This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
File: GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer (raw, json)
Hash identifier: TqKsoBVEgtUX3x3UU/y2f8AiUAAPCsldzRCcvBjSSBc=
Subject key identifier: 18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 37D8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:23:34 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 22386
IP: 196.29.240.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14296 (0x37d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:23:34 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F361E99DAF, serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:55:ba:3f:cf:da:c6:9a:b8:2a:52:03:a6:
5d:a2:a8:ac:73:bb:94:80:ab:36:f5:99:9b:db:dd:
68:23:d2:79:d0:71:da:5a:2b:52:d0:d4:02:e8:27:
a5:6c:5f:42:7d:a8:f7:31:ce:c3:50:05:2f:d0:18:
88:c1:d0:b0:20:fa:0d:de:ee:6a:64:0c:8a:2f:fa:
bf:26:a9:ca:35:70:40:92:2c:43:61:2e:1e:ce:56:
3f:d2:cc:f6:10:5a:84:d2:70:1d:ee:b9:c4:58:22:
7f:4b:fe:56:f9:ab:97:a6:40:21:1e:30:e2:86:e1:
e4:13:e3:76:68:54:ba:6e:03:a5:2d:32:7c:be:dd:
6b:0c:dd:3d:f6:69:e3:84:07:3d:57:42:38:52:cf:
9f:0b:2a:aa:38:30:4b:5d:93:48:9a:44:e4:56:25:
3c:da:c4:0a:6d:67:40:77:b3:29:9e:24:e0:0e:9c:
7c:a4:fc:01:a1:64:8b:a1:e8:14:9c:f2:3b:44:de:
72:dc:85:67:27:8c:50:b2:98:e7:c9:11:08:df:81:
4a:70:66:4c:0d:11:19:5d:20:78:4a:df:a1:86:ed:
f5:95:6f:9f:b9:cb:79:fe:ed:4f:5d:4f:14:30:b4:
9e:2f:5d:df:70:95:8f:29:88:c4:0e:03:52:65:d7:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22386
sbgp-ipAddrBlock: critical
IPv4:
196.29.240.0/20
Signature Algorithm: sha256WithRSAEncryption
55:a4:9c:01:7f:9d:7a:7c:e9:10:56:bb:7e:ec:64:50:75:27:
e5:3c:17:a0:6c:f9:68:e1:8d:03:ec:5c:74:07:f1:34:e9:33:
29:4d:39:66:b6:d8:14:00:9c:a8:ec:a0:97:6d:9a:fd:38:8a:
94:7a:16:85:bf:32:82:fe:d5:44:59:c4:34:5f:1f:48:24:74:
d4:36:35:58:58:00:3f:25:7d:8e:c7:28:7e:33:21:11:51:ef:
06:31:de:f7:8c:ab:3c:50:09:70:5e:98:05:78:d3:b9:9d:a9:
96:b3:25:41:ad:a1:14:63:0c:2d:94:8e:e5:51:8a:79:f6:4d:
bd:61:49:c9:18:42:34:41:fe:74:8c:ea:12:0d:00:c9:07:61:
cc:14:48:ac:58:d5:6b:1f:8e:1c:ce:c3:d8:d1:ec:94:9a:39:
d1:7e:5f:9c:41:a1:4a:66:c8:3f:b4:81:67:42:c9:40:46:0c:
29:16:37:71:d8:e5:05:8b:db:5a:14:9f:bb:d0:cf:f6:e8:f2:
00:08:3f:06:0f:10:81:22:43:17:83:50:07:a2:a8:39:85:29:
2c:b4:63:9f:5d:07:2f:17:88:20:f2:b1:47:80:63:c9:58:45:
2e:87:79:4c:9e:e4:cf:85:60:3f:07:e0:07:f9:05:58:20:7d:
1a:48:eb:1b
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgICN9gwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMDIzMzRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjFFOTlEQUYxMTAvBgNVBAUTKDE4REE2ODJDMUUzRUMzNDY0RDM5MUQ5
QjcxQTVCODUyQTZDOUI2RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbrFW6P8/axpq4KlIDpl2iqKxzu5SAqzb1mZvb3Wgj0nnQcdpaK1LQ1ALoJ6Vs
X0J9qPcxzsNQBS/QGIjB0LAg+g3e7mpkDIov+r8mqco1cECSLENhLh7OVj/SzPYQ
WoTScB3uucRYIn9L/lb5q5emQCEeMOKG4eQT43ZoVLpuA6UtMny+3WsM3T32aeOE
Bz1XQjhSz58LKqo4MEtdk0iaRORWJTzaxAptZ0B3symeJOAOnHyk/AGhZIuh6BSc
8jtE3nLchWcnjFCymOfJEQjfgUpwZkwNERldIHhK36GG7fWVb5+5y3n+7U9dTxQw
tJ4vXd9wlY8piMQOA1Jl18GhAgMBAAGjggMKMIIDBjAdBgNVHQ4EFgQUGNpoLB4+
w0ZNOR2bcaW4UqbJtuMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxRTk5RC84N0RGMUE0NjZBMDQx
MUVCOTA5NDcxN0RGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUU5OUQvODdERjFBNDY2QTA0MTFFQjkwOTQ3MTdERjhBRUEyMjgvR05wb0xC
NC13MFpOT1IyYmNhVzRVcWJKdHVNLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJXcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMQd8DANBgkqhkiG9w0B
AQsFAAOCAQEAVaScAX+denzpEFa7fuxkUHUn5TwXoGz5aOGNA+xcdAfxNOkzKU05
ZrbYFACcqOygl22a/TiKlHoWhb8ygv7VRFnENF8fSCR01DY1WFgAPyV9jscofjMh
EVHvBjHe94yrPFAJcF6YBXjTuZ2plrMlQa2hFGMMLZSO5VGKefZNvWFJyRhCNEH+
dIzqEg0AyQdhzBRIrFjVax+OHM7D2NHslJo50X5fnEGhSmbIP7SBZ0LJQEYMKRY3
cdjlBYvbWhSfu9DP9ujyAAg/Bg8QgSJDF4NQB6KoOYUpLLRjn10HLxeIIPKxR4Bj
yVhFLod5TJ7kz4VgPwfgB/kFWCB9GkjrGw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:19:16 2026 by rpki-client