This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer File: af-Z7GUV26O7-Wo36yGeJJT-wYU.cer (raw, json) Hash identifier: XiRqyZI0YNk/W7gJGhHGkLksglC7lrato047/HPUMXY= Subject key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 394F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:26:02 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37355 AS: 328235 IP: 196.49.46.0/24 IP: 196.60.44.0/24 IP: 2001:43f8:310::/48 IP: 2001:43f8:1020::/48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 10 Jan 2026 15:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14671 (0x394f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 01:26:02 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3647DDFAF, serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:6b:75:fd:2a:47:35:93:95:86:b9:a1:df: a9:86:1e:c2:7e:fb:76:91:47:70:64:03:9e:e8:07: d1:3a:a6:3a:7c:98:1a:52:33:29:d9:7a:b4:63:7c: 03:12:6e:9a:26:da:d4:2c:a3:e9:40:d1:65:65:62: b2:81:89:3a:ed:47:59:c1:96:b9:94:21:46:a3:3a: 43:d3:9c:58:a1:3b:4a:29:30:31:dc:e6:56:55:75: e6:da:56:fa:d6:e0:ad:41:71:53:16:6b:81:d0:0c: 4a:c4:26:c7:37:ca:46:64:c1:90:76:c7:5c:25:ff: 81:92:f5:d0:a9:ff:d7:bf:62:49:30:21:95:06:b3: a7:58:25:49:f4:a1:5a:cf:57:b4:f3:71:f0:5c:13: 28:e9:49:90:ec:17:ba:f9:01:d5:d2:af:5b:d4:60: e0:8a:99:6d:61:66:d1:1d:d9:d8:4b:05:b2:18:ed: dd:80:05:c7:82:e6:a0:a4:fd:a2:b1:e5:a2:c3:ea: 20:f3:2e:87:f3:82:07:74:a9:78:b4:7a:43:23:83: b4:de:75:ad:d2:01:9f:36:d6:f3:93:96:b6:57:7b: 16:5f:9b:33:e7:0e:31:72:0e:da:0c:c0:21:5e:93: 56:36:a2:74:58:b6:92:be:54:54:a2:89:b0:9b:47: 57:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37355 328235 sbgp-ipAddrBlock: critical IPv4: 196.49.46.0/24 196.60.44.0/24 IPv6: 2001:43f8:310::/48 2001:43f8:1020::/48 Signature Algorithm: sha256WithRSAEncryption 72:5f:cc:a3:60:08:5b:7c:33:25:11:76:05:8e:32:0d:83:5c: a2:86:70:c1:65:b5:60:c7:75:d4:6f:c4:c2:46:5e:42:ab:dc: 94:f0:69:00:65:90:c0:f8:97:f4:1b:a5:2d:38:ea:03:44:1d: ca:89:a2:75:e0:76:f0:04:b4:1c:eb:8a:f4:ca:28:28:37:55: d6:cb:46:59:20:f6:a6:54:b2:3a:f2:87:a5:28:af:fe:c9:59: 2a:98:e7:22:40:d1:2d:04:07:c2:08:0b:07:58:f3:6f:32:94: b2:b3:f8:79:9d:f6:cf:c9:f6:45:1b:72:e9:8d:13:ad:1a:0a: a0:3d:75:69:49:71:dd:ff:8f:38:17:c4:aa:eb:38:3c:e8:07: c3:6f:5d:08:7a:32:71:d0:84:1f:15:fb:6c:41:e5:c3:82:f4: 06:16:5f:b4:c0:3f:0a:8c:94:16:fd:e0:ce:d1:af:0b:7a:a8: e5:5a:40:33:5a:fa:eb:47:77:ea:f8:76:ce:80:de:9c:cc:60: 97:a5:9a:9e:e6:21:e2:0b:81:a5:01:99:9c:fe:92:58:0b:2e: d3:49:cf:c4:e6:3c:c4:c8:b7:ef:74:8b:7e:28:df:ce:5c:30: e5:d7:a0:91:80:60:80:31:9a:4b:98:dc:b2:fb:98:3e:af:6f: 19:67:8a:bf -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgICOU8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMTI2MDJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjQ3RERGQUYxMTAvBgNVBAUTKDY5RkY5OUVDNjUxNURCQTNCQkY5NkEz N0VCMjE5RTI0OTRGRUMxODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRMWt1/SpHNZOVhrmh36mGHsJ++3aRR3BkA57oB9E6pjp8mBpSMynZerRjfAMS bpom2tQso+lA0WVlYrKBiTrtR1nBlrmUIUajOkPTnFihO0opMDHc5lZVdebaVvrW 4K1BcVMWa4HQDErEJsc3ykZkwZB2x1wl/4GS9dCp/9e/YkkwIZUGs6dYJUn0oVrP V7TzcfBcEyjpSZDsF7r5AdXSr1vUYOCKmW1hZtEd2dhLBbIY7d2ABceC5qCk/aKx 5aLD6iDzLofzggd0qXi0ekMjg7Teda3SAZ821vOTlrZXexZfmzPnDjFyDtoMwCFe k1Y2onRYtpK+VFSiibCbR1e/AgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUaf+Z7GUV 26O7+Wo36yGeJJT+wYUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0N0RERi9EMEUwNDY5Mjg2M0Yx MUVBOEFBNzMzNEFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NDdEREYvRDBFMDQ2OTI4NjNGMTFFQThBQTczMzRBRjhBRUEyMjgvYWYtWjdH VVYyNk83LVdvMzZ5R2VKSlQtd1lVLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAkesCAwUCKzA/BggrBgEFBQcBBwEB/wQwMC4wEgQCAAEwDAMEAMQxLgMEAMQ8 LDAYBAIAAjASAwcAIAFD+AMQAwcAIAFD+BAgMA0GCSqGSIb3DQEBCwUAA4IBAQBy X8yjYAhbfDMlEXYFjjINg1yihnDBZbVgx3XUb8TCRl5Cq9yU8GkAZZDA+Jf0G6Ut OOoDRB3KiaJ14HbwBLQc64r0yigoN1XWy0ZZIPamVLI68oelKK/+yVkqmOciQNEt BAfCCAsHWPNvMpSys/h5nfbPyfZFG3LpjROtGgqgPXVpSXHd/484F8Sq6zg86AfD b10IejJx0IQfFftsQeXDgvQGFl+0wD8KjJQW/eDO0a8LeqjlWkAzWvrrR3fq+HbO gN6czGCXpZqe5iHiC4GlAZmc/pJYCy7TSc/E5jzEyLfvdIt+KN/OXDDl16CRgGCA MZpLmNyy+5g+r28ZZ4q/ -----END CERTIFICATE-----Generated at Fri Jan 9 01:02:02 2026 by rpki-client