This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer File: PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer (raw, json) Hash identifier: K9WxhujGMfFIIsuQ+DSgxhCa0vyyhaxTocB63pVuZEU= Subject key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C11 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:10:35 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37098 IP: 41.77.8.0/21 IP: 41.216.228.0/22 IP: 154.66.120.0/21 IP: 2c0f:f9a0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15377 (0x3c11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:10:35 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B33A4AF, serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:7f:ca:52:b9:76:41:74:9a:18:53:79:e9: 14:0b:b6:a2:34:61:32:e9:7b:04:67:40:db:a6:63: 09:bb:80:b3:d0:8a:08:bb:78:62:91:af:18:c5:01: 84:28:bc:04:9d:5e:fa:28:67:b9:3e:38:9c:ce:05: cd:e5:db:96:65:5c:f1:9b:84:d0:ed:df:36:33:da: 0f:d0:43:51:d6:a3:bf:cd:20:84:fa:43:34:ab:96: ce:36:ce:cb:7a:70:58:72:42:a0:d2:48:6e:d4:a2: 2d:6e:8d:c3:14:ff:20:6d:df:df:9f:0a:47:fd:56: 8c:e1:09:9b:7f:41:1c:eb:ea:a1:cf:4a:4c:83:08: 6b:62:9b:02:77:65:f1:7b:99:71:18:52:82:5d:95: 40:42:8b:e2:18:8d:5b:89:37:7e:72:1f:fa:6b:ec: 47:28:ac:41:bf:5f:99:cc:c7:54:b6:b9:78:ed:1b: af:ee:6b:9f:22:42:9c:25:b4:45:9b:60:28:01:8a: 08:81:9a:e6:64:c8:55:d8:e3:28:fe:58:be:a8:fc: ba:90:d1:bf:21:9c:bf:a1:81:70:af:79:3a:ee:bc: ca:8f:07:aa:09:9b:a9:6b:e0:6b:da:a8:95:89:3e: 27:59:c0:e1:23:fc:68:00:d6:e7:91:e6:ed:59:d3: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37098 sbgp-ipAddrBlock: critical IPv4: 41.77.8.0/21 41.216.228.0/22 154.66.120.0/21 IPv6: 2c0f:f9a0::/32 Signature Algorithm: sha256WithRSAEncryption 26:8d:26:f7:3c:4e:43:c2:77:b3:f5:49:66:5c:cb:ae:50:6d: 46:d8:10:57:08:bb:41:86:a8:b0:c8:40:a6:94:00:db:a3:65: 99:a3:b1:dd:2e:a8:7a:64:df:b3:a0:dd:10:7d:41:ba:ff:e7: f7:fb:cb:ef:18:e4:a7:ef:b6:ea:c4:bd:b5:18:8c:91:64:0b: 2a:11:fd:e2:14:2f:79:98:ea:47:09:05:41:c1:1c:79:60:e3: f3:e2:cb:a4:76:c9:d7:10:a3:49:25:6d:c1:da:63:dd:22:a3: 27:37:9e:23:d6:54:05:cc:04:66:e2:ca:d4:56:fa:1b:75:b5: 01:13:60:76:92:27:a1:4f:80:b2:af:af:ae:60:68:c9:0a:45: b1:4a:5d:b3:ef:92:95:58:df:8a:d5:bc:d0:7b:94:29:11:ba: e5:cb:3d:c7:c4:c2:22:8f:e9:9e:88:7d:dd:12:a2:b5:4c:01: 87:29:e2:98:f7:5e:98:6e:08:ba:69:01:a8:e3:df:4d:bb:9b: 88:44:35:bf:29:b0:df:be:9a:0b:fe:cb:c9:8d:90:27:bb:1d: 96:c7:08:89:67:f1:bb:b2:64:c9:ad:02:12:19:4b:8a:9f:54: 1c:eb:39:67:92:0b:ec:7a:7a:49:58:c1:68:56:d8:a0:d6:c4: 07:2a:10:ac -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICPBEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzEwMzVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkIzM0E0QUYxMTAvBgNVBAUTKDNFMENFNjNENjA0NTVCRDY1QkFBMzE1 NEJFODEyMDZDNjdFNjlENDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn03/KUrl2QXSaGFN56RQLtqI0YTLpewRnQNumYwm7gLPQigi7eGKRrxjFAYQo vASdXvooZ7k+OJzOBc3l25ZlXPGbhNDt3zYz2g/QQ1HWo7/NIIT6QzSrls42zst6 cFhyQqDSSG7Uoi1ujcMU/yBt39+fCkf9VozhCZt/QRzr6qHPSkyDCGtimwJ3ZfF7 mXEYUoJdlUBCi+IYjVuJN35yH/pr7EcorEG/X5nMx1S2uXjtG6/ua58iQpwltEWb YCgBigiBmuZkyFXY4yj+WL6o/LqQ0b8hnL+hgXCveTruvMqPB6oJm6lr4GvaqJWJ PidZwOEj/GgA1ueR5u1Z00Q1AgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUPgzmPWBF W9ZbqjFUvoEgbGfmnUQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCMzNBNC8yRTc0Mzc4MkExQUMx MUVBOUZFQkMzNzRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QjMzQTQvMkU3NDM3ODJBMUFDMTFFQTlGRUJDMzc0RjhBRUEyMjgvUGd6bVBX QkZXOVpicWpGVXZvRWdiR2ZtblVRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkOowOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAMpTQgDBAIp2OQDBAOa QngwDQQCAAIwBwMFACwP+aAwDQYJKoZIhvcNAQELBQADggEBACaNJvc8TkPCd7P1 SWZcy65QbUbYEFcIu0GGqLDIQKaUANujZZmjsd0uqHpk37Og3RB9Qbr/5/f7y+8Y 5KfvturEvbUYjJFkCyoR/eIUL3mY6kcJBUHBHHlg4/Piy6R2ydcQo0klbcHaY90i oyc3niPWVAXMBGbiytRW+ht1tQETYHaSJ6FPgLKvr65gaMkKRbFKXbPvkpVY34rV vNB7lCkRuuXLPcfEwiKP6Z6Ifd0SorVMAYcp4pj3XphuCLppAajj3027m4hENb8p sN++mgv+y8mNkCe7HZbHCIln8buyZMmtAhIZS4qfVBzrOWeSC+x6eklYwWhW2KDW xAcqEKw= -----END CERTIFICATE-----Generated at Sun Jan 11 23:34:22 2026 by rpki-client