This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
File: pZcz3KUuEYvmm3dYljNX3ajFFCg.cer (raw, json)
Hash identifier: 8jyGtDEkrMFRKOILocEvPXk8TFgWGdS+0kOjqv6jS38=
Subject key identifier: A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3CF3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 03:43:38 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 16800
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15603 (0x3cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:43:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36AC63AAF, serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:f4:c8:ae:1f:2d:43:87:b3:5d:10:91:c9:
16:28:93:ab:9b:99:12:fa:f0:87:5f:e4:1a:79:7f:
c2:1d:69:70:68:06:9d:60:9a:a8:a3:44:32:aa:0f:
df:84:8c:d0:ca:43:a1:d9:6b:46:68:f6:72:fd:4c:
4e:a6:ae:41:ad:eb:c8:5a:09:65:06:0f:cf:8e:64:
94:6e:12:87:db:c9:a7:4c:e8:c0:05:a1:e1:38:cd:
d7:70:47:27:7d:52:c2:48:5e:12:82:2e:4f:2d:b3:
0e:47:a5:34:ba:52:0e:a2:69:21:9d:08:64:6a:0f:
68:38:48:4e:21:ad:03:c3:72:b9:07:88:93:91:80:
6c:0e:20:1c:c8:84:19:15:ec:6d:d0:a7:6e:36:e4:
df:36:f8:2e:0e:08:c4:90:73:6f:6a:a5:12:29:65:
1d:71:ec:ac:37:18:ef:ad:d8:7f:27:79:75:38:fd:
f0:95:49:a9:9a:c8:96:1c:e5:1f:b1:58:ff:f6:7c:
4f:98:a3:fd:06:b6:37:72:42:e8:6e:a0:3c:40:e7:
a8:2f:51:84:eb:6e:91:a6:e3:a4:e8:c6:4c:ca:03:
37:08:45:15:1a:27:d5:76:d4:a9:29:0f:63:41:1c:
54:7f:1e:35:df:47:b7:88:bf:04:1a:03:31:00:70:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16800
Signature Algorithm: sha256WithRSAEncryption
c6:c0:b4:0d:f2:b3:74:8d:ab:ce:a2:e2:af:8f:00:45:2d:c1:
58:77:57:1d:12:1d:a0:78:5a:1e:33:f0:4a:bd:47:01:5f:e9:
e0:39:69:78:a8:d3:c6:fe:cf:70:05:84:df:12:69:c5:ab:82:
07:ff:44:00:3b:39:3f:c0:36:a5:e5:53:f2:7c:df:65:f7:d7:
ab:d8:8e:63:2a:e6:de:a9:68:68:3a:8b:2b:b1:b2:7b:21:1e:
95:7a:74:1b:75:d4:46:c2:9c:2e:71:21:9b:39:9c:1d:40:a2:
39:88:09:40:bb:12:32:98:2a:71:e1:51:7d:51:88:15:65:c9:
a9:09:8b:7a:2f:54:8c:f1:e2:24:b9:7c:e5:a8:a3:6b:f0:4b:
ea:d2:06:8e:4d:37:cf:53:8e:9f:3c:1d:88:b3:3c:a6:00:9b:
8b:d7:96:ea:89:4a:d5:f9:2e:15:83:cd:80:d5:fb:23:c4:0e:
83:28:9b:12:c3:81:3d:75:3c:f5:5d:55:cf:62:51:49:13:bf:
ed:42:a1:98:de:1f:1f:65:91:ec:6d:b6:46:aa:34:39:72:73:
39:aa:27:0b:c2:69:fd:05:7b:42:66:36:9b:5f:d4:ff:2f:2f:
ed:a8:6c:68:a0:51:e1:a8:f7:07:78:98:a8:3e:ff:d6:8d:d3:
c1:5d:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:20:07 2026 by rpki-client