This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer File: 5OfkzwUGmYE4HGusKKJrtmmU0rc.cer (raw, json) Hash identifier: Qq7yofiRGX/3GU5VQhhFwSu6wpFFigg7ZVd6uqhm6ik= Subject key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3712 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 04 Dec 2025 09:41:12 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 24863 IP: 41.128.0.0/14 IP: 41.178.0.0/16 IP: 41.196.0.0/16 IP: 196.205.0.0/16 IP: 197.160.0.0/13 IP: 2c0e::/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14098 (0x3712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Dec 4 09:41:12 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:f3:04:f2:cd:df:51:6c:a3:39:4e:bc:31: ae:aa:c8:22:b1:70:7e:68:74:69:f5:1c:19:33:d0: d0:e5:e4:53:53:d2:1e:98:02:f3:8c:1a:cf:69:36: 30:b6:f3:79:ac:79:93:d3:1c:d6:3f:68:e4:df:fe: 59:84:c2:b5:4b:e2:d4:6e:fb:2b:f6:dd:d8:db:7f: a1:2d:2c:61:14:9d:4b:6b:58:af:9d:5e:9f:6e:1d: be:b0:58:31:e7:10:77:a5:4e:d0:73:6d:c9:25:01: 3b:50:35:a2:35:75:92:ea:1b:ee:db:36:a5:7d:7c: e7:a5:21:c4:8a:2e:7a:03:90:f7:6a:8c:8a:2c:08: 9a:ae:bf:ed:2b:0a:e4:d6:00:06:d2:7c:80:ed:28: e4:72:6c:b4:50:70:0a:35:30:0f:60:b5:54:4c:db: b6:c3:9f:fe:9e:a0:c3:2d:85:ea:fb:b7:63:83:44: df:3e:e1:ec:a6:25:17:e4:a6:99:c1:ad:ad:1f:54: 0e:8b:e3:02:53:58:14:d4:f5:0a:7f:ed:44:05:13: 11:d4:10:9e:a8:8f:17:f0:f6:e7:0d:4a:55:ab:54: c4:c9:e2:92:45:d5:99:a6:60:50:57:11:12:ee:34: 01:a8:81:c4:d0:43:f5:4e:ff:0f:fe:74:15:4b:99: e4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 24863 sbgp-ipAddrBlock: critical IPv4: 41.128.0.0/14 41.178.0.0/16 41.196.0.0/16 196.205.0.0/16 197.160.0.0/13 IPv6: 2c0e::/20 Signature Algorithm: sha256WithRSAEncryption c2:c6:96:88:68:76:50:be:be:44:e2:e4:0a:40:5b:47:c2:e0: 30:26:99:e9:98:74:fd:71:83:f0:38:9d:3a:19:84:4e:cb:d2: 75:56:94:b4:2e:37:53:c5:f6:11:a1:0d:61:9a:a7:53:9c:ef: 5e:76:db:ab:89:c9:92:72:59:a8:44:d9:ea:19:f2:84:58:7b: f3:97:2b:1f:0b:fa:d6:ac:ec:00:08:30:87:57:22:ce:c9:b6: d0:4f:44:59:8e:a6:28:a0:bb:7a:4f:cd:69:b3:e4:2f:b4:c8: 16:ea:05:d2:61:0f:5e:17:7f:42:af:11:57:63:5f:6c:2a:db: 88:31:e5:70:39:b9:de:87:22:b9:8c:9d:5d:ab:45:ea:22:c8: 67:89:cc:72:84:44:40:0d:59:e4:6c:fe:6f:0a:93:38:1b:66: 68:de:99:77:08:ec:94:11:1f:ab:8c:f3:4a:ff:f8:25:7e:49: 3f:7e:62:49:4d:73:f9:f1:16:3e:47:f6:4b:18:0b:5f:ad:83: 1b:3e:e2:95:e5:60:e5:ed:e2:37:43:c9:4f:8c:5b:65:b4:55: d8:da:40:99:7e:92:19:28:a7:40:48:91:59:cb:ef:35:e2:65: 01:51:05:4d:48:12:10:2f:96:cc:14:e7:3d:d5:93:aa:39:e8: f6:8f:08:f9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgICNxIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNTEyMDQwOTQxMTJaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkE2RUEwQUYxMTAvBgNVBAUTKEU0RTdFNENGMDUwNjk5ODEzODFDNkJB QzI4QTI2QkI2Njk5NEQyQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8wfME8s3fUWyjOU68Ma6qyCKxcH5odGn1HBkz0NDl5FNT0h6YAvOMGs9pNjC2 83mseZPTHNY/aOTf/lmEwrVL4tRu+yv23djbf6EtLGEUnUtrWK+dXp9uHb6wWDHn EHelTtBzbcklATtQNaI1dZLqG+7bNqV9fOelIcSKLnoDkPdqjIosCJquv+0rCuTW AAbSfIDtKORybLRQcAo1MA9gtVRM27bDn/6eoMMther7t2ODRN8+4eymJRfkppnB ra0fVA6L4wJTWBTU9Qp/7UQFExHUEJ6ojxfw9ucNSlWrVMTJ4pJF1ZmmYFBXERLu NAGogcTQQ/VO/w/+dBVLmeSXAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQU5OfkzwUG mYE4HGusKKJrtmmU0rcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBNkVBMC81OUM1NThERUQwRjUx MUYwQUUyMDQ3ODVEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTZFQTAvNTlDNTU4REVEMEY1MTFGMEFFMjA0Nzg1REFFNEVDOUMvNU9ma3p3 VUdtWUU0SEd1c0tLSnJ0bW1VMHJjLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJhHzBABggrBgEFBQcBBwEB/wQxMC8wHwQCAAEwGQMDAimAAwMAKbIDAwApxAMD AMTNAwMDxaAwDAQCAAIwBgMEBCwOADANBgkqhkiG9w0BAQsFAAOCAQEAwsaWiGh2 UL6+ROLkCkBbR8LgMCaZ6Zh0/XGD8DidOhmETsvSdVaUtC43U8X2EaENYZqnU5zv Xnbbq4nJknJZqETZ6hnyhFh785crHwv61qzsAAgwh1cizsm20E9EWY6mKKC7ek/N abPkL7TIFuoF0mEPXhd/Qq8RV2NfbCrbiDHlcDm53ociuYydXatF6iLIZ4nMcoRE QA1Z5Gz+bwqTOBtmaN6ZdwjslBEfq4zzSv/4JX5JP35iSU1z+fEWPkf2SxgLX62D Gz7ileVg5e3iN0PJT4xbZbRV2NpAmX6SGSinQEiRWcvvNeJlAVEFTUgSEC+WzBTn PdWTqjno9o8I+Q== -----END CERTIFICATE-----Generated at Mon Dec 8 03:01:03 2025 by rpki-client