This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer File: kgRBKh8SvNXSs845kazvaXbIhl4.cer (raw, json) Hash identifier: hlIAyTr0CATMPdA+f/6MOK1G/SkAPtLaBvHmlB3ZVF4= Subject key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3951 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:26:26 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37406 IP: 41.79.24.0/22 IP: 105.235.208.0/21 IP: 154.73.88.0/22 IP: 196.201.8.0/22 IP: 2c0f:f690::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14673 (0x3951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:26:26 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:0e:95:c0:36:89:73:50:a6:d9:7e:0b:ab: cd:5e:76:c8:50:f3:f2:ba:75:63:9d:a4:ce:61:c3: b5:c7:0f:39:fc:b9:dd:2c:48:8a:da:e0:ee:29:9b: 77:9f:33:4d:b7:ab:85:c9:d2:de:40:6c:e3:64:e6: c7:c0:59:b7:ba:1b:11:d3:5b:28:87:03:63:ea:f3: 65:6c:a4:89:5d:a5:f2:a9:57:71:1e:23:31:34:d1: 21:31:79:8f:96:47:9f:a1:98:15:7f:a4:bd:1a:ff: ef:9e:5a:0e:ad:a5:49:a7:c4:ff:93:3f:54:25:75: 8f:e5:63:99:ed:b1:0c:2b:fe:a5:2a:b4:ce:c2:24: b8:1a:99:78:00:2b:91:4b:df:01:3e:c3:d8:44:53: 5a:0c:09:0a:c9:a3:ae:ca:f9:09:5d:a2:79:de:00: 7f:ea:fe:7d:00:35:72:dc:cf:f6:ce:b8:51:11:32: 13:50:cc:ec:a1:95:ab:26:bb:10:68:01:7b:fa:0d: 7c:a7:9d:e4:5f:b8:8e:d5:a7:39:19:50:23:53:d9: 52:97:7b:90:6b:33:1e:be:a5:12:29:02:45:03:8e: 33:6d:f0:a4:19:f8:e7:c6:83:a8:ab:fd:7f:40:f0: 33:91:a7:66:7c:61:5c:6c:e3:32:85:2a:80:ae:03: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37406 sbgp-ipAddrBlock: critical IPv4: 41.79.24.0/22 105.235.208.0/21 154.73.88.0/22 196.201.8.0/22 IPv6: 2c0f:f690::/32 Signature Algorithm: sha256WithRSAEncryption b3:d7:7d:f6:11:94:01:9b:0d:8b:3d:75:83:81:5a:70:91:2b: c5:20:ed:81:8b:ca:05:f8:a2:b8:89:80:a3:dc:70:16:df:21: 1a:ec:ff:03:c1:d3:2d:30:8a:94:87:ac:db:f1:4e:f9:86:9a: 35:68:cc:2c:fc:f9:95:d4:bc:22:a5:10:3f:a4:af:f3:9b:20: e8:a6:e0:01:2c:c8:1f:cc:cb:da:b2:3c:26:77:07:73:38:92: 2f:c6:1b:02:6b:45:f8:37:f3:ff:64:3a:7a:3a:cf:7d:41:03: 36:d7:d9:c2:a1:6c:2d:97:c2:f6:38:ec:e9:42:89:1f:09:2c: 64:1c:cf:e6:27:d3:3c:b1:37:8a:42:ee:c8:d6:2e:2d:04:65: c8:f9:86:56:6d:61:02:14:b0:ae:9f:c9:fb:92:3e:5c:fa:87: b2:7a:ab:ca:a5:25:5f:e8:f3:f9:8d:cf:8d:ea:69:e9:86:3b: 31:2a:2d:78:ea:fe:1f:77:f2:ea:ee:ea:11:4a:08:1c:b3:37: 80:d7:19:af:6b:06:c4:b7:f1:a0:6e:8f:ea:b1:d8:1f:fc:d9: 4d:63:89:35:4f:08:4c:49:00:fb:da:41:8a:b1:78:81:17:ba: 34:5d:55:42:a7:3e:45:e1:37:4d:96:2d:8b:05:6e:77:41:45: 39:40:97:3f -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgICOVEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTI2MjZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQ3RkYwQUYxMTAvBgNVBAUTKDkyMDQ0MTJBMUYxMkJDRDVEMkIzQ0Uz OTkxQUNFRjY5NzZDODg2NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuow6VwDaJc1Cm2X4Lq81edshQ8/K6dWOdpM5hw7XHDzn8ud0sSIra4O4pm3ef M023q4XJ0t5AbONk5sfAWbe6GxHTWyiHA2Pq82VspIldpfKpV3EeIzE00SExeY+W R5+hmBV/pL0a/++eWg6tpUmnxP+TP1QldY/lY5ntsQwr/qUqtM7CJLgamXgAK5FL 3wE+w9hEU1oMCQrJo67K+QldonneAH/q/n0ANXLcz/bOuFERMhNQzOyhlasmuxBo AXv6DXynneRfuI7VpzkZUCNT2VKXe5BrMx6+pRIpAkUDjjNt8KQZ+OfGg6ir/X9A 8DORp2Z8YVxs4zKFKoCuAwWFAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUkgRBKh8S vNXSs845kazvaXbIhl4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0N0ZGMC9BMjhBQzEwQTMyQTkx MUVEQTRFNUM5RENGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDdGRjAvQTI4QUMxMEEzMkE5MTFFREE0RTVDOURDRjEyMjI0Njgva2dSQkto OFN2TlhTczg0NWthenZhWGJJaGw0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkh4wQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAIpTxgDBANp69ADBAKa SVgDBALEyQgwDQQCAAIwBwMFACwP9pAwDQYJKoZIhvcNAQELBQADggEBALPXffYR lAGbDYs9dYOBWnCRK8Ug7YGLygX4oriJgKPccBbfIRrs/wPB0y0wipSHrNvxTvmG mjVozCz8+ZXUvCKlED+kr/ObIOim4AEsyB/My9qyPCZ3B3M4ki/GGwJrRfg38/9k Ono6z31BAzbX2cKhbC2XwvY47OlCiR8JLGQcz+Yn0zyxN4pC7sjWLi0EZcj5hlZt YQIUsK6fyfuSPlz6h7J6q8qlJV/o8/mNz43qaemGOzEqLXjq/h938uru6hFKCByz N4DXGa9rBsS38aBuj+qx2B/82U1jiTVPCExJAPvaQYqxeIEXujRdVUKnPkXhN02W LYsFbndBRTlAlz8= -----END CERTIFICATE-----Generated at Thu Jan 1 14:23:02 2026 by rpki-client