This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
File: 9e2RvGqsS_b5N0e41TmTDZwMAis.cer (raw, json)
Hash identifier: ZSFlGdVqKloxUiMMa+Ecyv4aXDvvbMlv0373VSUUl50=
Subject key identifier: F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3E91
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:49:25 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 20928
IP: 41.187.0.0/16
IP: 197.246.0.0/16
IP: 2001:43c8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16017 (0x3e91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 04:49:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36E558EAF, serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:1a:44:89:1e:6b:9f:6c:f0:d0:0e:95:4b:
e7:08:8f:df:fc:9f:1d:dc:4d:62:d3:6a:3a:19:11:
88:54:f4:c0:f2:10:07:b7:8f:9c:e9:05:2a:63:ee:
d3:2d:61:a0:90:c5:61:ae:9e:c4:fc:ff:85:dc:6e:
db:e9:3f:00:2e:cc:fc:4b:2c:51:4d:ef:82:4d:d6:
4c:b3:fc:91:de:cd:f2:43:aa:87:03:85:4a:4f:25:
42:6d:1a:c4:c7:64:43:17:1c:01:2e:8a:94:de:08:
f7:d4:f0:ff:a0:fc:ce:70:e5:3e:e3:91:d5:a8:e8:
a5:52:34:84:16:d2:fc:12:81:f9:9f:88:c9:a8:d0:
8a:c2:c2:c3:d8:2a:27:6b:a1:75:ad:a5:a2:0e:0f:
97:8f:a3:66:3c:12:7f:40:dd:16:cb:8c:74:64:69:
6f:7b:32:8e:17:bd:29:6d:c3:e3:d8:50:75:07:47:
12:9d:15:48:05:2e:a6:a5:d2:ff:cc:47:81:0d:83:
e9:ef:53:3d:3a:c3:79:fd:eb:bf:f5:04:41:33:41:
b0:ce:c5:0b:76:9a:dd:a8:9e:69:02:6f:90:01:3e:
a9:11:a5:ea:5c:b8:3a:4c:af:b7:98:7a:48:51:54:
3d:fb:1e:d2:db:fa:8a:e9:db:93:ab:78:6a:fd:7b:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20928
sbgp-ipAddrBlock: critical
IPv4:
41.187.0.0/16
197.246.0.0/16
IPv6:
2001:43c8::/32
Signature Algorithm: sha256WithRSAEncryption
1c:fc:23:44:67:50:e8:ee:1c:ff:4a:94:78:72:f5:ee:d9:99:
c9:8e:14:a8:79:06:27:b3:f7:b4:4c:70:ea:f0:02:a2:2e:65:
44:f4:ef:d7:09:40:70:56:20:c1:43:81:13:f7:d9:a0:3d:8a:
97:49:03:60:cc:7c:86:6b:36:02:38:9b:83:97:1e:c4:05:43:
c0:39:f3:32:4d:be:4f:ae:2c:d1:af:3b:97:59:f1:17:57:32:
18:18:73:1a:64:00:e0:62:b7:6b:e3:f3:74:03:2a:1b:40:60:
a7:bb:5c:28:54:98:00:57:87:4f:85:22:5b:30:13:4f:a8:6b:
1c:5e:84:87:70:1f:ea:f6:18:f2:2b:60:44:50:c9:8b:b6:dc:
38:67:2c:b3:93:2b:71:68:b0:86:3d:31:55:9f:d5:c2:7a:1d:
fd:24:09:26:80:f2:f7:d0:6c:5a:37:08:0c:cd:0c:aa:51:59:
5c:9a:d1:17:89:e9:ca:7f:67:15:8d:80:16:a8:22:36:8c:db:
a2:36:1e:f8:62:1d:ec:35:6b:d7:d0:fa:52:e4:8f:2c:af:cc:
39:61:c0:fd:8b:bd:1c:f7:b1:d0:98:8f:f5:23:5f:75:1a:6c:
8d:79:e8:3d:7c:32:aa:e9:54:16:09:a6:ab:ea:ef:86:14:74:
d2:45:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:19:31 2026 by rpki-client