This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
File: j1A71XPOETUXzWtM-jdKYvFeEsE.cer (raw, json)
Hash identifier: AK9CvopTh5p/X0HrW+AST7HS2KeD4xhkEy2t72ijKWw=
Subject key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3963
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:29:29 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 36925
IP: 41.87.128.0/19
IP: 41.92.0.0/17
IP: 41.205.192.0/19
IP: 41.214.128.0/17
IP: 102.96.0.0/13
IP: 102.216.12.0/22
IP: 105.188.0.0/14
IP: 196.112.0.0/12
IP: 197.153.0.0/16
IP: 197.230.0.0/16
IP: 197.247.0.0/16
IP: 197.253.128.0/17
IP: 2c0e:6000::/24
IP: 2c0f:fb20::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14691 (0x3963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 01:29:29 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:36:01:1b:23:ff:83:48:ed:8e:10:08:9c:
92:31:66:44:6b:47:32:f3:eb:f4:ae:64:aa:5a:f6:
d4:5d:e1:0a:d0:e0:1d:7d:b3:d5:d9:36:4a:1b:1d:
3f:cb:1c:71:9f:d6:99:11:41:21:8f:43:82:68:f7:
af:f8:a7:9d:dd:3f:5f:63:1e:60:b7:3e:15:88:97:
e6:ba:44:0f:93:a9:c5:a7:13:2d:61:51:95:92:cb:
d1:70:14:a1:56:27:ab:07:fc:32:6d:2c:a4:17:59:
28:76:69:5f:ba:0c:0a:4d:a7:7e:9c:ca:3d:90:01:
cc:e7:b0:b5:de:ba:df:7b:b9:a2:b7:51:f4:ca:ad:
2d:b0:a7:0d:65:ee:21:cb:54:89:b2:61:13:df:ff:
e7:a4:80:b6:1e:f3:b4:18:fb:a2:0c:2a:2f:0e:b2:
1b:88:12:ef:9a:bb:3f:48:88:d5:52:2a:1c:a9:c5:
1d:b6:2c:33:f6:72:36:fc:ed:9a:99:50:76:57:ca:
0e:3b:c2:53:af:2d:59:d3:8f:8a:fe:ad:88:7e:8b:
d5:d7:37:1c:eb:14:fd:14:35:44:08:69:9a:6e:5d:
ab:81:8c:40:cc:d2:24:f9:00:d3:96:cc:d6:de:fc:
04:89:2c:ad:4c:a6:e1:e3:e0:0a:8d:82:95:a0:0e:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36925
sbgp-ipAddrBlock: critical
IPv4:
41.87.128.0/19
41.92.0.0/17
41.205.192.0/19
41.214.128.0/17
102.96.0.0/13
102.216.12.0/22
105.188.0.0/14
196.112.0.0/12
197.153.0.0/16
197.230.0.0/16
197.247.0.0/16
197.253.128.0/17
IPv6:
2c0e:6000::/24
2c0f:fb20::/32
Signature Algorithm: sha256WithRSAEncryption
51:f2:6a:20:36:18:3d:57:02:04:d3:2d:07:7a:3b:05:99:af:
b5:dd:44:ca:18:8c:30:5d:ef:6f:f5:36:e4:be:79:0d:e6:32:
7a:bd:ee:e4:76:f2:53:0f:e3:70:82:5a:b5:4c:32:0f:9c:e5:
60:1c:40:d7:13:83:e3:8c:1c:14:6a:45:6d:27:1a:64:98:56:
f5:40:7b:1a:5a:3e:2f:87:81:89:04:57:c3:ac:71:20:6f:26:
a4:b1:5c:ac:06:21:fc:8c:9d:4b:ed:f1:89:24:b9:7d:45:dc:
8b:48:89:18:1c:b8:71:4c:18:4c:c1:bf:c8:6c:0b:ef:20:2f:
77:aa:b7:0a:c3:e4:18:a6:9a:cc:12:29:52:ca:cf:6b:b3:12:
4b:a0:b2:1d:f8:95:e0:fb:2b:1d:69:22:9e:a6:48:b3:ab:74:
0c:2a:d6:47:9b:d4:d8:5b:c3:57:22:dd:7a:5c:a3:f8:16:5a:
82:74:28:cc:81:8f:50:5e:fc:af:95:a2:ec:8d:3e:c2:9b:75:
4b:3d:fe:c3:54:b4:9b:bb:5d:9b:b6:4e:14:34:90:85:e5:f4:
ef:61:59:cf:c8:d5:03:40:a2:cd:bb:e0:eb:f7:80:4c:13:95:
be:4a:48:f9:2b:d2:8e:79:e0:38:fe:03:13:09:10:0b:41:34:
f4:e2:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:09:22 2026 by rpki-client