This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer File: gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer (raw, json) Hash identifier: PK/QWUyfljdkSxZ917f78mG0uSQ/JxPheWRdFF5muDs= Subject key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3942 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:24:14 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37337 IP: 41.79.48.0/22 IP: 102.223.24.0/22 IP: 2c0f:f840::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 12 Jan 2026 00:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14658 (0x3942) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:24:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F364744FAF, serialNumber=80AF060E4640C32653D0F00C3024514A9F149538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:6a:09:1a:cf:4b:28:53:4c:26:6a:12:41: 8c:47:80:4d:09:98:bc:82:c4:28:91:cf:4f:77:0d: 11:ae:a1:51:2d:5a:1b:da:8c:b6:61:4b:df:10:c8: 15:16:b4:cf:45:0c:fd:10:7d:a5:39:10:8c:cd:8e: 04:3a:94:8a:dd:40:2c:6a:14:ea:44:cb:dd:23:0c: df:fe:b5:3a:6e:e0:f1:69:99:de:e2:a3:23:16:51: 59:4b:21:1d:ac:85:a2:2e:ef:10:80:18:42:cd:d2: 6d:93:9c:02:67:05:3a:59:b9:8b:74:4c:05:c9:9c: 56:e0:a8:4d:99:f2:1e:ec:a5:62:6c:88:23:60:cf: ee:58:dd:09:c2:3c:04:bc:9f:4b:72:77:13:3f:0d: dc:e5:13:d5:70:78:e1:43:2d:87:66:94:72:3e:9b: 1b:61:d4:95:0a:a9:5d:62:78:dc:b9:e3:37:88:54: af:19:69:3b:3b:ed:75:09:1a:a1:49:69:3e:b6:65: 8f:1b:07:58:d9:2c:a3:ac:1b:44:ee:44:86:3d:b4: 86:de:99:96:a5:00:bb:94:ff:05:2d:b8:c1:2a:5b: d0:77:9e:7c:50:39:a7:3e:e7:33:ff:3d:9e:78:d4: 4b:05:46:02:bd:44:00:79:0f:a3:c6:a7:a9:e0:a2: 98:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37337 sbgp-ipAddrBlock: critical IPv4: 41.79.48.0/22 102.223.24.0/22 IPv6: 2c0f:f840::/32 Signature Algorithm: sha256WithRSAEncryption 2c:86:48:0e:af:00:77:d3:6e:98:00:a4:8e:7d:9a:ad:e2:aa: 15:37:63:51:05:27:c6:8c:7d:2f:1a:59:7c:87:0b:24:f5:0d: 48:99:34:b2:9b:46:9f:f7:22:e1:bf:53:18:b8:fa:00:28:e4: e6:ea:31:d8:b6:89:fb:82:e0:02:b4:26:58:99:fa:de:3b:38: 72:b3:29:c1:0c:4b:b4:2f:14:21:7e:f2:0f:87:08:d9:bb:d7: 40:d9:c0:d7:1e:3b:da:3f:58:48:7c:74:30:ea:db:cf:5b:3c: 1f:bb:b5:41:c1:37:fe:d8:78:05:7f:5b:b4:5a:7e:3c:c2:4e: 55:20:22:c1:c0:75:b6:b8:27:3e:0d:9b:5e:e7:21:12:dd:1e: aa:d4:c2:35:5a:11:32:a5:9d:79:05:9c:9a:f8:fc:0d:66:d8: 4d:4e:15:6e:2a:5a:a0:48:e0:83:7c:21:fa:ab:83:94:ae:fa: 76:d5:c6:0d:1f:0b:ac:17:7f:46:76:29:e0:14:34:0d:db:a6: 0a:e8:54:fd:fb:e5:f0:22:34:7c:6e:fe:de:c4:e0:53:cb:60: e2:c6:3c:50:02:e2:84:ed:b3:45:fd:71:65:16:a6:eb:79:85: 5a:9a:e2:d3:6e:97:06:50:e2:98:82:6f:f9:27:cf:20:5b:6f: 65:2b:7d:04 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOUIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTI0MTRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQ3NDRGQUYxMTAvBgNVBAUTKDgwQUYwNjBFNDY0MEMzMjY1M0QwRjAw QzMwMjQ1MTRBOUYxNDk1MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaQWoJGs9LKFNMJmoSQYxHgE0JmLyCxCiRz093DRGuoVEtWhvajLZhS98QyBUW tM9FDP0QfaU5EIzNjgQ6lIrdQCxqFOpEy90jDN/+tTpu4PFpmd7ioyMWUVlLIR2s haIu7xCAGELN0m2TnAJnBTpZuYt0TAXJnFbgqE2Z8h7spWJsiCNgz+5Y3QnCPAS8 n0tydxM/DdzlE9VweOFDLYdmlHI+mxth1JUKqV1ieNy54zeIVK8ZaTs77XUJGqFJ aT62ZY8bB1jZLKOsG0TuRIY9tIbemZalALuU/wUtuMEqW9B3nnxQOac+5zP/PZ54 1EsFRgK9RAB5D6PGp6ngopgvAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUgK8GDkZA wyZT0PAMMCRRSp8UlTgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0NzQ0Ri8zQjAyRjhCMkFEQzMx MUVBOEY0MkVGNzdGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDc0NEYvM0IwMkY4QjJBREMzMTFFQThGNDJFRjc3RjhBRUEyMjgvZ0s4R0Rr WkF3eVpUMFBBTU1DUlJTcDhVbFRnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkdkwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIpTzADBAJm3xgwDQQC AAIwBwMFACwP+EAwDQYJKoZIhvcNAQELBQADggEBACyGSA6vAHfTbpgApI59mq3i qhU3Y1EFJ8aMfS8aWXyHCyT1DUiZNLKbRp/3IuG/Uxi4+gAo5ObqMdi2ifuC4AK0 JliZ+t47OHKzKcEMS7QvFCF+8g+HCNm710DZwNceO9o/WEh8dDDq289bPB+7tUHB N/7YeAV/W7RafjzCTlUgIsHAdba4Jz4Nm17nIRLdHqrUwjVaETKlnXkFnJr4/A1m 2E1OFW4qWqBI4IN8Ifqrg5Su+nbVxg0fC6wXf0Z2KeAUNA3bpgroVP375fAiNHxu /t7E4FPLYOLGPFAC4oTts0X9cWUWput5hVqa4tNulwZQ4piCb/knzyBbb2UrfQQ= -----END CERTIFICATE-----Generated at Sat Jan 10 03:57:05 2026 by rpki-client