This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/fHsh1E3T3s6a76jRvdnhrs9LUY0.cer
File: fHsh1E3T3s6a76jRvdnhrs9LUY0.cer (raw, json)
Hash identifier: 2G/8CxIk5b5Ej8dSZMhwUHYHQY0HTRPVINIM1+P9Rls=
Subject key identifier: 7C:7B:21:D4:4D:D3:DE:CE:9A:EF:A8:D1:BD:D9:E1:AE:CF:4B:51:8D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 385B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:47:35 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37052
IP: 41.191.192.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14427 (0x385b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:47:35 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F362DE23AF, serialNumber=7C7B21D44DD3DECE9AEFA8D1BDD9E1AECF4B518D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:50:76:3c:4e:24:dc:39:87:a6:29:8b:df:
22:3b:3b:64:aa:ef:5a:e5:01:18:ac:7b:05:a9:5a:
88:3f:7d:ca:be:b0:ae:fc:c2:25:0f:15:44:d6:82:
63:9e:ee:06:9e:ef:d8:60:03:45:ee:92:98:43:b0:
35:44:cc:c1:94:67:12:c3:8e:00:ef:0d:5a:2e:61:
fc:e6:ce:88:a4:fc:8b:9a:53:da:92:31:1e:e9:0f:
94:85:61:76:78:0d:14:66:ac:df:e6:39:c0:8b:f3:
55:a7:4f:8b:32:cd:e1:81:df:d4:91:1e:d1:d3:9a:
7b:74:23:49:4e:9f:04:7f:0b:7d:0b:73:aa:f5:39:
91:6f:52:dd:f3:17:53:0e:77:e1:7c:df:92:40:15:
51:8f:52:c3:0f:2a:11:30:63:0b:59:d3:50:0e:51:
4a:78:25:d2:b8:db:a5:fd:21:5b:f3:47:e7:5b:e7:
37:57:41:f9:e9:02:a8:1e:9c:e2:24:d0:33:53:61:
f7:82:62:21:00:0d:83:ce:02:34:32:53:e1:74:bf:
8d:e4:4a:4e:fc:7d:3c:6f:60:dd:a6:d5:f8:54:13:
3b:6b:9f:c8:d5:39:6f:ff:a0:07:df:cc:d9:d5:04:
00:71:09:d3:46:cb:4d:bc:1f:2e:f8:e2:54:05:26:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:21:D4:4D:D3:DE:CE:9A:EF:A8:D1:BD:D9:E1:AE:CF:4B:51:8D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37052
sbgp-ipAddrBlock: critical
IPv4:
41.191.192.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:d3:27:06:34:53:14:67:23:1a:c6:42:cc:e6:ac:7c:4d:5b:
9c:49:be:0d:c6:88:8f:75:58:c3:48:bf:b1:89:54:49:54:dc:
69:09:35:f2:a4:19:31:9a:08:7e:b1:7d:3e:cf:e6:af:dc:cf:
9c:12:42:76:6d:14:ab:bb:2c:ad:d8:5d:42:d4:7d:c8:a7:96:
19:21:19:9b:42:02:68:a7:5e:32:9e:d0:24:ee:56:00:e0:e8:
5c:80:2b:53:68:7a:29:6c:03:25:b7:36:70:06:99:dc:f4:d8:
54:0c:7f:f3:e2:2e:2e:ac:20:fc:ee:74:6e:c5:df:39:f8:1c:
6a:1a:e6:77:c4:89:12:a3:1a:6d:a0:bc:13:39:5c:a5:65:2f:
79:b8:7d:ce:cc:7b:59:f5:e7:e8:90:fb:ac:d8:29:a8:63:bc:
be:80:6c:ab:d6:63:b0:ad:66:26:42:a7:41:2d:98:cf:88:6c:
94:28:28:b3:65:5b:01:ca:95:f5:c2:45:1d:aa:2c:4e:84:a6:
02:f7:c1:e4:87:27:b8:4e:08:d9:a2:f9:55:22:42:ae:c4:eb:
db:c3:30:9d:d8:d8:b3:48:33:83:97:ca:a8:92:6b:56:47:2d:
20:d6:32:3a:75:9e:1f:94:c8:e3:5f:04:e5:d1:e6:1f:cb:8d:
06:d1:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:59:02 2026 by rpki-client