This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
File: 1-l-xBu1iYDED-Sp42wBC8ABPTE.cer (raw, json)
Hash identifier: IQ6b9eKLjxlnLD58qrgDeuIDqxNMSnR+oSgK/IeuCTc=
Subject key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 378E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:10:20 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329506
IP: 102.207.128.0/22
IP: 2c0f:11c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14222 (0x378e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:10:20 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:b2:f6:55:c8:45:dc:ff:8e:9a:4c:3b:d5:
37:0c:6e:66:13:5a:c9:f4:dc:00:f9:ea:eb:b1:f3:
6d:3b:87:55:a6:11:25:f4:53:a1:8b:39:e1:a9:94:
66:b0:9a:ef:8e:03:67:73:2d:aa:e6:80:6f:01:37:
37:d3:0c:ab:0b:90:0a:31:f7:4a:d0:44:f8:8c:dd:
8b:8b:ef:78:02:93:6f:57:da:37:e6:be:cc:68:12:
f3:74:42:a8:39:3b:37:82:15:f3:ce:39:cf:60:3b:
8c:7d:d7:9f:ca:f7:cc:71:eb:c6:be:90:43:b9:3c:
4d:8f:62:20:dd:63:3c:53:e5:35:3a:5a:9a:6b:76:
4b:4d:f2:49:e5:80:66:23:ac:a5:72:37:96:a8:a4:
3d:54:e3:06:60:ea:23:7a:ad:6c:7c:b0:7c:99:12:
db:73:bc:e2:f7:85:fe:29:47:2b:a9:62:1d:2f:81:
bb:ea:17:f1:81:1a:7c:6e:b7:52:51:37:7b:40:86:
76:6a:25:4e:df:e4:17:e6:ed:64:c4:bd:59:36:cb:
f8:23:69:03:e7:08:e2:ad:03:bf:cd:1a:a6:83:b9:
6e:10:f6:ad:6b:19:7f:e1:97:97:7b:0a:d9:95:f5:
56:c1:6b:05:b1:70:dd:4a:64:87:cc:24:5c:ea:91:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329506
sbgp-ipAddrBlock: critical
IPv4:
102.207.128.0/22
IPv6:
2c0f:11c0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:a3:84:b0:07:65:12:f5:6f:31:c2:1d:62:e6:49:ab:a5:c1:
df:97:91:af:2b:7f:8c:5e:03:26:e8:56:f2:01:6b:9a:7e:ef:
77:74:5b:99:74:a8:df:fe:3e:37:e9:97:1a:88:39:89:6b:27:
30:6b:f8:d0:44:0b:d7:6f:ff:fb:e4:a4:20:5f:82:81:11:be:
d5:89:65:23:fb:45:7e:c5:0d:d8:51:4f:83:3c:7d:32:db:1e:
90:d8:65:76:9c:02:48:00:3a:27:d0:bc:f6:e2:04:3b:9b:78:
08:3d:7f:44:9d:b5:a7:19:3d:e2:2c:74:b5:de:d4:bd:2f:99:
a2:b6:07:cd:66:1f:cc:91:dd:71:0f:69:26:06:55:f3:d6:fd:
15:8d:9e:45:ab:a3:8c:0f:71:f9:c5:1c:26:f9:9b:98:cd:d5:
3c:30:77:6c:55:86:e3:56:c9:c2:89:65:3c:af:cb:18:47:59:
db:b4:0f:0d:72:af:44:e6:15:42:90:2b:08:42:f6:1a:72:9d:
4c:53:39:0d:49:5f:55:a4:38:e6:2a:45:e4:03:48:47:b2:68:
a9:bf:fe:eb:1a:56:26:c8:95:27:41:0b:4a:19:55:3e:96:66:
90:88:46:e1:19:7f:54:48:77:72:da:a7:b1:78:91:01:b5:e1:
99:7c:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:08:03 2026 by rpki-client