This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
File: 3EJIwHspjM1rOedr4TDL0ntsigU.cer (raw, json)
Hash identifier: vcf2aaRsKNI2iI0V69VBt3uyTSC+zEBzkpo6pvnjVxQ=
Subject key identifier: DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3835
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:39:56 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329144
IP: 102.214.204.0/22
IP: 2c0f:7e80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14389 (0x3835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:39:56 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3629595AF, serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:75:85:42:f4:e1:5b:f9:11:ce:0a:c8:ca:
0f:00:32:7c:f6:62:1e:a3:d7:5d:f3:ec:d3:d3:5d:
bb:d6:34:e7:13:1d:a0:56:c2:15:de:cb:b1:1f:fe:
82:f4:fe:25:6d:b5:36:af:9c:40:62:15:2b:8b:f7:
41:09:0b:98:8c:93:7f:52:45:f0:91:09:5a:80:66:
b0:6b:2e:9c:ca:34:04:50:24:b3:31:91:de:8c:d0:
59:08:66:f5:40:ab:34:4c:4d:d1:95:9d:f6:bb:41:
3f:04:03:9e:d2:b4:a5:3e:9f:8d:be:79:38:76:8e:
2e:20:a4:44:7e:b0:b7:07:ef:dc:56:36:1c:83:ad:
33:08:5f:b1:8f:df:6c:2f:d1:34:8c:85:ed:f6:61:
43:65:20:10:5b:fd:43:f3:63:a5:19:ba:85:67:8b:
ad:85:b3:da:a4:03:aa:c7:72:ad:50:f6:66:a9:53:
cd:44:bb:47:eb:31:90:ea:b5:d8:fd:d9:cc:e8:f0:
e5:40:06:44:b2:df:13:ae:75:8d:8c:8a:5f:c4:41:
81:5e:ac:b0:a9:7e:93:7e:21:c2:67:29:74:91:8e:
92:a3:1a:af:e0:62:f9:72:f5:8f:a7:e4:b7:fd:5c:
2a:03:f4:4a:7b:58:82:3e:59:bf:0e:ed:9a:ca:22:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329144
sbgp-ipAddrBlock: critical
IPv4:
102.214.204.0/22
IPv6:
2c0f:7e80::/32
Signature Algorithm: sha256WithRSAEncryption
8b:48:fd:54:a4:a7:ad:4a:66:cd:7c:52:8a:ec:ee:c2:71:0d:
02:27:1f:5f:dc:c2:f4:40:97:cc:25:b7:67:20:1a:6f:30:a8:
03:84:12:af:1a:51:8b:66:1c:cb:7b:3c:f6:75:82:8e:16:9a:
8a:b0:4c:99:d1:0a:e1:74:3e:3f:e8:f0:d0:8f:61:10:f4:9d:
49:5a:8a:09:25:64:b6:bf:fa:af:6c:82:6e:12:dc:64:ad:77:
06:fc:1f:ad:3e:8e:15:59:dc:20:3d:96:39:69:3d:01:31:9f:
27:82:1b:f2:fa:65:78:50:1f:ce:ba:04:39:b6:4a:2d:6c:50:
36:14:f0:1e:00:da:13:bd:fb:bc:a4:36:08:2f:b5:57:8a:7c:
b4:8d:38:75:63:6d:bd:fc:17:d9:d9:da:17:52:ab:0b:26:d2:
a9:98:4d:87:8d:eb:8f:85:6b:fc:dd:f3:6a:7f:fb:54:b4:f3:
c5:d7:d5:99:56:7d:78:d4:51:05:55:9f:0c:cd:0e:cb:b7:88:
b5:b9:31:8d:a2:05:6f:fb:a8:34:d9:d7:cb:dd:c6:15:c4:0c:
c5:69:c9:e8:cb:58:46:70:c2:65:e5:79:39:99:e7:dc:1a:58:
1a:5a:49:f7:d4:b4:cf:42:40:7c:f2:e0:cf:07:fa:bd:28:c9:
e4:66:60:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:09:47 2026 by rpki-client