This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer File: SoPzGxsGBMptC3KkU9qj61h7TII.cer (raw, json) Hash identifier: MKEa7qPZ0aSnfl61BIgOJ6+rOSNeW7TS0ookcIXdO4U= Subject key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B62 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:45:11 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 30986 AS: 37255 IP: 41.189.160.0/19 IP: 154.160.0.0/12 IP: 196.201.32.0/19 IP: 2c0e:a000::/24 IP: 2c0f:f7c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 15 Jan 2026 00:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15202 (0x3b62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:45:11 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:b5:a7:c8:be:41:64:46:70:a3:85:3a:ca: ef:05:a8:d0:79:c2:4f:0f:a0:db:6d:93:c0:69:56: aa:3e:2c:bb:78:a5:d3:47:3a:fd:2a:2d:75:d1:6c: cb:68:d4:77:7d:fb:b3:d5:44:ff:ae:62:50:2d:29: bf:1f:4d:1a:57:05:2d:30:f9:40:6f:13:83:d7:e5: 7b:fc:71:74:dc:68:cd:2b:51:bc:49:23:18:59:63: d3:3c:66:fd:25:78:f8:00:3c:a4:cd:92:4a:1d:3a: d5:13:49:98:1c:64:be:ff:d0:ac:83:b6:a7:9c:7b: ff:d0:a2:d5:07:24:e1:6a:b7:60:75:85:b8:78:33: 6f:45:9d:90:a2:2e:04:fe:0b:70:14:eb:4e:a9:de: eb:aa:14:b7:6c:ad:f4:49:f3:d0:86:51:2b:a3:9f: 74:69:16:03:9c:cd:bb:de:57:43:e5:13:47:75:46: e6:de:3d:d7:7c:74:f0:00:8d:c5:e8:aa:35:5b:24: e6:98:7d:3d:90:7e:e6:86:31:fe:b6:28:f1:91:78: b0:b4:68:7e:a7:7c:20:09:0b:a2:07:2d:3d:a7:c4: cd:e8:b4:73:86:24:25:e8:77:74:24:4e:7f:96:d3: a7:fc:74:6f:10:be:78:2e:0d:62:01:e4:cc:5f:c3: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 30986 37255 sbgp-ipAddrBlock: critical IPv4: 41.189.160.0/19 154.160.0.0/12 196.201.32.0/19 IPv6: 2c0e:a000::/24 2c0f:f7c0::/32 Signature Algorithm: sha256WithRSAEncryption 63:46:29:01:f2:22:97:30:bc:65:f2:9f:6f:d7:89:4a:ba:36: 1f:77:96:27:7d:0d:42:4d:55:e4:a0:dc:f9:d6:5f:66:15:98: 20:38:46:cf:b6:a1:97:d1:25:3d:b7:7a:6a:a2:22:19:3c:c6: 74:6b:60:08:a3:19:e7:a3:23:82:eb:30:9a:c3:17:ad:da:3e: 94:0e:16:5b:84:ca:3a:cf:fa:f9:e7:b0:38:8b:6d:41:8e:9d: fe:fb:10:78:cc:f5:ce:00:a5:c9:3c:d2:ed:dd:67:ee:18:5c: cc:ed:ce:47:02:70:d1:75:9a:25:e9:31:e0:b9:68:8b:82:c4: 45:32:1c:23:08:4a:89:e5:10:24:f3:3e:33:8b:f2:4d:5a:dc: 04:56:e2:fd:b3:d2:cf:40:26:68:a4:66:28:03:a4:92:06:38: 3b:f0:43:c3:6b:78:9f:3d:ec:a5:82:29:4e:82:e7:45:e3:f6: bc:0b:ac:01:f1:7b:dd:ea:cb:bf:6f:05:5f:7d:e6:1f:98:50: 47:52:b7:d0:de:10:a7:60:db:33:20:44:d0:09:23:a6:b4:82: a3:cd:df:6c:8f:b9:a0:98:7a:65:9b:ff:bb:1c:57:38:b7:8a: da:8f:90:b7:ea:e2:b9:60:ec:8f:dc:a5:8d:ca:e5:10:4f:06: 18:ed:2e:a9 -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgICO2IwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjQ1MTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjgxRUQwQUYxMTAvBgNVBAUTKDRBODNGMzFCMUIwNjA0Q0E2RDBCNzJB NDUzREFBM0VCNTg3QjRDODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAlrWnyL5BZEZwo4U6yu8FqNB5wk8PoNttk8BpVqo+LLt4pdNHOv0qLXXRbMto 1Hd9+7PVRP+uYlAtKb8fTRpXBS0w+UBvE4PX5Xv8cXTcaM0rUbxJIxhZY9M8Zv0l ePgAPKTNkkodOtUTSZgcZL7/0KyDtqece//QotUHJOFqt2B1hbh4M29FnZCiLgT+ C3AU606p3uuqFLdsrfRJ89CGUSujn3RpFgOczbveV0PlE0d1RubePdd8dPAAjcXo qjVbJOaYfT2QfuaGMf62KPGReLC0aH6nfCAJC6IHLT2nxM3otHOGJCXod3QkTn+W 06f8dG8QvnguDWIB5Mxfw5cHAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUSoPzGxsG BMptC3KkU9qj61h7TIIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4MUVEMC81MjUxQzA3OENFMjQx MUVEQTA5MkQwQUNGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2ODFFRDAvNTI1MUMwNzhDRTI0MTFFREEwOTJEMEFDRjEyMjI0NjgvU29Qekd4 c0dCTXB0QzNLa1U5cWo2MWg3VElJLm1mdDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJ AgJ5CgIDAJGHMD8GCCsGAQUFBwEHAQH/BDAwLjAXBAIAATARAwQFKb2gAwMEmqAD BAXEySAwEwQCAAIwDQMEACwOoAMFACwP98AwDQYJKoZIhvcNAQELBQADggEBAGNG KQHyIpcwvGXyn2/XiUq6Nh93lid9DUJNVeSg3PnWX2YVmCA4Rs+2oZfRJT23emqi Ihk8xnRrYAijGeejI4LrMJrDF63aPpQOFluEyjrP+vnnsDiLbUGOnf77EHjM9c4A pck80u3dZ+4YXMztzkcCcNF1miXpMeC5aIuCxEUyHCMISonlECTzPjOL8k1a3ARW 4v2z0s9AJmikZigDpJIGODvwQ8NreJ897KWCKU6C50Xj9rwLrAHxe93qy79vBV99 5h+YUEdSt9DeEKdg2zMgRNAJI6a0gqPN32yPuaCYemWb/7scVzi3itqPkLfq4rlg 7I/cpY3K5RBPBhjtLqk= -----END CERTIFICATE-----Generated at Tue Jan 13 03:56:17 2026 by rpki-client