This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/P5zY-FE-7AV78kzbzX87-jp0Pnw.cer File: P5zY-FE-7AV78kzbzX87-jp0Pnw.cer (raw, json) Hash identifier: 7ZJWl031lEX/zlfYqutnFpPoJJSZqppJtJTJQyaBbXA= Subject key identifier: 3F:9C:D8:F8:51:3E:EC:05:7B:F2:4C:DB:CD:7F:3B:FA:3A:74:3E:7C Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 373C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Sun 21 Dec 2025 12:53:25 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 15475 IP: 41.64.0.0/15 IP: 41.176.0.0/16 IP: 41.199.0.0/16 IP: 154.236.0.0/14 IP: 2001:42b8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 23 Dec 2025 12:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14140 (0x373c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Dec 21 12:53:25 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36CC4C5AF, serialNumber=3F9CD8F8513EEC057BF24CDBCD7F3BFA3A743E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:23:e0:e4:3f:29:5e:b5:56:12:52:44:4b:28: 1d:49:0d:0e:30:e2:a4:08:13:cd:7d:19:26:46:76: bd:79:a0:e6:f0:d8:5f:d4:3c:ee:ba:6a:c7:35:ca: 48:7a:46:68:70:ce:f5:66:ab:43:f3:cc:7c:96:3a: c2:ae:98:07:b2:9b:31:ac:95:7e:ad:1d:c4:a5:70: 0a:6f:87:86:69:26:64:86:b2:23:20:9d:84:0d:10: ae:3c:d5:d9:01:3e:9c:08:31:30:93:cc:fa:1f:c8: 6d:35:b6:f2:65:65:ac:c5:2b:7a:f6:78:a3:1b:b6: 76:af:4c:cd:72:81:3f:bb:fc:aa:55:f1:1b:8d:11: b8:e0:1f:ba:2c:14:e0:64:60:e4:c0:6d:e6:86:b3: a4:b4:b0:01:b4:ce:92:93:8d:78:a2:92:4d:4b:c7: 11:f0:78:43:94:43:e0:49:59:dd:0e:c9:0f:a6:39: 93:8a:12:73:9e:6e:5f:03:4a:4a:8e:93:ab:90:46: 7d:24:96:78:8b:ed:a4:ad:da:50:56:98:ba:de:12: 32:52:ea:8a:48:5f:18:0b:fd:f9:89:11:eb:fb:02: 99:eb:7b:cd:94:d9:9e:44:86:8f:69:73:13:46:24: 8d:10:b1:e2:00:c1:a6:4f:35:68:80:6a:9a:34:a9: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9C:D8:F8:51:3E:EC:05:7B:F2:4C:DB:CD:7F:3B:FA:3A:74:3E:7C X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 15475 sbgp-ipAddrBlock: critical IPv4: 41.64.0.0/15 41.176.0.0/16 41.199.0.0/16 154.236.0.0/14 IPv6: 2001:42b8::/32 Signature Algorithm: sha256WithRSAEncryption 62:98:10:8c:28:d0:ff:f0:54:39:15:e2:5b:eb:dd:bb:f7:25: 9c:e6:88:e8:26:a7:79:e5:ea:7b:03:46:ce:5b:ed:07:b8:d9: ab:c3:d0:02:db:40:45:0f:b3:b6:25:ae:9b:71:0d:b7:99:0b: f7:91:18:ef:60:8c:d7:72:4a:8b:50:f7:d2:ee:fd:4b:b9:0d: f1:0c:39:1a:5e:1d:8e:cb:37:de:57:ee:e7:cd:54:f0:6c:d2: 84:4f:b0:dc:df:79:fa:ad:29:3c:d9:f0:2a:a2:ed:d2:36:92: 8b:48:a9:97:39:29:7e:2c:f9:d7:f1:c4:fd:2e:65:74:54:d2: 1a:0a:f2:db:f2:05:96:e2:e6:1c:2b:6b:ec:13:92:14:38:ac: d4:2c:c6:72:ee:b0:1f:9d:fa:50:8e:e8:6a:91:2d:56:07:a1: 4c:6f:90:96:df:f0:a7:9e:51:fd:b0:ac:ae:f1:d9:06:15:04: 55:4e:df:62:77:83:71:90:fb:cf:26:53:32:7c:1c:aa:93:af: 4b:ae:fd:88:38:4f:02:37:32:53:6d:6c:fe:88:ce:01:5f:bf: 4f:12:12:8c:83:6b:15:30:82:b4:d2:11:41:28:e9:49:ce:da: 1e:96:f6:9f:d4:9e:3c:75:95:be:bf:23:3d:4c:ad:f1:14:bb: fe:03:62:13 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgICNzwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTEyMjExMjUzMjVaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkNDNEM1QUYxMTAvBgNVBAUTKDNGOUNEOEY4NTEzRUVDMDU3QkYyNENE QkNEN0YzQkZBM0E3NDNFN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgI+DkPyletVYSUkRLKB1JDQ4w4qQIE819GSZGdr15oObw2F/UPO66asc1ykh6 RmhwzvVmq0PzzHyWOsKumAeymzGslX6tHcSlcApvh4ZpJmSGsiMgnYQNEK481dkB PpwIMTCTzPofyG01tvJlZazFK3r2eKMbtnavTM1ygT+7/KpV8RuNEbjgH7osFOBk YOTAbeaGs6S0sAG0zpKTjXiikk1LxxHweEOUQ+BJWd0OyQ+mOZOKEnOebl8DSkqO k6uQRn0klniL7aSt2lBWmLreEjJS6opIXxgL/fmJEev7Apnre82U2Z5Eho9pcxNG JI0QseIAwaZPNWiAapo0qYZfAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQUP5zY+FE+ 7AV78kzbzX87+jp0PnwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDQzRDNS8wNENBRTRCNERFNkMx MUYwQkJENTRGRUFEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Q0M0QzUvMDRDQUU0QjRERTZDMTFGMEJCRDU0RkVBREFFNEVDOUMvUDV6WS1G RS03QVY3OGt6YnpYODctanAwUG53Lm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgI8czA8BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFAMDASlAAwMAKbADAwApxwMD AprsMA0EAgACMAcDBQAgAUK4MA0GCSqGSIb3DQEBCwUAA4IBAQBimBCMKND/8FQ5 FeJb69279yWc5ojoJqd55ep7A0bOW+0HuNmrw9AC20BFD7O2Ja6bcQ23mQv3kRjv YIzXckqLUPfS7v1LuQ3xDDkaXh2OyzfeV+7nzVTwbNKET7Dc33n6rSk82fAqou3S NpKLSKmXOSl+LPnX8cT9LmV0VNIaCvLb8gWW4uYcK2vsE5IUOKzULMZy7rAfnfpQ juhqkS1WB6FMb5CW3/CnnlH9sKyu8dkGFQRVTt9id4NxkPvPJlMyfByqk69Lrv2I OE8CNzJTbWz+iM4BX79PEhKMg2sVMIK00hFBKOlJztoelvaf1J48dZW+vyM9TK3x FLv+A2IT -----END CERTIFICATE-----Generated at Sun Dec 21 20:28:41 2025 by rpki-client