This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/p-zc5mZw_hg-xl6aPtIOfVWT1L8.cer File: p-zc5mZw_hg-xl6aPtIOfVWT1L8.cer (raw, json) Hash identifier: 4gpSQOh68Fz6gcxDTWI9gHS3syfwIRSjlz/WMFQm9Nc= Subject key identifier: A7:EC:DC:E6:66:70:FE:18:3E:C6:5E:9A:3E:D2:0E:7D:55:93:D4:BF Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3CD9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A864A/D914420C91EC11E9AE65947CF8AEA228/p-zc5mZw_hg-xl6aPtIOfVWT1L8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A864A/D914420C91EC11E9AE65947CF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:39:30 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37420 IP: 102.131.128.0/17 IP: 196.46.144.0/22 IP: 196.220.224.0/20 IP: 2001:43f8:180::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 09:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15577 (0x3cd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:39:30 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A864AAF, serialNumber=A7ECDCE66670FE183EC65E9A3ED20E7D5593D4BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:d2:1f:2e:2f:1b:90:f7:31:ef:8f:b4:f7: b3:fc:df:83:20:90:cf:17:c0:eb:4c:2a:06:ab:da: b9:1f:95:ba:a5:e9:e1:22:25:a4:70:f2:85:23:ea: e2:07:a6:6d:93:02:03:80:33:82:f9:ad:82:52:bb: d0:2d:f1:46:01:3d:7e:20:25:b6:f4:60:4f:5a:ff: cf:2a:41:81:11:ec:5b:03:0a:99:15:ed:52:7a:9d: 14:e7:58:a3:ad:a3:d1:78:0b:5b:6f:ef:7a:bf:c4: 41:15:0c:37:bd:7c:a1:aa:f5:a7:da:5e:d9:23:d0: 5d:d4:be:f3:41:1d:51:da:57:ad:07:00:12:f0:93: ea:51:81:3d:d7:c7:8e:7a:4e:54:46:ba:5f:19:37: 95:25:a8:61:da:94:85:a3:b0:36:58:3a:13:61:80: 9c:de:0c:cd:fe:7a:02:e7:5e:82:4b:ba:41:39:bc: 96:8b:36:57:64:0b:6d:70:13:f7:68:b7:96:cc:cf: ad:a2:db:ef:e6:af:cc:9a:13:3a:0f:48:8d:50:a4: 9a:61:9b:b7:12:94:45:d1:52:d8:bb:30:e2:2e:29: 68:53:fa:f6:44:16:a4:19:e3:96:20:92:29:67:bc: b0:30:ff:cd:48:5b:25:15:47:b7:31:7d:c1:3b:76: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EC:DC:E6:66:70:FE:18:3E:C6:5E:9A:3E:D2:0E:7D:55:93:D4:BF X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A864A/D914420C91EC11E9AE65947CF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A864A/D914420C91EC11E9AE65947CF8AEA228/p-zc5mZw_hg-xl6aPtIOfVWT1L8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37420 sbgp-ipAddrBlock: critical IPv4: 102.131.128.0/17 196.46.144.0/22 196.220.224.0/20 IPv6: 2001:43f8:180::/48 Signature Algorithm: sha256WithRSAEncryption af:2f:07:26:92:08:39:e2:ba:cb:06:d0:37:22:da:42:71:5e: 24:d1:4d:54:79:19:fa:f4:9f:fb:5c:a2:a4:99:1b:12:f5:8d: 29:30:b0:20:d3:21:60:8b:3e:3c:ee:a7:20:fe:c8:d3:ec:60: a2:12:39:7d:73:3a:56:05:38:15:c2:94:e9:73:0c:bf:3f:25: 45:4d:43:11:ed:b2:77:38:bd:b8:1c:02:d7:13:e2:4d:d3:32: 28:2b:81:60:f3:7a:d4:04:29:7c:c3:a9:ee:ea:1e:6b:13:3f: c4:16:f4:8e:ea:f2:71:fc:64:12:e6:ab:cc:dc:ed:ae:cd:bd: db:77:15:80:52:ce:8c:80:12:02:91:e4:fd:18:2b:cf:26:c5: 02:36:11:ce:7e:f2:5d:84:ed:74:93:2b:61:0a:07:6d:d5:96: cb:a1:24:d2:aa:46:d3:49:48:43:89:eb:c0:da:80:e0:0d:76: 38:29:03:e6:2e:53:c4:be:49:89:76:aa:89:41:33:9c:3f:1e: 10:3f:6b:0a:87:7f:be:e5:f8:41:af:3a:a6:84:84:18:04:8e: fa:47:e5:b2:c2:34:bb:f4:46:71:12:0a:65:36:1a:f7:f4:2c: 43:06:de:eb:c7:4a:63:33:96:0e:fd:ad:ae:7e:36:4d:f2:97: e0:5e:3f:e3 -----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgICPNkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzM5MzBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkE4NjRBQUYxMTAvBgNVBAUTKEE3RUNEQ0U2NjY3MEZFMTgzRUM2NUU5 QTNFRDIwRTdENTU5M0Q0QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLwdIfLi8bkPcx74+097P834MgkM8XwOtMKgar2rkflbql6eEiJaRw8oUj6uIH pm2TAgOAM4L5rYJSu9At8UYBPX4gJbb0YE9a/88qQYER7FsDCpkV7VJ6nRTnWKOt o9F4C1tv73q/xEEVDDe9fKGq9afaXtkj0F3UvvNBHVHaV60HABLwk+pRgT3Xx456 TlRGul8ZN5UlqGHalIWjsDZYOhNhgJzeDM3+egLnXoJLukE5vJaLNldkC21wE/do t5bMz62i2+/mr8yaEzoPSI1QpJphm7cSlEXRUti7MOIuKWhT+vZEFqQZ45Ygkiln vLAw/81IWyUVR7cxfcE7dnlZAgMBAAGjggMoMIIDJDAdBgNVHQ4EFgQUp+zc5mZw /hg+xl6aPtIOfVWT1L8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBODY0QS9EOTE0NDIwQzkxRUMx MUU5QUU2NTk0N0NGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTg2NEEvRDkxNDQyMEM5MUVDMTFFOUFFNjU5NDdDRjhBRUEyMjgvcC16YzVt WndfaGcteGw2YVB0SU9mVldUMUw4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkiwwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBIDBAdmg4ADBALELpADBATE 3OAwDwQCAAIwCQMHACABQ/gBgDANBgkqhkiG9w0BAQsFAAOCAQEAry8HJpIIOeK6 ywbQNyLaQnFeJNFNVHkZ+vSf+1yipJkbEvWNKTCwINMhYIs+PO6nIP7I0+xgohI5 fXM6VgU4FcKU6XMMvz8lRU1DEe2ydzi9uBwC1xPiTdMyKCuBYPN61AQpfMOp7uoe axM/xBb0jurycfxkEuarzNztrs2923cVgFLOjIASApHk/RgrzybFAjYRzn7yXYTt dJMrYQoHbdWWy6Ek0qpG00lIQ4nrwNqA4A12OCkD5i5TxL5JiXaqiUEznD8eED9r Cod/vuX4Qa86poSEGASO+kflssI0u/RGcRIKZTYa9/QsQwbe68dKYzOWDv2trn42 TfKX4F4/4w== -----END CERTIFICATE-----Generated at Thu Jan 1 19:51:50 2026 by rpki-client