This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
File: 8oCesrM_mm8nojXfSsFD0ZKvTiA.cer (raw, json)
Hash identifier: j2RynNRlQ61GU1LWT77uJyvgyotekc58bjrXWfSECns=
Subject key identifier: F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 36D1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 13 Nov 2025 07:16:26 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37506
IP: 41.220.80.0/20
IP: 197.148.80.0/21
IP: 2c0f:5380::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14033 (0x36d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Nov 13 07:16:26 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362D462AF, serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:9b:0a:22:a9:aa:47:d3:8c:69:59:b7:25:
3e:6c:c7:39:a7:b4:c1:60:9e:a5:4a:f9:56:01:ac:
66:a7:f9:90:b1:9d:ab:b6:ae:00:60:a7:87:73:57:
88:d8:c5:d4:d5:93:b6:23:15:95:62:df:34:b7:60:
dc:be:99:9b:d0:17:e6:29:ae:8d:91:1c:1a:c3:21:
1b:84:88:a6:0b:8e:7c:c2:a6:98:af:39:87:b9:36:
31:72:de:b5:a0:d1:a7:b0:1f:aa:5d:1e:8b:e9:2f:
be:ab:f7:24:24:91:b8:f2:05:40:70:02:c8:38:f5:
3a:8c:a5:9b:2c:d7:4b:d9:01:b5:c3:e5:f4:12:60:
e6:5b:db:92:0f:d3:7a:6b:55:ac:00:05:7d:ce:ce:
c9:ab:22:17:3d:71:08:e7:c7:d1:1a:5c:4c:c2:eb:
78:00:a0:af:83:36:42:a8:b3:8f:69:c7:b9:15:a2:
05:06:50:76:a5:11:fe:54:f5:ef:d8:ee:ca:92:76:
9d:3e:54:23:c5:85:00:12:28:95:4e:2e:78:ec:5e:
72:07:4a:f2:5c:3a:dd:16:4a:8d:b8:58:54:a5:b4:
d6:52:71:ee:3c:83:17:cb:2a:90:17:e2:ca:48:3b:
a6:39:c7:52:97:66:35:1f:dc:4b:18:b7:56:a1:b0:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37506
sbgp-ipAddrBlock: critical
IPv4:
41.220.80.0/20
197.148.80.0/21
IPv6:
2c0f:5380::/32
Signature Algorithm: sha256WithRSAEncryption
54:19:ab:ce:90:69:8c:7a:ba:62:b5:b4:ad:3f:49:b2:9a:91:
50:84:65:12:27:5e:16:2d:98:47:86:66:0a:ca:bc:e3:ea:38:
5d:12:e1:07:64:43:fa:5d:60:a0:9a:f4:56:54:a1:37:65:21:
a0:94:b4:a7:b6:3a:3e:7f:88:5e:a0:44:e5:89:df:aa:70:3b:
f0:a8:98:54:33:c6:f5:07:3d:bc:d2:b2:10:12:0f:00:aa:86:
9f:9c:e0:01:85:2e:14:d6:0a:03:ac:69:9a:f9:d2:6a:48:9d:
9a:82:41:b6:cb:bf:cf:cf:23:ab:0d:4e:92:b3:3c:fd:4d:c3:
14:65:d5:98:29:2a:c4:d9:8b:5d:8d:cc:e1:cb:1d:2d:9e:07:
16:49:e3:69:ba:f2:28:fb:d4:6d:1c:5c:23:58:f4:02:a5:c2:
57:19:77:53:f4:f3:83:31:64:fc:72:78:82:cd:66:e4:1c:1f:
d6:b8:65:dd:27:b6:42:f2:27:0e:73:2a:26:93:40:3c:1b:d7:
9b:b6:f4:c7:ae:05:7e:f6:c9:96:9f:e4:bd:75:5a:45:9c:8a:
fa:0b:b7:ca:cb:13:21:f0:6d:63:8d:4c:bb:1a:51:c2:e9:b2:
17:6e:7e:d3:9a:bc:28:4a:12:0d:f5:ed:da:ee:04:e9:8b:1d:
32:6e:20:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Dec 8 16:18:34 2025 by rpki-client