This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.cer (raw, json)
Hash identifier: t7MRGhfTIe6wgEAyhOVYlGD8LsySZInX+V8u6T7qP9M=
Subject key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3C26
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 03:13:35 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328792
IP: 102.221.52.0/22
IP: 2c0f:5600::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15398 (0x3c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:13:35 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:7c:c2:74:ae:d4:e0:28:09:c8:0e:c3:37:
85:c8:56:1a:74:98:68:3a:73:63:03:cd:30:73:d1:
d4:aa:19:02:a6:b5:bf:a8:4e:fd:70:f3:ca:2d:42:
66:2a:e3:f8:93:1e:a8:2e:8d:d9:d7:71:dc:47:d5:
6c:76:9e:bb:84:07:6c:87:c0:fe:7f:cb:eb:49:9e:
e7:25:31:ad:0c:7a:c6:84:c2:1e:09:5d:d6:10:fe:
a5:fd:cd:44:dd:3b:e6:13:22:d1:51:d4:a2:7c:f7:
44:18:59:d7:77:76:1e:99:4d:02:33:f2:8e:2b:9e:
ae:fa:1b:28:c8:c5:7d:8f:28:ae:3b:1b:f0:64:da:
ea:f0:33:e8:6f:72:49:a9:c7:03:5a:64:2f:39:01:
83:01:ca:92:02:4b:39:f8:c7:ad:60:ba:2a:59:7f:
17:1b:1c:1b:c5:7d:53:de:50:b5:09:70:03:ec:64:
9f:16:de:31:9d:bd:1b:3b:cd:aa:63:ae:65:09:08:
8f:83:7e:e2:aa:bd:52:86:0c:09:4a:8a:fa:09:92:
5b:50:53:39:e5:b7:4f:fa:b6:cb:a9:71:b8:24:4d:
c7:04:ad:fd:0a:a5:53:58:28:c3:de:19:72:c1:a8:
7c:84:fb:da:1f:00:5b:9f:58:50:1b:22:58:51:57:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328792
sbgp-ipAddrBlock: critical
IPv4:
102.221.52.0/22
IPv6:
2c0f:5600::/32
Signature Algorithm: sha256WithRSAEncryption
b2:7d:fe:24:84:a8:eb:5e:e0:ea:c9:1e:98:3f:11:16:53:a4:
ff:ba:ef:6e:42:1a:c9:42:c0:6e:a4:48:0d:fc:bc:e4:c2:a2:
8e:66:98:16:d4:fd:22:b1:81:8c:13:ec:c3:70:13:8d:2c:1e:
92:4e:4f:e8:26:3a:b7:65:49:55:51:41:d3:23:c5:d9:60:9b:
49:45:0d:c7:6b:d8:87:26:05:0b:71:ae:93:e8:d5:1e:19:fe:
b6:d6:58:91:8c:7b:32:3d:a8:58:66:aa:d1:9f:f7:b5:b3:83:
d7:be:d7:76:01:24:0b:e9:b6:0a:e0:bd:46:a7:78:f0:86:18:
8c:d8:29:2b:2a:85:72:22:ba:bb:5f:41:e6:d7:dc:8e:7e:4f:
4c:a4:5a:cf:bb:e2:34:84:ec:e7:48:9a:68:af:37:08:e1:13:
99:86:96:d6:ba:d8:fa:d4:0d:ed:fe:00:9c:1b:b8:cf:b9:b0:
e0:a1:87:43:34:27:5a:7f:85:1b:04:c6:c6:7c:c6:17:12:ea:
54:f8:80:06:e4:a1:4c:ec:7f:b4:18:82:5b:73:2c:f2:49:02:
6d:3d:fe:8d:78:5e:12:21:13:de:44:25:c4:71:00:c4:09:90:
15:24:2d:22:f7:7c:0d:0c:40:47:c7:d7:e0:9a:03:11:57:9a:
69:58:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:18:57 2026 by rpki-client