This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer
File: _eoOU4nJlJDK7YKxckgBHMMy7tk.cer (raw, json)
Hash identifier: PvhU8unAm1Iw04t7aNeoOJ7EHa6wP10UdxKuU+UzKQk=
Subject key identifier: FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 36C3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 10 Nov 2025 14:48:40 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.132.96.0/19
IP: 102.221.188.0/22
IP: 2c0f:ef78::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14019 (0x36c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Nov 10 14:48:40 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36593EDAF, serialNumber=FDEA0E5389C99490CAED82B17248011CC332EED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:84:2b:ab:9b:5f:6d:3b:74:71:65:3e:af:
24:ce:f3:72:e6:7b:68:99:3b:a9:82:ca:52:bd:45:
ab:7e:95:4b:1b:07:50:0d:c6:3c:bb:c1:34:97:f2:
09:6d:9d:a6:7f:c1:c4:76:ec:e0:21:dd:d6:da:bd:
79:96:cd:8a:ac:17:1c:9d:20:4c:43:60:bf:41:40:
40:18:b6:63:65:16:23:7e:ee:f8:bd:dc:be:1d:de:
3d:05:39:af:71:a4:d4:53:35:6e:6c:99:5a:10:12:
2d:05:d1:a9:3e:f6:f6:3a:02:72:c7:c6:85:02:a7:
8c:fa:01:2f:87:7d:60:01:13:f7:03:e5:84:98:a5:
52:90:e0:9f:ee:09:0e:2b:da:40:f5:0c:46:af:1d:
63:19:b3:22:f9:22:3c:e5:c0:b4:a7:ae:63:1d:5a:
00:30:0f:97:8c:92:65:da:ec:53:f8:0b:4a:5e:52:
24:13:2e:cb:13:7a:e6:94:8e:3d:29:0d:0a:fa:2c:
18:d1:81:b0:60:86:d0:5e:b4:0b:6a:9b:02:6f:fc:
eb:84:59:c5:e6:9a:f7:c3:2d:50:43:90:6b:5f:83:
bd:87:8b:46:65:6e:07:d6:cb:33:e1:6f:70:16:ea:
df:2f:62:c1:87:64:48:c6:66:ac:9c:f4:dd:ac:2d:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
sbgp-ipAddrBlock: critical
IPv4:
102.132.96.0/19
102.221.188.0/22
IPv6:
2c0f:ef78::/32
Signature Algorithm: sha256WithRSAEncryption
65:13:08:ac:b7:95:2b:a2:d1:6c:9a:72:9f:eb:8c:e0:45:9e:
65:44:16:31:7f:db:cf:71:4c:f4:9d:94:68:24:c1:dc:a8:5d:
88:f4:32:31:c2:80:c7:80:30:54:48:6a:6f:0b:a6:2c:ca:d9:
b1:e9:6a:6e:fa:c8:83:c9:1e:54:95:04:c1:eb:7f:89:76:2e:
9e:41:67:6b:ce:c5:56:dc:f9:45:ae:56:f6:b9:8c:5c:56:d1:
2f:58:31:64:62:6c:33:d3:fe:63:97:e8:a1:13:ed:73:99:aa:
b7:ea:1b:12:eb:db:da:17:2c:29:8e:cc:49:ba:76:8e:1e:2e:
95:80:24:f8:c3:bb:b1:8d:e4:30:af:7e:26:8d:96:f8:c9:70:
ba:4e:14:29:38:77:19:a5:73:90:b0:89:58:19:7d:c2:71:73:
5d:d2:ed:08:cb:15:92:e7:e1:39:cd:cb:ce:d2:57:b3:3d:fd:
91:21:d0:76:b3:1d:ac:68:a4:9e:1b:5e:8c:63:c8:f4:a9:f2:
6d:ec:d3:07:24:17:a8:8a:4e:9a:48:03:c3:a0:8f:bf:5a:c2:
1d:8b:73:d0:67:e0:57:6c:74:74:14:04:79:05:52:77:d7:bc:
c0:57:10:05:07:ca:8e:a8:0d:d9:64:10:8b:7c:ad:d0:4e:64:
dd:77:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:30:52 2025 by rpki-client