This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/uB6iOhePYIDn2A7zBrAE6aHc4RA.cer
File: uB6iOhePYIDn2A7zBrAE6aHc4RA.cer (raw, json)
Hash identifier: wlxJ1uCZi0sIDvhN8kj0DaBCuT8KiSy0BrSDyfC92xc=
Subject key identifier: B8:1E:A2:3A:17:8F:60:80:E7:D8:0E:F3:06:B0:04:E9:A1:DC:E1:10
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 38D8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:08:17 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328253
IP: 102.68.176.0/22
IP: 102.222.204.0/22
IP: 196.251.156.0/22
IP: 2c0f:4cc0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14552 (0x38d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 01:08:17 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F363D469AF, serialNumber=B81EA23A178F6080E7D80EF306B004E9A1DCE110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:03:d9:65:fa:58:89:9f:77:1a:21:be:64:
29:ad:f2:be:ab:6d:8b:52:fb:bd:24:6d:47:0f:56:
87:ce:3b:81:27:e4:13:3a:f1:54:a3:11:a1:c6:b7:
0a:63:7c:04:a6:e2:29:5b:14:e2:5c:1f:6b:3e:b4:
73:fe:7d:1d:e7:86:60:9c:21:2a:e2:ab:d1:da:7f:
02:ba:44:1b:ca:12:ee:e8:1f:19:14:7c:8b:4a:e2:
9c:3a:af:a8:1b:d5:92:40:d5:98:0b:9e:10:dc:02:
03:5b:43:1c:69:18:38:a7:93:a3:86:39:0a:e6:39:
df:31:0d:5e:3f:9e:58:63:56:51:9e:4a:c4:33:ee:
b5:cb:89:d7:6a:ab:56:ed:ad:92:3e:2c:f6:c8:5b:
9d:ff:26:e9:bf:a7:dc:6a:37:4d:4d:e6:16:a4:45:
50:3b:f3:97:b9:02:04:65:93:8e:df:f3:d3:20:e3:
ef:f2:6b:2f:80:9f:78:ef:53:c0:f4:53:58:f1:61:
98:86:b4:d4:e7:48:f9:64:58:33:ec:35:a9:bf:fb:
d4:80:4a:21:2c:76:ab:76:b4:e7:4c:e2:4e:89:14:
c3:8e:58:fa:d5:25:a8:ea:39:c8:f4:66:c3:ac:4f:
f1:b5:ae:2c:47:7a:0f:c8:92:8f:d4:49:51:d2:72:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1E:A2:3A:17:8F:60:80:E7:D8:0E:F3:06:B0:04:E9:A1:DC:E1:10
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D469/4468EECA9BF511EDBA51D1A3F1222468/uB6iOhePYIDn2A7zBrAE6aHc4RA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328253
sbgp-ipAddrBlock: critical
IPv4:
102.68.176.0/22
102.222.204.0/22
196.251.156.0/22
IPv6:
2c0f:4cc0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:a4:32:46:a9:22:46:8c:c7:ce:e6:b4:eb:e5:ca:ea:bf:06:
db:f5:a2:f3:b2:26:f2:f1:01:6b:bf:d4:20:90:b6:d5:bf:f3:
39:72:fc:d6:26:65:8b:0f:ef:65:77:fb:98:cf:4f:71:b8:ab:
f6:d4:ef:f3:cb:3f:44:e4:2c:72:19:6e:d2:ad:90:fd:40:64:
4b:6b:1f:1c:ac:57:60:c7:25:37:b7:22:5d:24:e0:4b:80:bb:
88:72:52:82:21:50:4c:6b:c7:ca:78:82:e5:d1:ad:e5:e1:c8:
b9:23:ea:9e:fa:6b:85:a0:9e:25:21:69:2e:c1:77:9e:34:f3:
1e:b7:2a:9a:94:ad:db:d6:4e:c5:49:20:b7:a0:02:d5:ba:51:
92:52:73:d5:f1:34:5f:be:f0:89:37:20:8c:3c:47:0f:0c:e1:
80:ef:97:77:7f:1e:18:92:43:3a:40:ab:4b:be:b1:35:f3:72:
64:0b:94:50:a4:93:f6:54:20:a8:6a:b4:f5:28:84:78:4a:5e:
bd:5c:37:a7:68:48:c9:57:d5:4e:83:21:15:e7:76:83:3e:fd:
7a:9f:97:08:74:74:6a:06:3d:20:0a:0a:44:f5:74:cf:46:88:
77:85:a7:3f:84:d7:69:b5:7c:0a:30:1d:37:fa:91:00:b8:76:
bb:3c:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:07:39 2026 by rpki-client