This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer
File: Zc12cqY4S1k4r9xciu-vQzS6KcA.cer (raw, json)
Hash identifier: k2yUNklH5nXnjMzHCjsH+f5u2b7QUdvJmwc+QdseU6k=
Subject key identifier: 65:CD:76:72:A6:38:4B:59:38:AF:DC:5C:8A:EF:AF:43:34:BA:29:C0
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3C12
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 03:10:37 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328733
IP: 102.218.172.0/22
IP: 2c0f:a40::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15378 (0x3c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:10:37 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3695A2AAF, serialNumber=65CD7672A6384B5938AFDC5C8AEFAF4334BA29C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:8a:f2:3f:16:de:56:81:91:8b:cd:f9:ce:
e3:ae:6f:fb:97:52:62:5d:71:7e:7e:01:87:a3:5b:
0a:2f:02:b3:d7:86:c4:aa:14:3d:62:28:9e:58:d1:
78:e4:a7:22:d5:8c:07:4e:c9:6b:dc:9e:04:8a:7f:
d0:95:53:9d:16:7e:0c:13:de:b4:b5:63:6f:07:b6:
65:36:c8:34:5e:af:ba:ee:7a:70:71:ef:43:98:9a:
32:fb:e5:ac:6e:4a:2d:1c:21:71:0f:6e:49:0b:64:
07:31:23:d8:13:aa:04:f8:87:f4:dd:a8:b4:17:87:
de:f1:95:47:73:56:ac:6c:f5:0e:c1:b9:75:40:02:
9b:fc:6f:b8:0f:05:78:89:64:cf:b1:1e:d7:ec:6b:
7f:27:13:fc:ab:e9:6c:4d:82:17:f8:fe:7d:bd:4a:
b2:45:39:96:3d:d8:c4:ba:a8:c9:ad:60:6d:ef:e7:
8d:31:21:d5:be:f2:74:6c:c9:b0:a6:e4:72:fb:1e:
0e:cd:fe:f3:72:cf:dd:5a:96:5c:54:61:59:fe:1b:
8f:61:ac:cb:fb:2b:1b:39:7e:5f:37:f2:9f:e2:2e:
9f:c4:85:5e:7f:9f:39:13:e7:93:6d:2f:24:bc:7b:
82:58:d7:b5:6c:1a:b0:44:81:5d:b2:4e:a5:ef:ad:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CD:76:72:A6:38:4B:59:38:AF:DC:5C:8A:EF:AF:43:34:BA:29:C0
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328733
sbgp-ipAddrBlock: critical
IPv4:
102.218.172.0/22
IPv6:
2c0f:a40::/32
Signature Algorithm: sha256WithRSAEncryption
bd:eb:e5:97:18:06:52:a8:a3:c7:99:0e:68:29:5c:b5:d8:b6:
2d:4f:d8:37:ae:c6:91:7c:0b:e7:df:40:44:ea:cd:ae:6d:de:
69:ca:53:b8:a6:bc:84:98:03:9a:b8:88:3e:e1:7d:24:56:61:
2c:a6:38:2d:c8:3c:f9:f4:d2:d0:d0:f8:94:a4:08:56:b1:5f:
0e:69:1e:e4:4e:12:d1:bb:d0:67:04:63:0f:7a:33:40:66:46:
d3:34:b9:65:af:ed:74:0b:a3:c9:e3:f7:41:d1:c7:78:ac:89:
60:3b:a4:ae:1c:8b:17:ed:80:5e:9c:03:ba:f7:8d:2d:13:fb:
00:9c:6c:64:5e:52:b1:36:bf:99:cd:6b:4d:18:33:e0:15:d4:
10:7a:69:c2:40:77:61:6b:a3:3b:e0:af:4b:d3:63:1e:7c:89:
bf:97:ab:b7:21:9b:92:21:77:a6:22:26:f2:50:07:71:05:c7:
4d:00:42:fd:1a:7b:ea:c9:44:c5:8f:31:b3:23:84:f3:20:bc:
b8:52:8e:56:44:04:58:eb:9f:2d:f3:cd:5b:c8:ca:a0:07:9b:
4a:61:1a:71:01:3d:b7:c3:a5:99:3b:c7:c6:56:f9:ee:dc:7a:
bd:a4:6f:be:81:49:6a:b8:f0:ca:4b:86:89:07:02:60:52:7f:
0d:bc:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:49:40 2026 by rpki-client