This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
File: _47Skrq7L4ZA7kbxs1kWS4BTj1U.cer (raw, json)
Hash identifier: QbciLiyV0iJXHAMEkKk7vQOl6p22XjuSGpVp8wlHez8=
Subject key identifier: FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 37F0
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:27:38 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328808
IP: 102.217.244.0/22
IP: 102.220.228.0/22
IP: 2c0f:4500::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14320 (0x37f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:27:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3621C8AAF, serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:84:b2:ee:a2:86:42:89:a9:d6:0e:98:4e:
9a:5a:98:6b:b0:21:2e:1a:0e:b0:b4:05:52:26:32:
0e:58:06:de:7a:da:f8:7f:35:0f:2f:a1:7a:9a:89:
a9:5c:3f:67:33:46:10:27:42:cf:7c:c3:13:20:e1:
61:79:fd:a8:ea:3c:d4:cc:ec:d8:1e:c6:56:6e:28:
ac:6e:43:b2:06:42:50:f5:4c:7d:89:ae:dd:df:33:
fd:3c:02:17:36:43:84:f3:58:46:9e:45:53:50:c8:
b4:0a:98:9b:43:31:33:47:42:96:ce:4e:b3:0c:13:
58:62:6c:26:4f:87:a2:e5:ec:fe:0b:88:d3:47:8f:
ea:cd:3a:3a:d7:7e:5b:a1:b8:58:e6:9b:14:a8:dc:
83:2a:7a:6d:da:48:62:53:d6:3b:ed:a2:50:e3:35:
77:0b:af:83:29:7d:07:56:c0:f2:a7:af:7c:8c:4e:
0b:ea:5b:ba:06:3f:a9:ed:4e:a5:ef:40:25:7f:4c:
a0:d1:90:18:c0:79:31:2e:59:22:13:c8:35:47:1a:
01:04:76:31:26:4f:14:a0:02:8d:f5:da:26:7e:73:
74:ec:20:ae:3e:5b:0e:77:fc:51:e3:43:1f:4f:44:
f0:75:6d:b8:e3:5a:73:ff:7f:85:45:d2:5d:3c:26:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328808
sbgp-ipAddrBlock: critical
IPv4:
102.217.244.0/22
102.220.228.0/22
IPv6:
2c0f:4500::/32
Signature Algorithm: sha256WithRSAEncryption
6c:76:f0:a6:55:ff:30:16:38:69:ca:bb:f8:22:f1:f5:89:f6:
c5:bf:40:dc:3f:3d:61:1b:cb:8f:c6:32:3b:7d:18:91:48:8b:
e3:46:8b:d8:da:e4:28:90:fd:af:8e:cd:e7:f3:11:eb:dc:e1:
c0:27:f7:df:14:46:b5:d5:2e:9f:a2:80:be:af:19:7d:3d:81:
2d:5b:1b:3b:a2:1f:7c:0f:31:6b:52:48:7f:80:5c:8e:90:88:
25:54:c4:e7:8d:c0:9e:5e:19:23:b5:bd:40:52:f0:93:9e:41:
63:37:76:3f:a0:0d:69:04:0f:87:7d:99:ec:d2:af:91:47:70:
49:0b:2b:6d:02:37:04:75:35:3e:c2:39:1d:95:77:81:0e:9d:
95:d0:b0:a2:f2:99:05:18:fe:70:80:53:a5:e9:f3:c7:e3:4f:
94:b6:a8:5f:81:0e:ad:1e:ec:8b:e4:72:5a:4f:76:90:7a:17:
2c:6d:44:a8:0a:18:fa:9f:6b:35:87:cd:39:78:00:bb:62:88:
39:4b:e5:ab:55:e1:82:8b:83:9f:d8:f4:fa:b2:a0:b7:87:c3:
c8:3e:c8:22:af:ec:3e:b6:07:f1:f0:9b:62:4c:9e:2e:e5:bb:
0e:86:2a:57:ab:b4:55:61:71:ee:5d:1e:26:17:eb:7a:ab:ef:
33:3c:1b:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:08:24 2026 by rpki-client