This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e3N2cJRkwgrwI758TJkaCNn2Ba4.cer
File: e3N2cJRkwgrwI758TJkaCNn2Ba4.cer (raw, json)
Hash identifier: Q2XkTrxaUbAkDvj/WGM7BGjplXk6asAIufO5FpXGrOU=
Subject key identifier: 7B:73:76:70:94:64:C2:0A:F0:23:BE:7C:4C:99:1A:08:D9:F6:05:AE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 39F0
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365BE49/268A6C300A9F11EE87E92E384AD9E6FC/e3N2cJRkwgrwI758TJkaCNn2Ba4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365BE49/268A6C300A9F11EE87E92E384AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:52:05 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328436
IP: 102.69.164.0/22
IP: 102.206.228.0/22
IP: 102.223.16.0/22
IP: 2c0f:ebf8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14832 (0x39f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 01:52:05 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F365BE49AF, serialNumber=7B7376709464C20AF023BE7C4C991A08D9F605AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:ff:24:a1:ad:cb:cd:e7:84:64:51:36:6a:
1d:23:b2:80:e0:28:39:d5:42:f9:16:b4:f4:b0:f5:
52:89:4f:56:1f:b6:2d:84:3b:97:86:26:e7:ff:a5:
9e:84:49:ca:c9:da:35:13:5e:23:a0:cc:60:22:79:
13:bd:8c:70:6d:66:d6:a3:5c:fd:37:ce:49:a5:7f:
bc:09:fe:44:59:25:27:6a:b6:4e:52:e8:cb:11:d3:
6f:35:7b:33:bb:d6:80:6a:fd:8a:18:5b:a3:63:c2:
81:37:0f:41:82:d7:0e:34:d3:61:be:07:b5:ad:fd:
e1:d4:0b:97:c2:7c:04:ac:c3:0a:19:be:d0:14:da:
e0:f3:ca:e4:6d:d9:ed:e6:a7:2c:9e:ec:c0:a2:2f:
48:e5:11:36:43:02:5c:c6:fd:41:1e:7d:a0:b7:a8:
45:31:b8:c2:76:63:94:18:f9:69:40:99:84:fa:dc:
51:62:1e:01:4a:7b:e0:a4:fd:7c:d9:32:94:e0:c5:
81:69:17:fa:29:e4:a6:6b:88:7c:56:24:18:f8:45:
2f:32:bd:ef:ee:1c:b6:0f:3d:1f:17:0a:72:86:06:
21:fa:6d:bb:b2:3b:0d:db:d9:3a:5c:1a:af:1d:b4:
8f:21:e5:10:1a:86:2b:f1:9a:48:42:d7:ae:c0:48:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:73:76:70:94:64:C2:0A:F0:23:BE:7C:4C:99:1A:08:D9:F6:05:AE
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE49/268A6C300A9F11EE87E92E384AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE49/268A6C300A9F11EE87E92E384AD9E6FC/e3N2cJRkwgrwI758TJkaCNn2Ba4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328436
sbgp-ipAddrBlock: critical
IPv4:
102.69.164.0/22
102.206.228.0/22
102.223.16.0/22
IPv6:
2c0f:ebf8::/32
Signature Algorithm: sha256WithRSAEncryption
79:13:72:a3:b3:9d:f2:1e:b9:4e:42:e2:5c:ed:9f:e3:45:7c:
07:14:c7:ed:ba:1d:f2:f3:fd:57:23:d9:a6:11:ba:fa:e3:ac:
95:e6:e1:42:b9:3b:75:69:8c:1f:89:01:31:03:b5:3d:e6:03:
e9:49:94:55:19:09:87:fb:79:81:34:56:24:e6:65:e8:e3:bd:
37:5d:df:4a:34:3b:8c:e9:ee:88:9d:ed:9d:1a:16:3e:73:5c:
55:8c:29:57:a2:42:8a:1e:95:70:1f:fb:6a:e0:94:90:7a:80:
f0:ac:80:4c:33:f6:41:f5:72:99:80:f9:26:f7:64:c3:9a:a6:
16:b1:f4:b1:a2:5a:31:67:e8:d6:49:29:65:26:7d:e2:66:21:
0f:b2:3f:81:3b:33:c0:30:21:fc:e1:42:e8:97:c4:0c:29:df:
7c:9f:5d:bd:20:1f:2f:de:7d:40:69:a9:30:4f:7d:bc:18:c7:
27:e1:8b:cf:8d:2e:96:b4:5d:d2:ab:8f:bf:01:e2:65:61:b9:
7f:69:bc:0b:76:9a:89:bf:30:ed:14:9d:51:7f:63:d1:86:2f:
78:1e:d9:aa:0f:c0:a5:69:7f:66:00:a1:5a:4d:e7:8a:8d:ba:
fa:83:ee:a6:e9:06:13:be:ee:1e:18:d3:31:91:96:0f:6c:68:
0d:0a:6e:08
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgICOfAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMTUyMDVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjVCRTQ5QUYxMTAvBgNVBAUTKDdCNzM3NjcwOTQ2NEMyMEFGMDIzQkU3
QzRDOTkxQTA4RDlGNjA1QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZsf8koa3LzeeEZFE2ah0jsoDgKDnVQvkWtPSw9VKJT1Yfti2EO5eGJuf/pZ6E
ScrJ2jUTXiOgzGAieRO9jHBtZtajXP03zkmlf7wJ/kRZJSdqtk5S6MsR0281ezO7
1oBq/YoYW6NjwoE3D0GC1w4002G+B7Wt/eHUC5fCfASswwoZvtAU2uDzyuRt2e3m
pyye7MCiL0jlETZDAlzG/UEefaC3qEUxuMJ2Y5QY+WlAmYT63FFiHgFKe+Ck/XzZ
MpTgxYFpF/op5KZriHxWJBj4RS8yve/uHLYPPR8XCnKGBiH6bbuyOw3b2TpcGq8d
tI8h5RAahivxmkhC167ASCxdAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUe3N2cJRk
wgrwI758TJkaCNn2Ba4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1QkU0OS8yNjhBNkMzMDBBOUYx
MUVFODdFOTJFMzg0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUJFNDkvMjY4QTZDMzAwQTlGMTFFRTg3RTkyRTM4NEFEOUU2RkMvZTNOMmNK
Umt3Z3J3STc1OFRKa2FDTm4yQmE0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAvQwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJmRaQDBAJmzuQDBAJm
3xAwDQQCAAIwBwMFACwP6/gwDQYJKoZIhvcNAQELBQADggEBAHkTcqOznfIeuU5C
4lztn+NFfAcUx+26HfLz/Vcj2aYRuvrjrJXm4UK5O3VpjB+JATEDtT3mA+lJlFUZ
CYf7eYE0ViTmZejjvTdd30o0O4zp7oid7Z0aFj5zXFWMKVeiQooelXAf+2rglJB6
gPCsgEwz9kH1cpmA+Sb3ZMOaphax9LGiWjFn6NZJKWUmfeJmIQ+yP4E7M8AwIfzh
QuiXxAwp33yfXb0gHy/efUBpqTBPfbwYxyfhi8+NLpa0XdKrj78B4mVhuX9pvAt2
mom/MO0UnVF/Y9GGL3ge2aoPwKVpf2YAoVpN54qNuvqD7qbpBhO+7h4Y0zGRlg9s
aA0Kbgg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:09:50 2026 by rpki-client