This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
File: VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer (raw, json)
Hash identifier: 0hrjETn7G+eD15VIefg71vxPEWdVs+UForaScV5eGvE=
Subject key identifier: 56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3821
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:36:10 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37721
AS: 37734
IP: 102.67.96.0/19
IP: 102.212.160.0/23
IP: 102.214.64.0/22
IP: 2c0f:ee00::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14369 (0x3821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:36:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3627A02AF, serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:95:a0:42:61:54:e8:fd:81:8f:1a:db:86:
cb:24:76:16:f5:12:e2:99:4c:02:8e:9f:4e:d3:da:
52:b2:2e:d1:08:b9:60:8f:b5:e4:e1:f1:05:5d:da:
89:0c:a0:bb:c0:6f:e1:78:ae:b9:51:18:86:a5:ca:
49:b2:1f:eb:47:e5:bf:a5:77:55:d8:cd:df:4c:27:
f0:dd:ff:45:89:f3:dc:10:f4:b1:87:d9:a7:8f:9d:
be:ad:c5:04:cd:cc:cb:27:ed:1b:83:8c:2d:58:42:
c1:15:f2:cd:04:ef:e1:9b:ca:0a:08:47:a8:bd:1e:
15:55:0e:19:07:ab:46:02:45:20:d8:c5:03:3e:ce:
01:7d:95:d6:f1:af:c9:da:cd:5f:ab:3c:0a:66:9f:
bf:cb:0f:0b:3d:8b:59:a8:32:31:95:55:40:1c:78:
45:35:bd:48:28:4a:d3:98:aa:5a:ca:cf:da:03:f9:
2c:fb:56:81:83:d8:ca:31:5e:54:2f:eb:6a:82:02:
49:15:48:f1:c7:e5:3a:ff:1f:d2:f2:6b:5a:55:b3:
a3:49:a7:6a:ea:33:a7:27:19:85:7e:93:e6:7b:40:
6d:c0:72:8c:4e:d5:64:f3:ff:87:e8:17:6a:0d:2a:
1d:ef:d2:da:52:44:be:49:6c:be:cf:37:ac:79:d7:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37721
37734
sbgp-ipAddrBlock: critical
IPv4:
102.67.96.0/19
102.212.160.0/23
102.214.64.0/22
IPv6:
2c0f:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
99:9f:55:b6:50:2f:8d:17:0a:b6:bd:99:11:13:00:1f:7c:bb:
bd:59:42:55:2e:a8:da:22:6f:6d:5b:b4:56:66:10:45:ed:d1:
7d:bb:d3:3c:90:02:e2:66:52:a3:8a:0c:48:de:45:cc:af:3e:
08:3a:71:7a:4a:e8:76:71:60:6b:ff:3b:c7:37:77:8d:00:4b:
51:08:9c:72:5a:7d:fa:61:3e:66:ac:8b:74:a9:8b:a5:ab:f7:
03:58:af:53:a7:da:26:97:f6:77:fd:05:10:3b:68:a6:6d:26:
8a:ba:87:54:01:48:4a:c2:6f:8d:b1:b2:56:e5:46:00:a2:2a:
e4:54:7b:6f:a1:43:dc:35:19:cc:2a:3e:f6:3f:b5:32:69:12:
69:54:b9:2c:4b:45:e0:ba:f2:a5:99:89:c0:52:10:35:96:8f:
83:6e:4a:07:e7:5b:69:e4:7c:59:e4:2e:3d:6e:97:20:2f:b1:
92:2e:07:5d:96:90:ae:56:d5:7b:e7:26:a4:3d:22:d5:4c:63:
0a:f5:ff:a2:c0:47:e0:c6:16:47:0a:aa:84:b9:bb:c3:67:76:
32:24:17:99:ca:21:4b:44:15:de:08:0e:40:7b:8e:4e:d6:a3:
a8:52:ad:f7:34:0d:f8:d5:35:a0:35:65:1d:c3:74:32:00:14:
d0:5e:ce:99
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgICOCEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMDM2MTBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjI3QTAyQUYxMTAvBgNVBAUTKDU2OTUyRUY5MzBGNDRGRkU5MTI3NzBF
M0RCQzE2MzA0OUY1QUZEQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQLJWgQmFU6P2Bjxrbhsskdhb1EuKZTAKOn07T2lKyLtEIuWCPteTh8QVd2okM
oLvAb+F4rrlRGIalykmyH+tH5b+ld1XYzd9MJ/Dd/0WJ89wQ9LGH2aePnb6txQTN
zMsn7RuDjC1YQsEV8s0E7+GbygoIR6i9HhVVDhkHq0YCRSDYxQM+zgF9ldbxr8na
zV+rPApmn7/LDws9i1moMjGVVUAceEU1vUgoStOYqlrKz9oD+Sz7VoGD2MoxXlQv
62qCAkkVSPHH5Tr/H9Lya1pVs6NJp2rqM6cnGYV+k+Z7QG3AcoxO1WTz/4foF2oN
Kh3v0tpSRL5JbL7PN6x519ddAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQUVpUu+TD0
T/6RJ3Dj28FjBJ9a/bcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyN0EwMi8yNkRGRDZCOEI1OEUx
MUU4QTZDRTI2NjRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjdBMDIvMjZERkQ2QjhCNThFMTFFOEE2Q0UyNjY0RjhBRUEyMjgvVnBVdS1U
RDBUXzZSSjNEajI4RmpCSjlhX2JjLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMAk1kCAwCTZjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBWZDYAMEAWbU
oAMEAmbWQDANBAIAAjAHAwUALA/uADANBgkqhkiG9w0BAQsFAAOCAQEAmZ9VtlAv
jRcKtr2ZERMAH3y7vVlCVS6o2iJvbVu0VmYQRe3RfbvTPJAC4mZSo4oMSN5FzK8+
CDpxekrodnFga/87xzd3jQBLUQicclp9+mE+ZqyLdKmLpav3A1ivU6faJpf2d/0F
EDtopm0mirqHVAFISsJvjbGyVuVGAKIq5FR7b6FD3DUZzCo+9j+1MmkSaVS5LEtF
4LrypZmJwFIQNZaPg25KB+dbaeR8WeQuPW6XIC+xki4HXZaQrlbVe+cmpD0i1Uxj
CvX/osBH4MYWRwqqhLm7w2d2MiQXmcohS0QV3ggOQHuOTtajqFKt9zQN+NU1oDVl
HcN0MgAU0F7OmQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:29:16 2026 by rpki-client