This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer File: hPAfwzjdLBQepF0xeyEfds9dABU.cer (raw, json) Hash identifier: 2tYHJBt5/UDuX5z1kvBYPn2eAYUZDKOxMt3urJCVliQ= Subject key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3BD1 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:00:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 41.242.124.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 08 Feb 2026 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15313 (0x3bd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:00:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F368F4A1AF, serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:76:ff:c3:2d:b8:4f:7f:d4:a1:18:55:4e: 52:25:07:59:96:6b:62:d4:0a:9c:dd:1a:29:c3:3d: 38:3f:c7:cf:5d:e8:45:c0:b5:d6:77:7b:80:4f:c7: 97:e9:c5:6b:b9:28:a4:b4:bc:85:cd:de:80:b9:98: 04:0b:eb:c1:36:91:72:ad:1a:eb:60:b1:c1:d0:0a: e1:43:87:6b:fa:7a:ce:c5:15:a7:04:22:c9:0b:2f: f6:4e:f9:d9:4c:74:9d:b8:86:02:9b:d2:ae:e2:a0: 84:6b:2b:53:43:9a:eb:25:5a:c2:5e:f4:29:6f:80: 6b:00:df:ea:70:1b:c9:6a:1f:30:54:2a:53:48:80: 03:2e:d3:f8:82:fe:ce:61:f1:d9:27:42:7e:90:46: dc:21:59:28:7a:88:a4:b4:b9:88:f3:84:d1:1c:25: 41:a3:4b:31:03:48:39:6d:32:18:79:cb:52:53:07: 85:16:78:58:a2:d4:15:a2:91:4e:c6:30:09:d0:eb: 67:5a:1c:3d:d1:09:f9:c8:d4:d1:2a:22:7a:9d:16: f3:e6:97:a9:f6:d4:10:4d:b3:0c:c5:a8:e8:dc:97: 90:f6:27:5c:2c:d7:08:53:08:b5:ac:df:bf:d0:09: 5e:e8:86:f8:0d:25:ae:d1:9b:a2:ff:9e:2d:72:b5: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft sbgp-ipAddrBlock: critical IPv4: 41.242.124.0/22 Signature Algorithm: sha256WithRSAEncryption 51:23:81:42:4f:0c:4e:f3:38:77:06:d7:42:14:81:20:81:21: 87:0f:e1:02:71:34:c6:55:50:d0:2a:57:39:92:83:27:b7:4f: e8:0f:16:19:74:91:24:6a:4c:1d:68:19:1e:c9:80:2c:1b:b5: 02:dd:4d:1a:16:cf:52:eb:55:6b:1f:9c:19:3b:12:68:eb:b6: f3:b4:85:b0:80:01:59:fd:60:4a:f1:b8:c5:fa:4c:5f:ac:7d: d6:81:5d:79:87:cf:2a:13:48:4d:6d:96:91:7a:a5:9e:e7:6d: 8f:28:bc:f8:ea:3c:90:1a:c8:77:1d:92:46:8b:0f:d9:62:63: 67:7f:84:2d:81:f1:b7:4d:25:71:2f:c8:86:2e:db:8b:6f:62: 6b:35:fd:eb:56:a0:a4:90:7c:8c:03:e1:4e:67:e5:ad:f4:2c: d1:2e:07:3f:cf:73:3d:51:46:26:83:c7:06:e1:4a:b5:72:e0: 69:4d:47:db:9b:78:57:16:12:b7:d3:8e:29:14:5a:29:f1:99: 2c:bd:7d:ad:62:d5:ea:f4:3e:2f:63:85:1c:0a:69:21:3e:7c: d2:62:1b:8a:51:ae:0d:d4:82:b7:38:9d:76:fa:06:3c:f9:cd: 79:ef:85:95:ee:ff:7b:8a:bd:ca:e0:91:eb:1d:c3:af:2b:98: a2:21:1a:f7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgICO9EwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzAwNDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjhGNEExQUYxMTAvBgNVBAUTKDg0RjAxRkMzMzhERDJDMTQxRUE0NUQz MTdCMjExRjc2Q0Y1RDAwMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0BHb/wy24T3/UoRhVTlIlB1mWa2LUCpzdGinDPTg/x89d6EXAtdZ3e4BPx5fp xWu5KKS0vIXN3oC5mAQL68E2kXKtGutgscHQCuFDh2v6es7FFacEIskLL/ZO+dlM dJ24hgKb0q7ioIRrK1NDmuslWsJe9ClvgGsA3+pwG8lqHzBUKlNIgAMu0/iC/s5h 8dknQn6QRtwhWSh6iKS0uYjzhNEcJUGjSzEDSDltMhh5y1JTB4UWeFii1BWikU7G MAnQ62daHD3RCfnI1NEqInqdFvPml6n21BBNswzFqOjcl5D2J1ws1whTCLWs37/Q CV7ohvgNJa7Rm6L/ni1yterHAgMBAAGjggLvMIIC6zAdBgNVHQ4EFgQUhPAfwzjd LBQepF0xeyEfds9dABUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4RjRBMS83OTgwMjZEMDNGNUMx MUVGQjgzQzc5N0U3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OEY0QTEvNzk4MDI2RDAzRjVDMTFFRkI4M0M3OTdFNzYyRTk1MUEvaFBBZnd6 amRMQlFlcEYweGV5RWZkczlkQUJVLm1mdDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAinyfDANBgkqhkiG9w0BAQsFAAOCAQEAUSOBQk8MTvM4dwbXQhSBIIEh hw/hAnE0xlVQ0CpXOZKDJ7dP6A8WGXSRJGpMHWgZHsmALBu1At1NGhbPUutVax+c GTsSaOu287SFsIABWf1gSvG4xfpMX6x91oFdeYfPKhNITW2WkXqlnudtjyi8+Oo8 kBrIdx2SRosP2WJjZ3+ELYHxt00lcS/Ihi7bi29iazX961agpJB8jAPhTmflrfQs 0S4HP89zPVFGJoPHBuFKtXLgaU1H25t4VxYSt9OOKRRaKfGZLL19rWLV6vQ+L2OF HAppIT580mIbilGuDdSCtziddvoGPPnNee+Fle7/e4q9yuCR6x3DryuYoiEa9w== -----END CERTIFICATE-----Generated at Fri Feb 6 22:51:59 2026 by rpki-client