This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Cc973KOmkZDCJAUZkQFoaVT0_ek.cer
File: Cc973KOmkZDCJAUZkQFoaVT0_ek.cer (raw, json)
Hash identifier: 786gjkijpok2BZTzrvVWu+O/XXyPa0jNDNLZzCusPko=
Subject key identifier: 09:CF:7B:DC:A3:A6:91:90:C2:24:05:19:91:01:68:69:54:F4:FD:E9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3C7F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 03:26:30 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329418
IP: 102.209.153.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15487 (0x3c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:26:30 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F369E91FAF, serialNumber=09CF7BDCA3A69190C22405199101686954F4FDE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:fb:f1:0c:b8:53:7a:fd:ca:eb:45:e8:69:
3c:dd:6f:b5:3b:05:8b:3f:ae:0a:de:84:27:81:5c:
a8:46:1c:74:31:6d:b0:fc:ee:a2:ed:c4:a5:67:be:
16:dc:1c:f2:be:e6:d8:e2:49:f7:d1:5b:2b:d4:23:
78:db:92:f0:1a:c3:ed:2b:0e:05:cb:3c:06:3b:8d:
13:88:ae:eb:c8:54:b9:04:6e:51:f5:e0:4d:2f:9b:
73:04:e8:ac:ec:0d:0f:4d:34:4b:25:64:16:52:bf:
50:19:71:49:e9:71:fe:15:ce:a3:54:c8:c4:4c:19:
95:92:e1:ab:bf:67:b1:26:17:e2:31:3f:eb:f4:92:
ad:73:69:f2:e8:a9:05:11:bb:df:29:27:52:c4:9f:
fc:64:2b:ac:48:95:6f:e7:e0:ed:d1:06:3f:b9:c7:
4d:18:0f:f4:a2:9b:f9:10:64:25:95:95:ab:5a:a7:
27:30:06:c4:9a:6a:43:57:31:b0:f0:65:7d:9f:d5:
cf:f0:c5:7e:94:79:e6:97:fc:7f:ed:5f:e7:eb:46:
00:2e:8b:14:8f:c0:4e:85:ec:47:c4:32:be:28:17:
14:ca:10:62:e2:d1:07:37:43:c6:9e:b8:5a:5a:3d:
7c:ac:8b:cc:07:a2:ad:5d:b0:1f:80:4b:12:bd:cd:
ee:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:7B:DC:A3:A6:91:90:C2:24:05:19:91:01:68:69:54:F4:FD:E9
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329418
sbgp-ipAddrBlock: critical
IPv4:
102.209.153.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:49:83:34:26:bd:82:ab:e8:74:51:6b:c5:51:d3:55:02:2d:
7a:18:be:ff:38:c4:46:21:2f:97:47:99:ba:19:7d:d9:45:50:
3e:a2:76:72:34:c1:86:65:8f:10:59:cc:00:40:73:1b:53:01:
93:90:4a:2d:87:b5:d9:ca:27:1b:07:ca:11:52:d1:4c:67:44:
41:13:c1:bc:c8:27:cd:85:13:bc:f1:31:1d:43:d9:6d:23:44:
1f:5b:5b:78:ef:d7:9d:57:3a:8b:a0:3e:06:24:c0:71:91:0b:
69:17:49:ca:26:36:f5:a7:54:bf:d7:0f:3a:f8:51:87:f4:80:
3d:98:75:e1:35:f1:b2:48:66:64:2c:65:5f:66:f0:6f:8d:46:
86:c8:f8:1f:41:b0:0b:a8:e9:8b:3b:b0:cb:0e:a8:77:f6:19:
bd:c2:01:60:92:06:eb:2a:b0:68:1f:36:6f:66:c4:af:3c:c6:
16:9f:8c:74:85:ae:6d:4c:68:44:8c:0e:1b:d9:28:22:90:9a:
7f:88:9f:89:16:49:dd:c3:34:05:0e:f9:4c:82:49:13:dd:da:
21:87:35:a7:d2:98:fd:dd:cb:b9:d5:3a:a0:ca:d1:f5:87:41:
9e:e7:2c:20:6e:4e:0b:f7:d7:85:bb:05:c0:6d:0a:19:a6:2c:
7a:7a:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:58:48 2026 by rpki-client