This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer File: MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer (raw, json) Hash identifier: gNtz6C6FulUxL7L7mh/6nZReEorr7Ylcul0AHw/HohE= Subject key identifier: 31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3EC0 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:57:11 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37317 IP: 41.78.220.0/22 IP: 41.79.16.0/22 IP: 102.128.96.0/19 IP: 197.234.200.0/21 IP: 2c0f:f028::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 11 Jan 2026 00:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16064 (0x3ec0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 04:57:11 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36EC727AF, serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:2a:68:c0:e3:9a:b6:74:d0:81:c6:af:00: 43:5d:54:63:be:c8:bc:51:23:92:69:2d:05:33:c2: 50:1c:d0:1b:db:f7:d7:bf:3e:8b:74:bc:20:5b:30: 80:88:1a:24:3c:05:f5:11:cc:62:22:cc:6b:61:70: f6:f4:6b:8c:80:50:28:5f:ea:cb:ca:7a:1c:01:f4: cc:0d:d5:67:5e:7f:2a:00:bf:5d:c1:35:86:c5:97: 89:64:87:59:70:77:dd:27:84:93:6d:cc:7b:4d:4f: 5f:45:6d:90:e9:7a:ee:e0:ef:5b:b6:73:8d:a9:cb: 59:e9:c4:ce:48:53:cc:66:9d:28:6b:80:b0:37:32: a8:e0:32:37:ef:57:27:eb:60:57:4c:8d:bf:55:4b: a3:f5:41:9e:20:69:81:7e:e6:c0:8d:8c:a8:bc:43: cf:d0:62:bd:17:7d:e3:08:58:a2:cd:78:84:21:ed: 28:ee:d6:14:9b:a1:59:eb:cf:02:e7:84:08:8e:a5: 29:4a:a3:f3:30:00:e5:a2:e9:e7:67:70:18:92:59: 46:d6:d2:b8:e7:fd:4a:a6:eb:58:50:a4:4f:94:8a: 7c:fb:8c:13:cc:b1:b2:97:d8:e0:7e:13:e0:3e:58: d8:29:c1:37:61:8e:15:50:2f:2d:c7:39:68:b2:91: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37317 sbgp-ipAddrBlock: critical IPv4: 41.78.220.0/22 41.79.16.0/22 102.128.96.0/19 197.234.200.0/21 IPv6: 2c0f:f028::/32 Signature Algorithm: sha256WithRSAEncryption b7:2e:dc:9b:a7:91:5d:a0:bf:e2:63:32:de:28:ee:75:45:4c: ca:03:b0:7b:7b:bf:02:68:be:3b:99:73:48:3b:dd:6a:c1:a9: 27:6b:50:b4:b5:4f:f9:8a:60:bf:88:9c:f1:c4:89:81:ee:fe: 7d:80:b7:fe:87:43:7f:82:c4:3c:a7:bb:45:76:51:56:02:4e: 90:67:6a:4c:a2:16:d0:89:c3:ec:c3:9e:00:9d:7a:f5:73:b3: 1b:2a:35:d9:52:7b:e4:59:65:88:50:26:0c:ef:dc:51:28:6a: d2:6f:10:3b:3a:77:55:a9:98:97:bb:59:c6:6d:73:e3:d7:53: 09:45:8f:f9:f3:42:79:3a:b4:bb:4e:b7:37:72:d5:90:2a:d4: 9f:b2:88:8f:f4:91:60:74:cc:a5:37:25:91:74:34:2c:76:05: 37:c9:48:cd:32:34:71:ab:f3:79:70:9b:38:96:63:ca:93:36: a6:b4:7e:d8:f3:c0:34:00:fd:c4:48:28:71:51:8b:16:89:db: 22:e4:b4:06:cc:ed:ce:cf:43:64:04:86:00:6c:e9:aa:26:87: 85:a3:0b:f9:c1:ac:df:dc:cd:18:90:26:f6:f5:66:20:8d:96: 9d:f9:53:a1:a9:15:cd:c9:96:7f:02:a1:bc:4b:c6:c0:e8:1a: c4:35:26:cb -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICPsAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNDU3MTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkVDNzI3QUYxMTAvBgNVBAUTKDMxRkNEMzkyRkU4RUJENTdFMTI1MzhE QzYwQTgwNTlGRkEzOUEwM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvsSpowOOatnTQgcavAENdVGO+yLxRI5JpLQUzwlAc0Bvb99e/Pot0vCBbMICI GiQ8BfURzGIizGthcPb0a4yAUChf6svKehwB9MwN1WdefyoAv13BNYbFl4lkh1lw d90nhJNtzHtNT19FbZDpeu7g71u2c42py1npxM5IU8xmnShrgLA3MqjgMjfvVyfr YFdMjb9VS6P1QZ4gaYF+5sCNjKi8Q8/QYr0XfeMIWKLNeIQh7Sju1hSboVnrzwLn hAiOpSlKo/MwAOWi6edncBiSWUbW0rjn/Uqm61hQpE+Uinz7jBPMsbKX2OB+E+A+ WNgpwTdhjhVQLy3HOWiykUcZAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUMfzTkv6O vVfhJTjcYKgFn/o5oDowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFQzcyNy8yNzg5NDVFNDZGQUIx MUVGQjQyOTcyOTE3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RUM3MjcvMjc4OTQ1RTQ2RkFCMTFFRkI0Mjk3MjkxNzYyRTk1MUEvTWZ6VGt2 Nk92VmZoSlRqY1lLZ0ZuX281b0RvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkcUwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAIpTtwDBAIpTxADBAVm gGADBAPF6sgwDQQCAAIwBwMFACwP8CgwDQYJKoZIhvcNAQELBQADggEBALcu3Jun kV2gv+JjMt4o7nVFTMoDsHt7vwJovjuZc0g73WrBqSdrULS1T/mKYL+InPHEiYHu /n2At/6HQ3+CxDynu0V2UVYCTpBnakyiFtCJw+zDngCdevVzsxsqNdlSe+RZZYhQ Jgzv3FEoatJvEDs6d1WpmJe7WcZtc+PXUwlFj/nzQnk6tLtOtzdy1ZAq1J+yiI/0 kWB0zKU3JZF0NCx2BTfJSM0yNHGr83lwmziWY8qTNqa0ftjzwDQA/cRIKHFRixaJ 2yLktAbM7c7PQ2QEhgBs6aomh4WjC/nBrN/czRiQJvb1ZiCNlp35U6GpFc3Jln8C obxLxsDoGsQ1Jss= -----END CERTIFICATE-----Generated at Fri Jan 9 16:32:21 2026 by rpki-client