This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
File: wMDnGZy4QKJJjB47pWdvngwGKGg.cer (raw, json)
Hash identifier: mYviU9BVVQa2L68WHXhM0AOXGubpBluSnoSVEZB59GA=
Subject key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3991
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:36:26 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37114
AS: 37137
IP: 41.79.252.0/22
IP: 102.213.168.0/22
IP: 102.223.76.0/22
IP: 2c0f:7b80::/32
IP: 2c0f:fc80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14737 (0x3991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 01:36:26 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:32:e0:aa:53:d2:82:3f:c6:61:d8:08:52:
15:96:6e:28:d0:96:63:12:cc:b8:89:00:23:24:76:
3f:61:df:ab:be:1c:19:27:cb:60:8d:78:3c:b5:97:
da:1e:2d:09:a2:0e:18:ec:17:ef:6a:ae:0d:ff:8b:
a7:73:73:8b:59:30:dc:ff:78:51:d6:9a:a0:8b:31:
86:96:7f:40:b5:9f:f2:b7:14:dc:dd:ba:c0:15:1b:
cc:17:48:3b:58:e8:a3:52:da:18:e4:5c:e8:fb:11:
56:70:42:54:b2:cb:31:39:ca:bd:06:e3:ef:96:75:
02:c0:3b:48:78:96:90:1f:77:cd:b7:b7:8b:1c:fd:
91:55:10:0b:d4:13:84:9d:58:43:92:46:bc:b7:22:
f7:8e:d6:77:d1:29:c8:dd:6d:13:b9:ef:90:8b:ca:
23:c5:4a:60:91:61:cd:68:d4:7e:4a:71:ba:44:65:
c1:37:7c:1b:28:64:43:42:f3:cd:76:08:9b:0a:1c:
e4:d4:8d:d1:b4:b6:56:de:e3:bf:61:7d:89:00:27:
b7:8d:b1:d9:86:ac:dd:f5:da:4d:e0:ff:7e:ff:dd:
8c:c0:33:8f:d9:55:e8:e6:50:71:62:12:9c:1c:c7:
85:3e:4f:3c:e9:aa:b3:7c:58:50:b3:61:09:7b:45:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37114
37137
sbgp-ipAddrBlock: critical
IPv4:
41.79.252.0/22
102.213.168.0/22
102.223.76.0/22
IPv6:
2c0f:7b80::/32
2c0f:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
5c:65:7b:a0:2f:8c:ad:e4:94:69:84:a2:59:ac:39:3d:22:e5:
ed:59:24:48:3c:06:5a:1e:14:35:b4:3f:b7:fe:d8:f3:71:93:
69:78:c0:3b:f3:1e:66:67:17:92:22:4b:37:c6:b7:d7:38:56:
5b:87:d2:74:16:13:53:3f:ea:67:83:98:56:ad:32:c8:d2:f5:
fa:5c:2a:7b:c3:ed:7d:4a:0c:e0:34:19:d3:ad:ba:30:5f:86:
a3:18:ba:7b:f6:e4:89:22:2b:75:f0:68:6e:42:38:2b:62:03:
bf:1c:94:d2:97:02:40:63:02:7c:95:c6:0b:83:2a:d8:00:ab:
bd:c8:9f:1f:b4:be:ad:df:79:b9:b7:2f:fa:f7:3e:37:8c:67:
9d:4d:6f:ea:7b:59:7c:a3:d0:08:59:c5:a0:ed:ce:80:d5:69:
e0:8c:16:c1:c0:db:7f:2d:be:9c:8b:ab:1f:3c:7e:62:e7:c9:
e4:e5:4c:a5:4e:cc:cc:df:c7:5e:88:41:dc:8e:b0:b4:f9:7d:
c9:af:8d:43:2e:47:bb:13:4a:24:f3:37:35:c8:ed:fb:63:a3:
b4:d7:ca:25:f3:e3:2f:24:45:57:a9:bb:cf:4e:b1:43:70:81:
64:5c:94:e7:f5:7d:23:2d:5d:17:95:f5:17:ea:27:f9:e0:82:
3b:1d:10:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:49:40 2026 by rpki-client