This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer File: 68SoUZfDK0JWOKbH5YYLWWTmV_4.cer (raw, json) Hash identifier: dytcSsDHrucOfhI4HPVef2okuCKUcvhMSIW6/qEdXP0= Subject key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 387D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:54:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 327979 IP: 41.76.104.0/21 IP: 41.222.32.0/21 IP: 154.66.196.0/22 IP: 2c0f:f850::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 08 Feb 2026 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14461 (0x387d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:54:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:91:e8:6e:b8:b7:0f:81:c5:65:1f:4f:34:c7: 33:ef:cc:27:44:80:6d:f4:9a:6a:a2:df:df:ba:ef: f7:a0:64:7f:3c:44:cc:5b:cb:bf:1c:f6:f4:fa:b4: 63:26:8a:44:2f:3d:77:96:5c:1a:da:39:2a:40:db: 34:f5:29:de:4c:c6:82:5d:06:3d:25:c2:b9:0c:af: b1:e6:ac:6f:24:6d:81:43:6a:7c:bb:ec:9d:4d:ab: 5b:68:c7:b1:98:2b:90:9b:b2:a0:49:7c:82:8a:b3: 95:7d:28:e4:2d:e0:20:1b:50:ae:ba:03:7a:bb:ad: 57:06:bb:0a:cb:32:b4:ad:48:96:ca:4a:b8:22:db: 8a:0e:9d:2a:a5:cb:e5:58:ac:36:04:e4:59:9e:30: 42:42:e1:26:15:b8:6d:3a:11:77:43:9c:e0:7e:6d: f0:6c:23:fc:92:cd:17:f0:ff:fa:2c:83:63:f2:d3: e6:d8:89:72:f7:64:69:ca:c6:8b:77:9a:a5:6f:d9: f5:7f:a9:4b:82:5c:f4:6a:3d:ca:cc:76:6e:75:85: 24:5f:84:46:ed:56:7c:3d:bf:fc:c5:da:67:cc:d8: de:ba:18:3b:40:3f:9a:6e:56:78:07:78:84:a9:87: 93:85:df:01:e8:cf:d4:1e:87:37:87:33:53:0c:06: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 327979 sbgp-ipAddrBlock: critical IPv4: 41.76.104.0/21 41.222.32.0/21 154.66.196.0/22 IPv6: 2c0f:f850::/32 Signature Algorithm: sha256WithRSAEncryption 10:b1:8b:a1:42:c5:a3:f7:f3:68:9d:fe:f4:c9:c9:a1:64:7d: 46:41:1d:44:f7:5e:70:28:5c:6f:1c:da:d2:e1:7c:63:61:fd: 0c:3a:ca:cb:71:54:2c:2e:43:cd:c0:f9:45:b2:fb:f9:67:aa: 3c:48:1d:08:08:a7:b6:8a:30:d6:f0:50:53:a2:0b:0a:5a:9b: 4d:d6:59:18:cc:c5:12:fe:44:20:1f:8f:99:c8:e9:b7:4a:8c: 37:0e:9f:e8:2e:e9:74:2c:eb:90:e7:24:76:fc:e1:fe:45:b2: 74:35:91:9b:b1:fe:25:e9:14:17:19:8c:39:c2:e7:b2:47:58: e9:ab:ba:d9:45:b9:b8:8c:18:46:a2:b4:02:ad:7a:e1:f5:58: 1f:1e:95:e0:e4:41:7a:b6:d6:4d:67:bc:40:d8:0b:aa:a8:7d: 0b:80:c2:58:af:81:ae:52:dc:d4:ea:d3:ff:db:46:71:1d:b2: 28:37:7f:37:f6:63:f7:f1:03:5e:af:28:7e:14:85:3a:85:21: f4:ca:e7:99:47:90:97:5c:d4:9a:69:4c:11:77:aa:d6:98:d6: ec:c4:f6:35:3a:5d:ec:6a:2c:b1:5f:fa:82:0f:33:02:c5:d6: c2:21:77:67:14:8c:4d:e8:d1:fa:b9:b2:fb:07:21:7d:a9:a7: c2:e0:b7:9b -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgICOH0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDU0MjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjMyMTJEQUYxMTAvBgNVBAUTKEVCQzRBODUxOTdDMzJCNDI1NjM4QTZD N0U1ODYwQjU5NjRFNjU3RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbkehuuLcPgcVlH080xzPvzCdEgG30mmqi39+67/egZH88RMxby78c9vT6tGMm ikQvPXeWXBraOSpA2zT1Kd5MxoJdBj0lwrkMr7HmrG8kbYFDany77J1Nq1tox7GY K5CbsqBJfIKKs5V9KOQt4CAbUK66A3q7rVcGuwrLMrStSJbKSrgi24oOnSqly+VY rDYE5FmeMEJC4SYVuG06EXdDnOB+bfBsI/ySzRfw//osg2Py0+bYiXL3ZGnKxot3 mqVv2fV/qUuCXPRqPcrMdm51hSRfhEbtVnw9v/zF2mfM2N66GDtAP5puVngHeISp h5OF3wHoz9QehzeHM1MMBjrlAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU68SoUZfD K0JWOKbH5YYLWWTmV/4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzMjEyRC8xRTk2OEY2MDUxQjcx MUVDQkZDNTQ1NDNEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MzIxMkQvMUU5NjhGNjA1MUI3MTFFQ0JGQzU0NTQzRDhBMDE0Q0UvNjhTb1Va ZkRLMEpXT0tiSDVZWUxXV1RtVl80Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFASswOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAMpTGgDBAMp3iADBAKa QsQwDQQCAAIwBwMFACwP+FAwDQYJKoZIhvcNAQELBQADggEBABCxi6FCxaP382id /vTJyaFkfUZBHUT3XnAoXG8c2tLhfGNh/Qw6ystxVCwuQ83A+UWy+/lnqjxIHQgI p7aKMNbwUFOiCwpam03WWRjMxRL+RCAfj5nI6bdKjDcOn+gu6XQs65DnJHb84f5F snQ1kZux/iXpFBcZjDnC57JHWOmrutlFubiMGEaitAKteuH1WB8eleDkQXq21k1n vEDYC6qofQuAwlivga5S3NTq0//bRnEdsig3fzf2Y/fxA16vKH4UhTqFIfTK55lH kJdc1JppTBF3qtaY1uzE9jU6XexqLLFf+oIPMwLF1sIhd2cUjE3o0fq5svsHIX2p p8Lgt5s= -----END CERTIFICATE-----Generated at Fri Feb 6 22:47:13 2026 by rpki-client