This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer File: OGKY2dDrccqQ9IahYTSvE2HSccg.cer (raw, json) Hash identifier: cNLAamx6wqLIOOBPaiynSGp2yxTlpp4SGli0MTpChQM= Subject key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A94 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:16:04 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37716 AS: 328010 IP: 196.49.19.0/24 IP: 196.49.74.0/24 IP: 196.60.76.0/24 IP: 196.223.47.0/24 IP: 2001:43f8:b60::/47 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14996 (0x3a94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:16:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F366D2C6AF, serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1c:d4:a4:cd:73:0b:02:16:dc:38:61:41:8e: 05:a1:7b:6b:19:71:cb:05:77:7a:9f:cc:2b:5e:ae: cd:3a:87:6e:58:74:79:27:ec:4f:17:d6:9e:08:25: 92:1c:76:f8:a4:a6:7c:83:ec:18:c3:13:0c:54:83: a5:85:d8:f2:35:09:43:15:9f:d4:60:9d:ad:47:19: 1b:d7:65:dd:b1:4c:e0:8f:0b:f1:96:23:bf:05:c1: a9:ed:3a:f7:df:93:5d:53:53:a1:94:ee:52:26:9b: 0f:a0:a8:44:3c:5f:02:02:0e:25:3c:94:0c:c8:80: 69:33:b7:8a:09:5f:83:98:38:33:45:43:f0:a9:4e: 2c:0b:e1:04:be:16:37:f9:32:1f:de:fa:cf:23:01: a4:15:36:63:69:f2:4e:9b:3f:3d:bc:6a:eb:67:69: ec:aa:fe:3c:c6:72:2c:1d:95:b5:88:01:6c:9a:a8: e0:73:bc:d8:43:db:45:88:3b:d0:3d:45:3d:c1:50: 4a:1d:af:27:e9:42:6b:62:7e:d7:33:e8:12:87:5a: ed:49:31:20:9c:b7:1e:10:9b:6c:82:e6:49:a0:4a: f1:3a:f3:72:b0:ef:8e:0b:8a:58:88:c7:15:e0:c8: 61:5e:62:e5:4d:75:70:df:22:71:7e:e2:33:80:eb: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37716 328010 sbgp-ipAddrBlock: critical IPv4: 196.49.19.0/24 196.49.74.0/24 196.60.76.0/24 196.223.47.0/24 IPv6: 2001:43f8:b60::/47 Signature Algorithm: sha256WithRSAEncryption 70:bc:cf:d7:1c:1d:99:e4:36:ea:e3:43:1d:ab:78:5e:6e:d5: 47:14:39:b1:cc:62:90:f4:45:60:29:75:2f:f5:3a:1c:6a:3c: 0e:e8:74:f7:cc:db:a7:16:b9:14:1c:46:3f:1d:f9:f0:59:6b: 85:76:96:78:17:d1:41:6b:c6:32:7d:47:1b:87:f6:29:01:b8: f6:8d:88:22:be:92:53:8c:e5:d9:7b:74:b7:78:43:3c:f4:a5: c3:e9:c2:bd:6d:c5:72:bf:12:68:b3:9f:73:54:22:4f:7f:0d: c6:9a:6b:72:a1:de:c1:7e:b3:e2:82:c7:14:de:50:19:af:26: 66:d6:9c:67:a0:ae:ce:66:a4:0c:9a:74:d5:a8:83:c7:4c:77: f1:bb:b8:fd:c3:1d:ff:c9:4e:8a:32:14:10:69:84:eb:43:40: ca:87:8d:c5:23:e8:3c:5a:e5:be:22:67:b1:24:7b:a6:47:b0: bc:83:ba:c0:21:79:76:05:81:1a:2c:f0:f5:c8:4d:eb:e9:47: ee:12:fd:80:08:fb:4e:dd:1f:6d:eb:fd:d5:dd:bc:a6:58:b9: ff:53:92:07:7c:a7:73:59:6d:9b:2e:03:58:41:3c:28:a1:20: 91:0f:7f:a8:5a:a0:9a:4b:c7:e8:9c:ff:a8:ae:04:4c:a7:c2: 2a:c0:da:db -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgICOpQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjE2MDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjZEMkM2QUYxMTAvBgNVBAUTKDM4NjI5OEQ5RDBFQjcxQ0E5MEY0ODZB MTYxMzRBRjEzNjFEMjcxQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhHNSkzXMLAhbcOGFBjgWhe2sZccsFd3qfzCters06h25YdHkn7E8X1p4IJZIc dvikpnyD7BjDEwxUg6WF2PI1CUMVn9Rgna1HGRvXZd2xTOCPC/GWI78FwantOvff k11TU6GU7lImmw+gqEQ8XwICDiU8lAzIgGkzt4oJX4OYODNFQ/CpTiwL4QS+Fjf5 Mh/e+s8jAaQVNmNp8k6bPz28autnaeyq/jzGciwdlbWIAWyaqOBzvNhD20WIO9A9 RT3BUEodryfpQmtiftcz6BKHWu1JMSCctx4Qm2yC5kmgSvE683Kw744LiliIxxXg yGFeYuVNdXDfInF+4jOA68JPAgMBAAGjggMzMIIDLzAdBgNVHQ4EFgQUOGKY2dDr ccqQ9IahYTSvE2HSccgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2RDJDNi8wQkVDMDI1NjcxMUEx MUVCOUVCNkI0MUNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NkQyQzYvMEJFQzAyNTY3MTFBMTFFQjlFQjZCNDFDRjhBRUEyMjgvT0dLWTJk RHJjY3FROUlhaFlUU3ZFMkhTY2NnLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAk1QCAwUBSjBCBggrBgEFBQcBBwEB/wQzMDEwHgQCAAEwGAMEAMQxEwMEAMQx SgMEAMQ8TAMEAMTfLzAPBAIAAjAJAwcBIAFD+AtgMA0GCSqGSIb3DQEBCwUAA4IB AQBwvM/XHB2Z5Dbq40Mdq3hebtVHFDmxzGKQ9EVgKXUv9TocajwO6HT3zNunFrkU HEY/HfnwWWuFdpZ4F9FBa8YyfUcbh/YpAbj2jYgivpJTjOXZe3S3eEM89KXD6cK9 bcVyvxJos59zVCJPfw3Gmmtyod7BfrPigscU3lAZryZm1pxnoK7OZqQMmnTVqIPH THfxu7j9wx3/yU6KMhQQaYTrQ0DKh43FI+g8WuW+ImexJHumR7C8g7rAIXl2BYEa LPD1yE3r6UfuEv2ACPtO3R9t6/3V3bymWLn/U5IHfKdzWW2bLgNYQTwooSCRD3+o WqCaS8fonP+orgRMp8IqwNrb -----END CERTIFICATE-----Generated at Fri Jan 2 16:55:55 2026 by rpki-client