This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer File: TsI9Q07XmbNybP2OQaiJOGnVA6M.cer (raw, json) Hash identifier: EOYIZM1KUzATNqn+0aPCSkA9/V8BRQ7gkCJJ569YjiM= Subject key identifier: 4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3D45 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:56:40 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37622 IP: 41.222.96.0/21 IP: 41.223.76.0/22 IP: 102.131.48.0/21 IP: 154.65.8.0/22 IP: 2c0f:f550::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15685 (0x3d45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:56:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B87F4AF, serialNumber=4EC23D434ED799B3726CFD8E41A8893869D503A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:24:89:93:dc:dc:ce:e1:9f:13:39:53:76:6d: 14:82:08:e8:03:7b:82:18:d5:95:b6:f6:6f:a6:eb: 2c:fb:fd:c4:9b:62:a7:20:e0:10:f7:52:1c:c0:c7: 97:d1:88:d8:a2:1f:f1:75:57:74:b5:74:5e:68:0c: 51:bc:c1:f6:e6:f8:e4:3e:b3:7e:1e:07:1a:97:e1: 88:ce:4a:42:ba:a1:d9:3a:56:de:41:ef:44:5a:b1: 9d:21:10:6a:a4:4a:ea:fb:7a:3f:a9:24:6f:6c:4c: 10:2b:01:c4:87:e3:c8:f0:e6:c0:cd:17:be:ad:cd: 6f:0a:6a:f2:41:87:a7:67:01:e4:5e:29:50:e6:ad: 78:2c:ca:a4:2f:60:91:d3:fc:c9:b7:45:bb:06:ea: ce:fe:bf:72:41:e5:3c:1d:ed:b0:d5:2a:ce:1c:ea: fc:28:9d:98:f8:03:62:b9:05:9b:d0:1a:8f:be:13: c9:99:49:1c:01:ce:c0:97:11:ff:a6:15:6a:6c:23: c5:f3:95:27:6b:04:bb:2f:fe:ab:12:86:e3:39:b7: 57:c7:0e:a5:53:63:ed:cc:be:06:2e:34:52:d7:92: 04:2f:37:28:56:72:4d:f0:60:92:17:c3:26:4d:f1: 8e:eb:fa:bc:35:f3:ea:ba:a1:83:7a:80:f0:d5:9d: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37622 sbgp-ipAddrBlock: critical IPv4: 41.222.96.0/21 41.223.76.0/22 102.131.48.0/21 154.65.8.0/22 IPv6: 2c0f:f550::/32 Signature Algorithm: sha256WithRSAEncryption 08:db:db:cf:bd:41:99:f6:09:09:8e:f2:d7:88:d9:e9:ee:61: cb:2a:8f:4d:2e:bf:94:bd:df:b9:18:bb:e4:47:4a:c5:ab:55: 6f:8e:95:c1:66:6b:0e:eb:0d:82:d9:f0:3a:5f:f0:ec:09:33: 7e:c7:05:d2:67:98:cc:40:56:bf:e2:31:6b:3f:59:c8:18:c1: fd:18:b0:61:99:4f:a7:b4:e0:c2:a2:78:8a:10:9f:df:4e:d4: eb:d8:14:4c:5d:ec:cb:de:5a:83:3f:7f:1c:68:f3:d5:4f:64: 8a:7b:9c:00:1b:6c:34:63:e0:eb:9a:4c:26:b3:b1:6d:e4:17: 76:8a:1b:19:85:4f:53:30:3e:53:07:d9:c5:2d:6a:93:a9:f0: c7:e1:d9:f7:22:1b:57:e5:33:a1:69:7d:4a:bf:03:14:9b:12: 21:eb:2a:a0:47:7c:61:f4:0b:bd:23:a9:ce:a8:81:6c:1b:3c: c1:cb:af:a2:c1:94:bf:e3:77:47:8c:07:dc:ae:0f:de:04:6f: 2b:1f:7f:ac:36:e5:89:15:e6:08:52:1e:c7:be:36:d2:12:d7: 13:e3:dd:c2:99:bb:63:bc:b7:c0:f6:15:43:8a:0d:55:03:8d: 46:35:e6:d4:0d:97:62:99:d9:92:43:55:6c:40:53:8b:bd:11: cc:b5:de:5a -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICPUUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzU2NDBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkI4N0Y0QUYxMTAvBgNVBAUTKDRFQzIzRDQzNEVENzk5QjM3MjZDRkQ4 RTQxQTg4OTM4NjlENTAzQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhJImT3NzO4Z8TOVN2bRSCCOgDe4IY1ZW29m+m6yz7/cSbYqcg4BD3UhzAx5fR iNiiH/F1V3S1dF5oDFG8wfbm+OQ+s34eBxqX4YjOSkK6odk6Vt5B70RasZ0hEGqk Sur7ej+pJG9sTBArAcSH48jw5sDNF76tzW8KavJBh6dnAeReKVDmrXgsyqQvYJHT /Mm3RbsG6s7+v3JB5Twd7bDVKs4c6vwonZj4A2K5BZvQGo++E8mZSRwBzsCXEf+m FWpsI8XzlSdrBLsv/qsShuM5t1fHDqVTY+3MvgYuNFLXkgQvNyhWck3wYJIXwyZN 8Y7r+rw18+q6oYN6gPDVnRN3AgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUTsI9Q07X mbNybP2OQaiJOGnVA6MwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCODdGNC9CMERDQTU0QTQ1MTUx MUVGQUJEOUZGOTA3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Qjg3RjQvQjBEQ0E1NEE0NTE1MTFFRkFCRDlGRjkwNzYyRTk1MUEvVHNJOVEw N1htYk55YlAyT1FhaUpPR25WQTZNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkvYwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAMp3mADBAIp30wDBANm gzADBAKaQQgwDQQCAAIwBwMFACwP9VAwDQYJKoZIhvcNAQELBQADggEBAAjb28+9 QZn2CQmO8teI2enuYcsqj00uv5S937kYu+RHSsWrVW+OlcFmaw7rDYLZ8Dpf8OwJ M37HBdJnmMxAVr/iMWs/WcgYwf0YsGGZT6e04MKieIoQn99O1OvYFExd7MveWoM/ fxxo89VPZIp7nAAbbDRj4OuaTCazsW3kF3aKGxmFT1MwPlMH2cUtapOp8Mfh2fci G1flM6FpfUq/AxSbEiHrKqBHfGH0C70jqc6ogWwbPMHLr6LBlL/jd0eMB9yuD94E bysff6w25YkV5ghSHse+NtIS1xPj3cKZu2O8t8D2FUOKDVUDjUY15tQNl2KZ2ZJD VWxAU4u9Ecy13lo= -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:47 2026 by rpki-client