This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.cer File: ZQaOT8TTJ_ez8uFZqtkSYYIldUc.cer (raw, json) Hash identifier: RVO1XewP5eQCXlst0ilon04E9J+g/nM/WaOdxj9Ko9Y= Subject key identifier: 65:06:8E:4F:C4:D3:27:F7:B3:F2:E1:59:AA:D9:12:61:82:25:75:47 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AA0 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:47 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329522 IP: 41.74.144.0/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15008 (0x3aa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:17:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F366E8F3AF, serialNumber=65068E4FC4D327F7B3F2E159AAD9126182257547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:d6:74:65:f9:e3:14:3e:2b:23:5c:d5:42: 0b:a0:73:b7:73:c8:f7:f9:04:ad:dd:45:2e:7e:1c: 55:a9:7e:3f:ab:3b:a7:d8:4c:0f:f8:c2:3e:14:24: 21:29:06:46:ad:46:08:29:28:19:63:14:b3:5e:c2: 1a:a9:b2:da:29:01:8c:35:b7:08:8c:15:08:b7:71: c1:c9:80:4f:f2:54:44:37:58:7b:76:4f:25:ee:cf: 31:5d:7f:4c:72:9d:2d:f6:45:66:6e:bf:34:74:74: 00:b9:e3:4a:41:3b:52:9f:b5:40:fe:f9:20:ab:87: ee:f0:7f:9a:c4:de:e6:41:8c:48:ed:b8:8a:7d:a5: 0d:c8:60:a9:1d:b4:24:b6:03:89:1a:af:81:a2:56: da:97:1b:24:e5:40:1b:19:aa:c6:17:b9:78:57:d1: 3c:8a:a9:99:ac:1d:ee:46:25:62:36:70:09:1b:a5: 1b:1d:cb:a0:a3:26:04:d9:e3:52:df:8b:fc:23:1c: 5c:de:07:66:0f:c3:20:d2:8d:41:1c:f0:53:d0:4a: bb:1c:97:5a:e8:b6:f5:33:a0:53:1b:ca:7e:55:53: d1:66:39:7c:85:d0:be:38:c3:04:46:51:bd:af:f5: 65:d0:d2:12:c7:0b:7c:12:d1:db:ee:31:2f:e1:f4: 5e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:06:8E:4F:C4:D3:27:F7:B3:F2:E1:59:AA:D9:12:61:82:25:75:47 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329522 sbgp-ipAddrBlock: critical IPv4: 41.74.144.0/20 Signature Algorithm: sha256WithRSAEncryption 00:34:e8:95:56:38:84:fc:38:be:cd:85:57:3b:e9:0d:45:1a: 0a:46:e0:97:d3:f5:d0:ed:85:e1:9b:cd:c3:89:1d:8d:6a:80: f6:75:00:34:9e:13:ca:11:4e:ba:b0:22:38:0e:92:40:53:cc: ff:7c:f1:66:c7:46:74:23:62:7a:2c:f7:83:3a:2e:ff:bf:87: af:90:80:41:94:53:95:9f:ad:26:43:90:74:b5:a2:39:13:c8: 49:c3:b8:6a:45:0a:7a:80:ba:27:c1:1e:fa:dc:03:ad:2e:61: 58:27:a1:dc:02:66:1b:bb:78:6f:20:ed:20:b3:30:34:19:00: 29:a0:f1:78:13:59:d9:8a:87:d1:e7:d5:6e:1c:f8:72:21:9d: bb:69:71:39:ea:f4:1a:b6:9f:37:e1:f8:8e:ae:97:cb:9b:db: 8f:bb:36:18:47:60:67:e5:ed:72:ad:16:2a:2f:6f:de:bd:0e: aa:96:a9:34:f6:7b:fb:32:42:34:1e:1f:66:a6:81:91:b3:2b: a7:e2:75:fb:db:6f:3d:5c:56:6b:1a:a2:6a:5b:f3:11:95:62: 70:12:7b:0c:ca:da:7f:16:bf:5e:05:b3:2d:d8:df:d3:26:cb: bb:52:af:3c:b9:f5:36:c7:21:66:ae:d6:29:c5:ad:5f:17:61: 67:09:dd:c0 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgICOqAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjE3NDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjZFOEYzQUYxMTAvBgNVBAUTKDY1MDY4RTRGQzREMzI3RjdCM0YyRTE1 OUFBRDkxMjYxODIyNTc1NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI3NZ0ZfnjFD4rI1zVQgugc7dzyPf5BK3dRS5+HFWpfj+rO6fYTA/4wj4UJCEp BkatRggpKBljFLNewhqpstopAYw1twiMFQi3ccHJgE/yVEQ3WHt2TyXuzzFdf0xy nS32RWZuvzR0dAC540pBO1KftUD++SCrh+7wf5rE3uZBjEjtuIp9pQ3IYKkdtCS2 A4kar4GiVtqXGyTlQBsZqsYXuXhX0TyKqZmsHe5GJWI2cAkbpRsdy6CjJgTZ41Lf i/wjHFzeB2YPwyDSjUEc8FPQSrscl1rotvUzoFMbyn5VU9FmOXyF0L44wwRGUb2v 9WXQ0hLHC3wS0dvuMS/h9F6lAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUZQaOT8TT J/ez8uFZqtkSYYIldUcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2RThGMy9CNzQzNTYwRTAzMkUx MUYwQkNGNzk0NjU3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NkU4RjMvQjc0MzU2MEUwMzJFMTFGMEJDRjc5NDY1NzYyRTk1MUEvWlFhT1Q4 VFRKX2V6OHVGWnF0a1NZWUlsZFVjLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBzIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQpSpAwDQYJKoZIhvcN AQELBQADggEBAAA06JVWOIT8OL7NhVc76Q1FGgpG4JfT9dDtheGbzcOJHY1qgPZ1 ADSeE8oRTrqwIjgOkkBTzP988WbHRnQjYnos94M6Lv+/h6+QgEGUU5WfrSZDkHS1 ojkTyEnDuGpFCnqAuifBHvrcA60uYVgnodwCZhu7eG8g7SCzMDQZACmg8XgTWdmK h9Hn1W4c+HIhnbtpcTnq9Bq2nzfh+I6ul8ub24+7NhhHYGfl7XKtFiovb969DqqW qTT2e/syQjQeH2amgZGzK6fidfvbbz1cVmsaompb8xGVYnASewzK2n8Wv14Fsy3Y 39Mmy7tSrzy59TbHIWau1inFrV8XYWcJ3cA= -----END CERTIFICATE-----Generated at Thu Jan 1 12:29:19 2026 by rpki-client