This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DTBvSAc93XLccOnbp6ScT27cvII.cer
File: DTBvSAc93XLccOnbp6ScT27cvII.cer (raw, json)
Hash identifier: LgSjjx9sN9HuRO1iBHHPoLNf1DVCnIQpTQ/f52RMBTY=
Subject key identifier: 0D:30:6F:48:07:3D:DD:72:DC:70:E9:DB:A7:A4:9C:4F:6E:DC:BC:82
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3E75
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:44:56 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37110
IP: 41.77.128.0/21
IP: 41.223.152.0/22
IP: 2c0f:ee18::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15989 (0x3e75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 04:44:56 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36E201DAF, serialNumber=0D306F48073DDD72DC70E9DBA7A49C4F6EDCBC82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:9c:b8:eb:3d:c7:63:d5:e7:42:e9:bf:6a:
2a:f7:6a:c8:80:dc:e5:63:5d:38:d7:bb:6d:81:1c:
8f:08:3a:6c:c4:f3:8b:9b:a0:ba:ec:88:78:b1:f6:
92:53:77:d9:a6:0f:25:f9:4b:c3:96:24:26:c6:7c:
04:9e:23:c9:f2:0a:c8:10:77:05:c4:3a:99:ed:5f:
8b:bd:22:a6:ff:cf:54:1e:b7:e6:17:28:ab:6a:6c:
ef:09:e8:06:00:9e:c1:ab:c1:fc:1e:a0:6a:f5:2f:
5b:dc:6f:75:c3:42:51:24:41:88:2c:0f:76:54:3b:
91:42:02:b8:6f:1a:72:61:bb:72:52:02:e6:3b:e9:
b7:f5:a2:84:cc:fb:ee:e7:d9:d3:3f:f0:c9:d2:27:
b6:e4:03:d6:b4:e2:ff:f8:3a:3c:a8:35:11:5c:4b:
56:61:8a:8b:ba:c5:94:e9:b8:89:e7:91:fb:69:e8:
53:8f:f4:14:93:d7:60:04:ff:b5:8b:0a:cc:2b:90:
c0:f6:4b:eb:74:45:69:8f:ef:79:e5:ec:77:c3:0e:
6c:9d:40:7b:a4:74:43:82:d8:a5:d2:42:d9:9e:3c:
d0:bb:8d:2a:d6:22:a8:a1:8d:ca:42:87:63:c9:ff:
39:02:bf:fc:2e:2c:65:bf:3f:db:b8:10:a6:d9:4a:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:6F:48:07:3D:DD:72:DC:70:E9:DB:A7:A4:9C:4F:6E:DC:BC:82
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37110
sbgp-ipAddrBlock: critical
IPv4:
41.77.128.0/21
41.223.152.0/22
IPv6:
2c0f:ee18::/32
Signature Algorithm: sha256WithRSAEncryption
48:b0:64:28:63:64:b3:f2:74:8f:08:8c:a6:fc:38:4d:ef:f1:
b2:f4:2c:7c:8a:39:cd:78:4a:11:98:52:32:09:2c:17:40:e4:
ff:36:dd:d5:fe:42:85:e1:40:e9:49:83:1c:e8:ab:5d:b0:4f:
6a:ac:7b:4e:e9:9f:ed:bf:ae:69:14:fb:de:11:23:3b:1c:c8:
a4:e3:1c:4e:96:10:da:60:b8:d6:e4:08:92:86:04:0f:3b:7e:
84:85:44:21:c9:d1:2e:5d:35:92:a4:ce:18:1a:51:fe:de:5c:
96:3d:73:b0:fd:1c:50:49:7f:c0:91:a4:59:62:9f:37:6f:f5:
90:fd:5b:e2:0e:d6:bb:21:32:f6:4d:27:85:de:25:d7:47:4e:
eb:c6:e8:8c:67:6b:55:66:e7:24:c1:db:23:ba:ef:ca:9a:42:
88:b1:30:6c:ae:9f:f4:57:1c:f9:6b:7c:7b:1c:06:00:be:c3:
45:ef:e1:0e:86:33:fa:31:55:2c:5d:73:d9:63:06:c4:58:ce:
e7:47:ac:9f:3d:46:94:60:1c:72:c7:70:8b:ea:57:5b:c3:18:
b4:5b:ba:fc:31:29:eb:d6:6d:c0:5d:b1:1f:ed:a8:16:d2:0d:
77:49:7e:5f:c3:1c:0b:5d:c4:ae:fd:0c:48:15:4e:8b:69:0f:
2b:02:57:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:18:22 2026 by rpki-client