This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
File: IhRVkFuxmsTjjt3avWyqg1KbNE8.cer (raw, json)
Hash identifier: Jjm1Qw9m2p7epFJOnnkOmyTT4ZBZQO7bJHqT559Pr3Q=
Subject key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3B68
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:45:52 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37584
IP: 41.222.72.0/22
IP: 2c0f:f950::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15208 (0x3b68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:45:52 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:0e:69:5d:c1:00:28:5d:84:df:28:46:3d:
8b:da:f6:04:26:f2:04:63:e6:5f:2e:81:5c:7e:a8:
d5:46:92:d4:89:7d:0c:dc:ea:cd:e5:0d:2d:d1:f9:
15:26:88:37:f2:4b:0b:5b:6f:0a:61:1f:8e:67:38:
ec:9c:5f:fb:88:77:b4:18:10:06:56:5f:36:66:99:
85:fc:58:ea:84:e6:54:4f:d7:d5:e2:5e:26:97:aa:
15:bc:1b:44:6c:ac:22:87:7e:35:28:fc:0b:ee:9f:
c7:e9:01:a4:e7:46:10:88:53:ff:91:9a:2b:37:33:
96:86:75:e2:2f:f5:15:9e:ce:f9:69:76:48:d8:13:
3f:46:e8:6b:c9:c5:26:68:27:6f:59:8b:db:48:5f:
e9:c9:52:8f:23:53:15:ff:dd:7b:9c:9e:50:37:fe:
e9:c6:7a:2c:c2:46:e0:89:f8:e8:aa:f1:ed:80:17:
35:62:5e:e3:01:e0:36:9f:18:45:d1:8e:7d:e5:1b:
a1:50:9e:6d:68:a2:ed:41:63:d4:99:3e:af:38:a5:
9f:48:87:1d:ce:7e:be:46:02:31:14:a3:d6:72:47:
d7:78:f4:76:5e:a6:a6:e9:64:22:e0:4d:b4:61:ec:
2a:89:2b:c1:f0:33:ad:36:8c:63:b5:a5:a9:bd:8f:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37584
sbgp-ipAddrBlock: critical
IPv4:
41.222.72.0/22
IPv6:
2c0f:f950::/32
Signature Algorithm: sha256WithRSAEncryption
63:59:1d:5c:09:b9:49:14:03:b0:6e:4b:73:c9:6d:6d:cb:77:
70:47:f2:b7:b2:0d:0d:1e:1b:7e:a7:6e:0d:31:43:2f:67:c5:
5b:33:21:7b:e2:aa:cb:eb:03:4a:fd:11:fe:29:3e:29:20:cb:
5c:17:9e:0a:2e:bc:a7:a8:f3:84:a7:54:00:a7:14:0c:9b:14:
5b:5a:98:05:02:59:7c:12:76:a3:f9:ae:b9:7c:fc:df:98:1a:
d2:e0:2f:7f:4d:0d:c0:a2:e3:2f:51:72:40:d1:45:da:01:31:
f6:43:e9:35:72:11:11:82:41:7d:02:51:05:38:88:50:d8:b7:
e3:af:cd:1d:a1:bd:c5:60:07:14:c4:dd:57:0a:91:8f:26:53:
8d:6f:46:66:20:a5:50:5e:07:c4:60:20:3c:20:a7:2d:5e:4a:
d1:7d:be:3b:d8:19:bb:43:05:72:53:58:c1:a8:37:c7:52:03:
6a:0b:73:78:37:e1:9d:66:b5:c4:82:b3:69:d7:11:0a:7a:2c:
5d:e0:c7:04:ed:cc:1d:61:12:12:39:2e:ff:23:a0:e6:04:ed:
0e:fc:83:86:fb:fe:30:74:4b:39:08:2e:16:04:9a:33:db:08:
c4:71:b5:28:d2:f0:b3:7a:da:44:78:49:c4:23:52:d3:23:a8:
e8:88:c6:65
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICO2gwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMjQ1NTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjgyNUQwQUYxMTAvBgNVBAUTKDIyMTQ1NTkwNUJCMTlBQzRFMzhFRERE
QUJENkNBQTgzNTI5QjM0NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCr8Q5pXcEAKF2E3yhGPYva9gQm8gRj5l8ugVx+qNVGktSJfQzc6s3lDS3R+RUm
iDfySwtbbwphH45nOOycX/uId7QYEAZWXzZmmYX8WOqE5lRP19XiXiaXqhW8G0Rs
rCKHfjUo/Avun8fpAaTnRhCIU/+Rmis3M5aGdeIv9RWezvlpdkjYEz9G6GvJxSZo
J29Zi9tIX+nJUo8jUxX/3XucnlA3/unGeizCRuCJ+Oiq8e2AFzViXuMB4DafGEXR
jn3lG6FQnm1oou1BY9SZPq84pZ9Ihx3Ofr5GAjEUo9ZyR9d49HZepqbpZCLgTbRh
7CqJK8HwM602jGO1pam9j5kDAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUIhRVkFux
msTjjt3avWyqg1KbNE8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4MjVEMC9FOTNEMjdBQUM3QzQx
MUVDOTA2Rjk0REJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODI1RDAvRTkzRDI3QUFDN0M0MTFFQzkwNkY5NERCRjEyMjI0NjgvSWhSVmtG
dXhtc1RqanQzYXZXeXFnMUtiTkU4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAktAwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIp3kgwDQQCAAIwBwMF
ACwP+VAwDQYJKoZIhvcNAQELBQADggEBAGNZHVwJuUkUA7BuS3PJbW3Ld3BH8rey
DQ0eG36nbg0xQy9nxVszIXviqsvrA0r9Ef4pPikgy1wXngouvKeo84SnVACnFAyb
FFtamAUCWXwSdqP5rrl8/N+YGtLgL39NDcCi4y9RckDRRdoBMfZD6TVyERGCQX0C
UQU4iFDYt+OvzR2hvcVgBxTE3VcKkY8mU41vRmYgpVBeB8RgIDwgpy1eStF9vjvY
GbtDBXJTWMGoN8dSA2oLc3g34Z1mtcSCs2nXEQp6LF3gxwTtzB1hEhI5Lv8joOYE
7Q78g4b7/jB0SzkILhYEmjPbCMRxtSjS8LN62kR4ScQjUtMjqOiIxmU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:03:55 2026 by rpki-client