This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer File: snY9UExa-ft12a62ByQi-Hoaa_Y.cer (raw, json) Hash identifier: voZeNqupNmqrCg1GqBxeulM27STSiNbUpqnqYMxqXK4= Subject key identifier: B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F42 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 05:19:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37087 IP: 41.191.96.0/22 IP: 196.50.28.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 08 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16194 (0x3f42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 05:19:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FC75CAF, serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:1e:05:a0:61:be:8e:ef:97:5b:43:fd:82: fc:1b:4f:0d:19:47:97:a8:91:19:45:5a:da:c8:11: 47:44:28:e8:dc:64:66:21:01:4b:63:d0:69:c7:3e: 97:64:6a:2b:50:31:f4:02:10:bd:7f:53:0c:ae:31: 0d:9e:8e:21:b2:9b:8b:79:bc:9d:a6:e3:37:02:17: f5:77:9b:a4:2f:e2:5b:7e:41:cc:2f:eb:fa:ff:b8: dc:17:ce:44:4d:8c:61:d0:fb:94:64:96:f4:4a:d4: 22:4d:ac:77:46:dc:7a:8c:ae:07:f0:9f:d5:e0:a7: c8:19:93:07:b3:1b:0c:a5:cd:90:d7:5d:20:0e:54: 50:7c:a5:37:2c:62:d5:3a:22:be:84:05:a2:13:9f: 2a:71:d4:4e:e9:e2:92:ef:2a:17:57:c0:f3:9c:df: 6a:9c:69:3a:00:b3:ee:78:bc:ee:04:36:f2:1f:a2: e8:d5:a4:76:38:de:63:46:39:f9:a8:11:f4:2d:c1: 1f:bb:03:e9:9b:85:3b:ee:7e:ca:bb:e1:59:fd:36: 7e:9c:9a:f7:be:2d:10:49:2e:19:30:14:8c:5e:18: 92:c0:b9:24:b3:48:58:36:54:4e:0a:c5:d0:c9:7f: fb:47:f5:67:69:53:5c:6a:e3:d8:13:b6:00:53:0b: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37087 sbgp-ipAddrBlock: critical IPv4: 41.191.96.0/22 196.50.28.0/22 Signature Algorithm: sha256WithRSAEncryption b9:57:8c:1d:50:60:a2:15:a3:0f:64:59:f1:29:d3:88:e6:9f: 33:9c:39:d7:6c:4d:83:b9:0d:df:f8:b4:7c:d3:ed:be:0e:92: 7f:77:e5:c6:36:ae:53:bd:3d:a0:73:7d:69:79:95:a6:d3:09: b6:da:7b:37:93:fe:20:87:0a:58:c7:7e:d1:77:83:b5:40:1e: e3:57:f5:b4:04:2f:d8:c2:8f:fe:fb:4d:f5:90:1f:c3:e3:78: be:b9:f1:6f:d6:11:80:41:9d:60:e0:5c:d1:8a:2c:a1:b1:40: d0:cd:1c:9e:ef:8d:1b:9a:96:ff:f0:a6:7e:15:b8:ae:9b:72: 0a:02:ac:c5:11:fc:54:55:a5:e0:da:c9:ea:fb:8e:d9:b4:9c: 36:31:97:a3:3a:34:98:f6:4f:87:f7:07:52:ed:72:0f:43:3e: 54:35:81:5a:ef:ca:cb:56:52:8b:e2:4f:72:6f:e2:aa:64:14: f7:f7:2a:d9:8f:5d:fb:60:13:be:7c:bd:4c:3f:be:2a:d3:2d: a6:9f:48:e2:16:28:83:0f:33:4e:c9:d5:4e:c5:55:19:a9:9a: 31:b1:d0:d8:1a:7d:47:2f:17:01:e2:c4:75:88:b1:29:20:de: 67:68:b6:3c:32:18:66:b9:35:51:fd:43:a4:35:3d:30:db:87: da:cb:8e:8f -----BEGIN CERTIFICATE----- MIIGHDCCBQSgAwIBAgICP0IwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwNTE5MjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkZDNzVDQUYxMTAvBgNVBAUTKEIyNzYzRDUwNEM1QUY5RkI3NUQ5QUVC NjA3MjQyMkY4N0ExQTZCRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP9x4FoGG+ju+XW0P9gvwbTw0ZR5eokRlFWtrIEUdEKOjcZGYhAUtj0GnHPpdk aitQMfQCEL1/UwyuMQ2ejiGym4t5vJ2m4zcCF/V3m6Qv4lt+Qcwv6/r/uNwXzkRN jGHQ+5RklvRK1CJNrHdG3HqMrgfwn9Xgp8gZkwezGwylzZDXXSAOVFB8pTcsYtU6 Ir6EBaITnypx1E7p4pLvKhdXwPOc32qcaToAs+54vO4ENvIfoujVpHY43mNGOfmo EfQtwR+7A+mbhTvufsq74Vn9Nn6cmve+LRBJLhkwFIxeGJLAuSSzSFg2VE4KxdDJ f/tH9WdpU1xq49gTtgBTCxojAgMBAAGjggMRMIIDDTAdBgNVHQ4EFgQUsnY9UExa +ft12a62ByQi+Hoaa/YwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGQzc1Qy85RTE0QjVCRTk4MzYx MUVGQjk3QkQxNjQ3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RkM3NUMvOUUxNEI1QkU5ODM2MTFFRkI5N0JEMTY0NzYyRTk1MUEvc25ZOVVF eGEtZnQxMmE2MkJ5UWktSG9hYV9ZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAkN8wJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAIpv2ADBALEMhwwDQYJ KoZIhvcNAQELBQADggEBALlXjB1QYKIVow9kWfEp04jmnzOcOddsTYO5Dd/4tHzT 7b4Okn935cY2rlO9PaBzfWl5labTCbbaezeT/iCHCljHftF3g7VAHuNX9bQEL9jC j/77TfWQH8PjeL658W/WEYBBnWDgXNGKLKGxQNDNHJ7vjRualv/wpn4VuK6bcgoC rMUR/FRVpeDayer7jtm0nDYxl6M6NJj2T4f3B1Ltcg9DPlQ1gVrvystWUoviT3Jv 4qpkFPf3KtmPXftgE758vUw/virTLaafSOIWKIMPM07J1U7FVRmpmjGx0NgafUcv FwHixHWIsSkg3mdotjwyGGa5NVH9Q6Q1PTDbh9rLjo8= -----END CERTIFICATE-----Generated at Tue Jan 6 03:31:12 2026 by rpki-client