This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
File: LQAVTmAKZArDKjKF2c6fxQqUGrM.cer (raw, json)
Hash identifier: qptM2z6Qb2t/AkVzIPAl1z2WE8Vt/vYCa79OC/Xy/Ho=
Subject key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 39EE
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:51:44 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328915
IP: 102.218.204.0/22
IP: 2c0f:2900::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14830 (0x39ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 01:51:44 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:52:8d:f5:c1:56:bb:8a:a5:e9:20:42:97:
5f:fb:9f:1a:72:a1:ab:54:a2:2d:03:a3:d6:f1:e1:
f4:96:22:94:42:24:b6:56:38:56:90:72:eb:bd:13:
5b:aa:25:3c:0c:8e:d5:db:0b:99:27:a0:61:e8:7b:
00:a5:96:d1:87:d5:9a:50:22:b9:c9:b6:39:f4:f6:
1a:2b:89:96:ce:77:18:70:f1:d8:62:7e:54:a1:a0:
df:2b:8f:72:35:74:7c:75:64:25:dd:96:6d:70:6c:
6f:6e:e3:88:2f:ac:74:9b:ce:4c:2d:a4:32:0f:e4:
9b:ef:98:86:4f:49:8e:9b:b7:c6:4c:54:89:48:e2:
23:d5:80:3d:53:8e:82:92:48:d7:35:24:0e:ed:6c:
71:36:9e:10:e0:85:21:2a:a4:3d:a7:c1:ff:39:5d:
3c:91:83:01:6a:fd:87:df:de:77:97:ed:da:2f:31:
2d:2b:0e:4d:a5:ce:99:58:8a:85:f3:f4:66:4d:d8:
8f:a7:88:78:cd:4f:ac:da:69:f2:37:27:b3:4b:d7:
30:8a:f2:c9:59:a2:d7:18:c8:7d:88:90:4c:d2:e8:
93:89:4a:63:84:18:82:7f:89:1c:31:3b:b4:f7:f0:
39:11:33:1a:87:69:e7:2e:84:85:6a:7a:9a:83:da:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328915
sbgp-ipAddrBlock: critical
IPv4:
102.218.204.0/22
IPv6:
2c0f:2900::/32
Signature Algorithm: sha256WithRSAEncryption
a7:f1:69:49:53:78:db:a0:aa:b3:b7:f5:da:00:7e:c7:50:37:
e3:92:d9:5a:dc:4a:72:e3:35:68:df:7b:9c:97:84:21:07:11:
90:70:ff:04:7f:81:7b:40:95:8b:89:31:a2:52:0a:a7:63:c2:
da:52:15:de:07:83:f0:61:09:a4:0f:1a:38:c6:ff:18:ae:33:
2f:9f:e1:20:99:8c:a8:cc:e3:cf:39:c3:63:db:35:22:0c:2c:
cb:ac:93:8f:27:b3:05:fb:ec:8d:d6:f3:bc:67:e5:a4:fa:36:
e7:28:9a:0e:f1:02:bd:30:65:f9:c2:e5:4d:75:10:9a:85:b1:
60:9f:8c:1e:c3:a6:94:77:97:77:ae:d8:ce:49:5f:1c:2f:7f:
67:c0:eb:d7:18:33:fe:79:1c:b0:83:22:83:25:70:8f:67:73:
ff:c4:b6:4f:48:19:92:3c:9b:c9:d9:18:d7:a0:42:58:0e:bd:
b1:e3:48:3a:e5:71:9a:99:7c:32:7c:21:ec:ce:7b:e3:1b:fd:
b1:fb:20:29:6f:bc:78:58:6b:59:9f:9a:b3:02:53:8d:ef:63:
26:e6:5a:d8:a4:6b:11:a9:2a:40:76:47:57:15:db:64:72:6e:
97:bb:77:7b:9f:0f:7c:6a:ec:2d:f0:e3:bd:f6:e7:56:46:52:
0d:62:3d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:44:12 2026 by rpki-client