This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
File: 4CGdWkzYWCxPN-LQ3dcGt369n2w.cer (raw, json)
Hash identifier: nbGgy5CzBGMTaRJR5mz589mIwmC0f3TQ+jxuV4sSECI=
Subject key identifier: E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3A5A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:07:25 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 18922
AS: 27576
IP: 196.43.96.0/19
IP: 2001:42b0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Jan 2026 07:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14938 (0x3a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:07:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36663C2AF, serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:38:9d:34:e6:38:a1:26:f7:4e:dc:f3:2d:94:
0c:e7:a4:cd:58:64:59:17:7b:88:3a:67:9b:88:36:
50:ff:b5:8f:e2:fb:ab:7a:2a:a7:a2:1f:9d:63:c5:
46:0f:74:2f:a3:6f:b9:0a:5f:15:f6:93:3b:ae:9e:
fe:cf:d3:2d:8c:61:17:d0:fa:4a:9f:a7:69:1d:c4:
65:d8:df:cf:1b:97:bf:0b:84:21:f0:6f:a7:9e:55:
8e:26:95:70:32:06:ae:a6:d8:9e:3f:27:bb:52:de:
18:c2:07:5b:69:24:8f:73:d2:80:0f:2d:bf:d5:d1:
37:e0:79:11:f6:b7:36:6d:d1:04:24:e6:c7:20:1d:
b8:a6:07:83:3e:4b:10:ae:b0:ef:98:40:9a:23:c7:
c6:bd:55:99:b0:a8:99:eb:05:24:a2:4d:b4:70:42:
45:e2:e6:ea:6f:26:fc:03:99:cb:c6:ee:8d:af:a2:
81:e3:3e:6f:6e:4b:20:e3:bf:b2:0b:42:21:19:fe:
fe:b0:2a:10:4e:d6:81:67:50:d2:8e:a1:e3:2a:ee:
f0:a1:42:37:41:b2:82:69:2c:d6:6f:e2:fe:dd:c6:
7d:d1:6e:b5:3e:c9:d8:bf:fa:e4:0e:7b:a2:93:dc:
d6:f4:9f:f1:98:8e:e7:9b:02:a4:27:0f:84:f1:f8:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18922
27576
sbgp-ipAddrBlock: critical
IPv4:
196.43.96.0/19
IPv6:
2001:42b0::/32
Signature Algorithm: sha256WithRSAEncryption
16:c6:dc:fe:9e:ba:96:46:ed:c8:e6:ee:61:0c:60:ac:fa:7b:
48:65:01:04:d9:4c:c2:73:42:53:00:60:06:5d:eb:57:35:50:
1b:1c:b9:8a:75:26:a3:32:dc:77:23:c3:b4:cf:59:8e:66:90:
4b:8f:80:eb:69:a2:ea:96:e7:6f:74:c5:9a:ed:c7:00:36:e6:
e4:3a:3b:fe:77:01:29:47:02:7b:15:4c:1f:17:a0:0c:06:39:
a5:6c:a0:e6:6e:e6:db:09:a9:d5:48:c3:fd:17:7e:c9:7f:e7:
1b:7c:c0:3e:d6:6e:66:77:df:64:7c:ba:96:ff:ee:bb:18:93:
fb:c0:cb:61:96:a5:c6:6f:85:b0:00:56:0b:ba:2d:7f:54:0b:
af:79:c6:33:5a:e2:00:b6:41:81:98:30:ee:c8:ad:c8:26:9e:
46:1f:40:0d:c4:aa:3e:fd:18:49:13:9b:5b:5d:4c:21:a4:6a:
9c:01:cf:cb:72:89:30:60:4d:d5:7f:68:e4:73:72:5c:c3:04:
ce:c0:08:2c:09:73:44:8b:1e:0d:bf:f3:ac:da:96:ca:e4:95:
7e:a4:b1:43:12:27:87:21:59:54:bd:a7:2e:a8:10:b3:ea:b0:
df:78:c2:f5:ee:10:a8:19:11:dd:35:90:70:78:b9:33:04:07:
71:ca:5f:8f
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgICOlowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMjA3MjVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjY2M0MyQUYxMTAvBgNVBAUTKEUwMjE5RDVBNENEODU4MkM0RjM3RTJE
MERERDcwNkI3N0VCRDlGNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZOJ005jihJvdO3PMtlAznpM1YZFkXe4g6Z5uINlD/tY/i+6t6KqeiH51jxUYP
dC+jb7kKXxX2kzuunv7P0y2MYRfQ+kqfp2kdxGXY388bl78LhCHwb6eeVY4mlXAy
Bq6m2J4/J7tS3hjCB1tpJI9z0oAPLb/V0TfgeRH2tzZt0QQk5scgHbimB4M+SxCu
sO+YQJojx8a9VZmwqJnrBSSiTbRwQkXi5upvJvwDmcvG7o2vooHjPm9uSyDjv7IL
QiEZ/v6wKhBO1oFnUNKOoeMq7vChQjdBsoJpLNZv4v7dxn3RbrU+ydi/+uQOe6KT
3Nb0n/GYjuebAqQnD4Tx+N+5AgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQU4CGdWkzY
WCxPN+LQ3dcGt369n2wwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2NjNDMi9CMzkwRTlFOEM3ODMx
MUVDQjE5ODI4OTRGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjYzQzIvQjM5MEU5RThDNzgzMTFFQ0IxOTgyODk0RjEyMjI0NjgvNENHZFdr
ellXQ3hQTi1MUTNkY0d0MzY5bjJ3Lm1mdDAdBggrBgEFBQcBCAEB/wQOMAygCjAI
AgJJ6gICa7gwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAXEK2AwDQQCAAIw
BwMFACABQrAwDQYJKoZIhvcNAQELBQADggEBABbG3P6eupZG7cjm7mEMYKz6e0hl
AQTZTMJzQlMAYAZd61c1UBscuYp1JqMy3Hcjw7TPWY5mkEuPgOtpouqW5290xZrt
xwA25uQ6O/53ASlHAnsVTB8XoAwGOaVsoOZu5tsJqdVIw/0Xfsl/5xt8wD7WbmZ3
32R8upb/7rsYk/vAy2GWpcZvhbAAVgu6LX9UC695xjNa4gC2QYGYMO7IrcgmnkYf
QA3Eqj79GEkTm1tdTCGkapwBz8tyiTBgTdV/aORzclzDBM7ACCwJc0SLHg2/86za
lsrklX6ksUMSJ4chWVS9py6oELPqsN94wvXuEKgZEd01kHB4uTMEB3HKX48=
-----END CERTIFICATE-----
Generated at Tue Jan 13 22:08:09 2026 by rpki-client