0RF3yRc 3DYGLYPU0C5/53w8F0Xsrie8SnIuvZCyjB4ZZldyRUimGFSr1wm0g6TCWgbrn46Q KN+sWe1NQ7Mp3R58pS2AcEq7X4ANiYhElJY3PM5far53K33kjYwbf0dUNKM38qG7 QvARDiqFa8IGmdRNXfVomSJAEEFgFkZlEkk+cv9QTL8ESfb4I0Qb3sNmHKeQge4k PXbYFvMcEIHAMbuXQ7iuTd7OlGaw6EP/s/9QEHVy5swih8Kl8ceqzU0FzjM6L2kM 3viy0NfzeK0D337Z3G+BSKVbosdCrYckC3y5pwjvfMPcOqSlygnYNS4= -----END CERTIFICATE-----Generated at Sun Jan 11 23:08:10 2026 by rpki-client