This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer File: wD_daU9RquOPBRRWEBYXxW_YnEo.cer (raw, json) Hash identifier: RtHTz99JRhPhuXCWbV9K0Pun5t6IiRhFIWGwnjCamvo= Subject key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C36 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:15:57 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 30984 AS: 37282 AS: 37783 AS: 328395 IP: 41.75.80.0/20 IP: 102.217.180.0/22 IP: 154.113.0.0/16 IP: 196.49.62.0/24 IP: 196.60.58.0/24 IP: 196.200.64.0/20 IP: 197.253.0.0/18 IP: 2001:43f8:11f0::/47 IP: 2c0f:fc98::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15414 (0x3c36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:15:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3698DD0AF, serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:c4:41:ce:66:68:13:b7:9c:af:00:48:62: 76:d0:7b:35:95:71:d3:d4:0f:ca:49:d3:8d:eb:70: 6c:a9:1b:63:65:ff:d8:64:ae:03:8c:a1:79:84:9c: b4:8a:84:30:f0:f7:95:96:55:b9:a2:2e:76:d4:75: d9:2a:e5:6f:ec:92:e9:7c:97:18:6c:84:de:9c:7e: c8:7a:c0:55:e8:7f:17:0c:d2:e5:6f:dc:1d:9c:00: 02:25:b2:cc:80:8a:c1:e9:c6:92:87:f6:61:09:08: 5e:e0:d0:ab:ed:4d:e6:75:d2:39:92:f8:5a:63:84: cc:80:ff:1e:00:29:54:12:b7:02:f1:95:fe:dd:18: e8:69:09:46:97:e0:82:0a:dc:86:80:b8:45:f1:a1: e8:de:66:f1:1f:f7:da:7e:21:13:5a:c3:4f:69:bf: 9a:f0:a2:98:0a:14:e5:2d:f1:8d:88:e0:d3:cf:e7: c5:11:04:06:b7:7c:04:42:0a:f8:09:f7:c4:41:6c: a4:b4:69:7e:cb:d2:a7:9d:87:f5:d0:cb:bd:99:f3: fd:9a:10:db:96:9f:70:6e:fb:db:17:21:7c:90:e0: b9:06:cf:0e:82:45:4b:96:da:2e:0c:c5:eb:54:2f: af:6a:b2:fc:e6:bd:e4:7e:2f:de:7d:68:4f:f3:63: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 30984 37282 37783 328395 sbgp-ipAddrBlock: critical IPv4: 41.75.80.0/20 102.217.180.0/22 154.113.0.0/16 196.49.62.0/24 196.60.58.0/24 196.200.64.0/20 197.253.0.0/18 IPv6: 2001:43f8:11f0::/47 2c0f:fc98::/32 Signature Algorithm: sha256WithRSAEncryption 55:b2:73:a2:e7:9a:c8:41:d6:c2:8d:fc:76:18:67:09:53:c3: dc:d8:86:ac:2e:b3:2e:8e:2b:83:cb:39:c3:1e:39:0c:46:ea: 2f:d3:0a:ac:f6:c9:81:97:5f:9f:ae:d1:a2:f1:d0:d1:df:0d: d0:fe:24:96:7c:e8:fe:d0:1c:94:27:fd:3e:ed:36:c7:92:6f: cb:0b:6a:48:28:e0:4d:97:78:c6:4b:58:a2:4d:12:6c:ab:99: 52:c3:d0:2b:90:34:b4:7f:6b:70:ba:08:6a:5a:31:96:93:c9: 07:5c:5d:27:61:68:c2:d8:fd:b7:d8:0c:65:46:20:e9:a5:ba: 43:ee:2b:a2:05:15:6f:c4:58:47:f1:9b:0c:6e:b8:a1:f8:33: ef:ab:93:d1:4c:f6:0d:29:3b:09:97:59:fb:69:3a:56:b2:84: 93:35:99:db:d7:f0:80:c3:a5:34:00:c7:59:71:68:89:17:5a: ff:e2:1b:bb:49:62:9e:af:82:21:84:84:df:25:9c:d0:26:3d: 15:16:2c:ba:e7:8d:4b:12:51:fc:78:b9:a8:de:f4:d9:4b:a0: b7:09:23:87:1c:40:53:e2:01:34:cd:6d:1a:80:0c:d7:cf:3f: 8c:af:49:ec:0e:08:87:18:89:95:19:8e:34:a4:5b:13:3c:13: 00:2a:bf:44 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgICPDYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzE1NTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjk4REQwQUYxMTAvBgNVBAUTKEMwM0ZERDY5NEY1MUFBRTM4RjA1MTQ1 NjEwMTYxN0M1NkZEODlDNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCunMRBzmZoE7ecrwBIYnbQezWVcdPUD8pJ043rcGypG2Nl/9hkrgOMoXmEnLSK hDDw95WWVbmiLnbUddkq5W/skul8lxhshN6cfsh6wFXofxcM0uVv3B2cAAIlssyA isHpxpKH9mEJCF7g0KvtTeZ10jmS+FpjhMyA/x4AKVQStwLxlf7dGOhpCUaX4IIK 3IaAuEXxoejeZvEf99p+IRNaw09pv5rwopgKFOUt8Y2I4NPP58URBAa3fARCCvgJ 98RBbKS0aX7L0qedh/XQy72Z8/2aENuWn3Bu+9sXIXyQ4LkGzw6CRUuW2i4MxetU L69qsvzmveR+L959aE/zY4QZAgMBAAGjggNUMIIDUDAdBgNVHQ4EFgQUwD/daU9R quOPBRRWEBYXxW/YnEowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5OEREMC81NkM4RUE0QzY2Nzcx MUVEOTY3RkMwQTJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OThERDAvNTZDOEVBNEM2Njc3MTFFRDk2N0ZDMEEyRjEyMjI0Njgvd0RfZGFV OVJxdU9QQlJSV0VCWVh4V19ZbkVvLm1mdDAoBggrBgEFBQcBCAEB/wQZMBegFTAT AgJ5CAIDAJGiAgMAk5cCAwUCyzBaBggrBgEFBQcBBwEB/wRLMEkwLwQCAAEwKQME BClLUAMEAmbZtAMDAJpxAwQAxDE+AwQAxDw6AwQExMhAAwQGxf0AMBYEAgACMBAD BwEgAUP4EfADBQAsD/yYMA0GCSqGSIb3DQEBCwUAA4IBAQBVsnOi55rIQdbCjfx2 GGcJU8Pc2IasLrMujiuDyznDHjkMRuov0wqs9smBl1+frtGi8dDR3w3Q/iSWfOj+ 0ByUJ/0+7TbHkm/LC2pIKOBNl3jGS1iiTRJsq5lSw9ArkDS0f2twughqWjGWk8kH XF0nYWjC2P232AxlRiDppbpD7iuiBRVvxFhH8ZsMbrih+DPvq5PRTPYNKTsJl1n7 aTpWsoSTNZnb1/CAw6U0AMdZcWiJF1r/4hu7SWKer4IhhITfJZzQJj0VFiy6541L ElH8eLmo3vTZS6C3CSOHHEBT4gE0zW0agAzXzz+Mr0nsDgiHGImVGY40pFsTPBMA Kr9E -----END CERTIFICATE-----Generated at Sun Jan 11 23:33:44 2026 by rpki-client