This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer File: y4hYdSezg5FswLHYhmZTwzQx5F0.cer (raw, json) Hash identifier: AOU4amLJeISUERE6Q7A79zpZV/XEbxuM0Ckl8a4w09Y= Subject key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A49 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:04:59 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327693 AS: 329523 IP: 41.76.224.0/21 IP: 41.198.128.0/18 IP: 102.67.176.0/21 IP: 154.73.184.0/21 IP: 2c0f:f708::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 07:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14921 (0x3a49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:04:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:f7:3b:a5:6e:10:87:52:12:d5:95:4d:30: 4d:d4:ea:16:d7:a6:2d:ba:8c:07:bf:f6:f8:86:27: 87:18:c5:9a:20:c1:07:13:ff:09:9f:33:e9:fd:25: 17:1c:37:c8:bf:24:d1:74:98:60:de:de:24:cf:51: 5a:d8:e1:ba:00:7a:4c:a9:42:d5:66:fb:ce:cc:b1: 30:40:26:af:74:a9:47:dc:ae:18:09:f0:d7:94:4f: 5f:21:3d:53:f1:91:d6:f2:b4:78:56:7a:1c:8e:4d: a4:36:2f:a7:b6:6e:e3:d5:50:c8:72:17:29:cd:72: 26:f1:6c:e1:db:2e:25:14:8a:ef:29:ff:8c:01:43: 0c:92:33:95:53:0e:a7:1c:0d:14:d7:fc:61:6c:30: 04:d3:4c:18:31:b4:eb:cd:b7:fd:a9:cb:da:a2:8e: fd:09:e6:06:f0:30:65:f0:53:a7:34:3d:7f:2a:01: 8f:ff:35:82:44:ad:53:b2:ec:b1:70:80:2d:ad:5a: 24:00:d0:d2:af:f3:56:44:79:bc:ee:c5:55:ad:33: 1d:dc:23:48:58:8a:60:f6:74:0e:5b:37:e2:1e:a2: 58:c5:cb:ff:c7:f3:19:17:4f:e5:a2:5f:89:91:dc: 85:44:79:15:57:4b:af:1d:8a:69:d7:d0:70:bb:1a: 31:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327693 329523 sbgp-ipAddrBlock: critical IPv4: 41.76.224.0/21 41.198.128.0/18 102.67.176.0/21 154.73.184.0/21 IPv6: 2c0f:f708::/32 Signature Algorithm: sha256WithRSAEncryption 4b:58:8b:dd:ae:69:54:f4:81:2c:07:5c:19:54:88:b6:25:b2: 8e:75:6b:92:80:cd:56:1b:41:4f:05:28:2e:f2:c8:7b:0b:90: 4d:b7:80:5f:b7:b3:15:11:76:98:b1:36:9c:4c:fb:cc:af:fc: e2:d2:1b:ad:89:ad:ed:f2:b8:16:d0:da:d6:d6:3d:22:5f:24: 27:af:42:74:50:97:77:b7:bd:ae:9d:ae:ec:a7:6c:ff:61:6d: 2c:ec:85:a0:29:52:06:c8:22:02:c7:1c:d2:bc:a4:ca:fb:b5: 8c:53:3d:21:6d:11:0b:b7:9c:38:32:b9:92:2f:45:3f:90:98: c1:6d:6c:f2:29:d1:d8:69:a1:ee:ef:cf:ed:38:88:79:87:32: c1:87:1b:16:3b:f8:dc:d8:24:a3:46:c6:8b:bf:09:08:d7:ca: e4:d9:69:ee:6e:c8:64:c5:02:9d:24:e2:0a:5e:ca:66:11:f8: 36:40:06:78:be:cc:90:53:1f:b4:6c:25:49:ac:21:27:f5:35: ef:2e:21:0a:e5:ac:31:d8:32:e1:0e:b2:40:fe:f3:04:a0:a0: bd:20:0c:24:01:b3:fb:13:fc:7f:c7:1c:75:f8:27:85:a1:01: 0f:a2:33:d9:50:cc:1f:e4:c4:23:78:69:a0:f9:72:42:41:70: 45:37:f3:57 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgICOkkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjA0NTlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjYzQ0VFQUYxMTAvBgNVBAUTKENCODg1ODc1MjdCMzgzOTE2Q0MwQjFE ODg2NjY1M0MzMzQzMUU0NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClj/c7pW4Qh1IS1ZVNME3U6hbXpi26jAe/9viGJ4cYxZogwQcT/wmfM+n9JRcc N8i/JNF0mGDe3iTPUVrY4boAekypQtVm+87MsTBAJq90qUfcrhgJ8NeUT18hPVPx kdbytHhWehyOTaQ2L6e2buPVUMhyFynNcibxbOHbLiUUiu8p/4wBQwySM5VTDqcc DRTX/GFsMATTTBgxtOvNt/2py9qijv0J5gbwMGXwU6c0PX8qAY//NYJErVOy7LFw gC2tWiQA0NKv81ZEebzuxVWtMx3cI0hYimD2dA5bN+IeoljFy//H8xkXT+WiX4mR 3IVEeRVXS68dimnX0HC7GjGbAgMBAAGjggMxMIIDLTAdBgNVHQ4EFgQUy4hYdSez g5FswLHYhmZTwzQx5F0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2M0NFRS8xRkJDNDQyMDgzQkUx MUVBOEE2NUI3MzBGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NjNDRUUvMUZCQzQ0MjA4M0JFMTFFQThBNjVCNzMwRjhBRUEyMjgveTRoWWRT ZXpnNUZzd0xIWWhtWlR3elF4NUYwLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMFAA0CAwUHMzBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAylM4AMEBinG gAMEA2ZDsAMEA5pJuDANBAIAAjAHAwUALA/3CDANBgkqhkiG9w0BAQsFAAOCAQEA S1iL3a5pVPSBLAdcGVSItiWyjnVrkoDNVhtBTwUoLvLIewuQTbeAX7ezFRF2mLE2 nEz7zK/84tIbrYmt7fK4FtDa1tY9Il8kJ69CdFCXd7e9rp2u7Kds/2FtLOyFoClS BsgiAscc0rykyvu1jFM9IW0RC7ecODK5ki9FP5CYwW1s8inR2Gmh7u/P7TiIeYcy wYcbFjv43Ngko0bGi78JCNfK5Nlp7m7IZMUCnSTiCl7KZhH4NkAGeL7MkFMftGwl SawhJ/U17y4hCuWsMdgy4Q6yQP7zBKCgvSAMJAGz+xP8f8ccdfgnhaEBD6Iz2VDM H+TEI3hpoPlyQkFwRTfzVw== -----END CERTIFICATE-----Generated at Mon Jan 12 13:05:57 2026 by rpki-client