This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
File: OlU7bvgL-SIxL5a43cHyGajEEhs.cer (raw, json)
Hash identifier: VRbfRW6WCv7RpkHnvt3/SwrNwvA8E7dvzGMK0pRUBKo=
Subject key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3EDC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 05:02:10 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329250
IP: 102.211.232.0/22
IP: 102.212.4.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16092 (0x3edc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 05:02:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:83:47:60:3c:e2:9e:3a:73:4e:5a:2b:b5:
bd:9f:fc:dd:10:7d:07:2b:7b:8f:f2:4d:09:5e:f1:
e5:99:e9:f7:ef:73:d3:e3:57:c6:9e:2a:fd:c5:da:
8d:3f:01:93:df:c3:5d:ee:cd:d2:92:c8:28:c0:9b:
4a:7e:85:bc:d1:87:5c:28:85:bb:17:03:29:8a:be:
75:e0:ef:21:fe:a4:75:d5:2a:42:73:8a:3f:7e:94:
f5:17:c9:a3:47:ff:e0:c0:47:85:9c:c8:1c:96:aa:
9f:38:61:7a:2c:7e:94:1c:84:89:4e:96:17:f4:b2:
51:c6:c1:49:7f:d6:54:b9:36:b8:ee:1a:2a:5c:32:
b3:f2:15:0e:af:9e:c7:fb:da:b2:dc:e6:68:61:2e:
5a:1c:86:7e:81:f7:a6:da:08:ae:17:96:80:0f:33:
93:4d:41:64:f9:6c:9e:cf:1c:42:6b:df:d0:83:4d:
37:f4:4f:ab:ba:71:05:96:2c:08:7f:d2:72:a7:eb:
13:f5:da:b4:bd:2b:da:11:f8:34:c5:99:f5:fe:57:
a9:cf:bc:da:d0:a6:c6:8c:68:7b:5b:58:6e:b0:4c:
16:c4:b8:26:fb:b7:68:80:75:bf:29:ca:0f:4d:f1:
52:72:a2:36:26:b4:4d:66:e8:4b:54:d7:d7:5a:7b:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329250
sbgp-ipAddrBlock: critical
IPv4:
102.211.232.0/22
102.212.4.0/22
Signature Algorithm: sha256WithRSAEncryption
44:0f:c0:fe:fe:34:bc:6f:18:b9:e7:4c:86:44:54:42:90:4d:
d7:3c:02:20:bd:a6:df:04:f7:38:f0:c0:e7:3d:fb:c2:6e:2f:
9b:a8:c3:5a:aa:71:6f:2f:89:2a:aa:fa:88:2f:7d:70:35:59:
45:df:5e:9f:57:05:f3:66:4a:d7:d5:ec:1b:85:1e:d6:0c:fb:
28:12:e7:c3:a7:43:b1:8e:48:bd:1f:b2:3d:0b:62:05:f0:3a:
3a:c0:73:23:ee:98:9e:79:69:07:ef:81:68:1e:53:b9:c5:09:
39:77:5a:b8:0e:d8:ef:d2:df:7c:91:d1:ca:b3:7d:28:69:5d:
fd:97:60:11:cb:63:7f:c1:4d:de:45:e9:ad:62:0c:84:f7:3b:
3b:3a:b4:47:4e:fd:56:10:3a:3b:03:3e:16:05:e6:6e:c5:13:
f7:b8:a7:00:f6:a0:9e:b8:4f:50:2e:be:89:7b:37:80:1e:2f:
fb:0f:53:ae:67:1e:29:ba:14:be:5e:8f:81:70:d1:22:07:dc:
e6:30:76:88:a9:ad:e7:b7:2a:5a:f2:da:12:83:96:32:f0:04:
21:ec:93:83:be:9d:5c:f4:57:28:f0:91:d1:14:6b:cb:b1:8a:
b3:eb:d5:e7:b1:bd:41:2e:cc:26:4c:b3:67:94:b2:d1:e9:90:
b7:9b:d6:78
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgICPtwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwNTAyMTBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkVGN0QwQUYxMTAvBgNVBAUTKDNBNTUzQjZFRjgwQkY5MjIzMTJGOTZC
OEREQzFGMjE5QThDNDEyMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/KINHYDzinjpzTlortb2f/N0QfQcre4/yTQle8eWZ6ffvc9PjV8aeKv3F2o0/
AZPfw13uzdKSyCjAm0p+hbzRh1wohbsXAymKvnXg7yH+pHXVKkJzij9+lPUXyaNH
/+DAR4WcyByWqp84YXosfpQchIlOlhf0slHGwUl/1lS5NrjuGipcMrPyFQ6vnsf7
2rLc5mhhLlochn6B96baCK4XloAPM5NNQWT5bJ7PHEJr39CDTTf0T6u6cQWWLAh/
0nKn6xP12rS9K9oR+DTFmfX+V6nPvNrQpsaMaHtbWG6wTBbEuCb7t2iAdb8pyg9N
8VJyojYmtE1m6EtU19dae8GzAgMBAAGjggMRMIIDDTAdBgNVHQ4EFgQUOlU7bvgL
+SIxL5a43cHyGajEEhswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFRjdEMC8zNkU0MEExNkYyRkIx
MUVEODIxQjlEODA0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUY3RDAvMzZFNDBBMTZGMkZCMTFFRDgyMUI5RDgwNEFEOUU2RkMvT2xVN2J2
Z0wtU0l4TDVhNDNjSHlHYWpFRWhzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBiIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJm0+gDBAJm1AQwDQYJ
KoZIhvcNAQELBQADggEBAEQPwP7+NLxvGLnnTIZEVEKQTdc8AiC9pt8E9zjwwOc9
+8JuL5uow1qqcW8viSqq+ogvfXA1WUXfXp9XBfNmStfV7BuFHtYM+ygS58OnQ7GO
SL0fsj0LYgXwOjrAcyPumJ55aQfvgWgeU7nFCTl3WrgO2O/S33yR0cqzfShpXf2X
YBHLY3/BTd5F6a1iDIT3Ozs6tEdO/VYQOjsDPhYF5m7FE/e4pwD2oJ64T1Auvol7
N4AeL/sPU65nHim6FL5ej4Fw0SIH3OYwdoipree3Klry2hKDljLwBCHsk4O+nVz0
VyjwkdEUa8uxirPr1eexvUEuzCZMs2eUstHpkLeb1ng=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:19:38 2026 by rpki-client