This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
File: YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer (raw, json)
Hash identifier: /8Zto+bCXwTw0hnO1VLTUW3IF0mbffH1SLjLXvY+h5M=
Subject key identifier: 62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3D6E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:03:22 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328861
IP: 102.219.220.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 Jan 2026 07:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15726 (0x3d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 04:03:22 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36FAF9BAF, serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:26:65:4f:c2:36:30:b9:4a:9f:9e:11:76:
45:43:e5:51:db:bb:6e:8b:2b:dc:43:cb:0f:f8:86:
d3:3c:33:82:12:f7:45:4c:fa:bb:a0:22:0d:6e:d2:
f8:ee:3a:5c:c2:62:5c:ce:05:b8:0f:92:b8:06:de:
98:d8:6d:82:08:5b:52:1d:ca:1e:b6:b3:68:91:db:
a3:c5:79:39:6d:e3:58:24:98:c0:de:5d:a4:ac:82:
d0:e0:4f:81:3c:c0:9f:43:81:b4:3b:ab:53:8d:4d:
3b:93:03:7b:16:5e:51:12:7c:fa:63:d1:be:95:0d:
31:cd:88:da:26:a7:12:6d:4f:92:cf:f3:8b:a7:11:
69:15:56:25:72:0f:43:eb:cd:4e:ed:f8:23:e9:2a:
d2:aa:ec:53:23:14:c2:e4:bf:0d:54:2c:ca:f6:f5:
35:30:76:80:11:c6:2a:6e:32:c6:6b:47:8a:4a:1c:
f2:e8:31:9a:ce:95:ce:52:5c:9e:84:f3:5a:a1:b4:
d2:d5:aa:8e:91:ef:c1:f3:0d:74:59:96:40:10:c7:
fe:5a:5d:1a:c3:7f:2d:f2:48:78:9f:d2:9a:1e:c2:
12:2f:96:de:4c:92:bc:c9:a0:81:42:ac:e0:f6:2e:
60:01:fd:68:02:d1:e7:71:ad:74:b7:a4:d5:88:4b:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328861
sbgp-ipAddrBlock: critical
IPv4:
102.219.220.0/22
Signature Algorithm: sha256WithRSAEncryption
31:d5:95:20:d5:ef:65:96:aa:5f:f4:06:de:c2:ab:4b:8a:29:
9f:f4:e3:d6:e1:ef:3d:a0:31:3d:bb:71:44:a2:e0:7a:5c:bd:
51:29:99:84:b6:72:d6:eb:4e:60:1c:69:27:0b:ac:a0:d9:6b:
ec:a9:71:99:7f:1c:0a:5c:7e:12:05:58:b8:0f:d2:d7:07:d3:
31:1b:e4:af:23:8f:8c:8d:b9:cb:2c:5b:f9:8a:e6:b2:44:29:
a2:eb:8a:9f:3c:21:d4:98:f5:d1:8f:a8:b6:66:7e:51:1a:8a:
8b:b9:f0:b3:04:59:6c:21:38:d9:80:b3:ad:02:86:e1:f1:29:
44:6b:70:78:23:6f:76:40:24:31:13:98:3e:58:52:18:65:68:
11:91:b8:77:f3:3f:aa:8c:a5:08:20:e1:c2:05:61:e7:84:98:
82:d3:51:76:f1:0a:44:8e:b4:2d:6a:c6:3c:8b:7d:02:7f:1f:
ef:b1:c4:7c:bc:e9:45:4d:5f:26:98:51:13:dc:5c:3b:4a:b2:
a0:3b:8a:ba:bf:47:f5:99:ea:9e:d8:c0:12:b3:2a:5d:d1:66:
d3:50:a0:52:52:0b:6c:1a:c8:2b:a1:37:75:c5:8e:c4:f9:7d:
0b:f3:72:b7:40:19:5e:3b:1c:8d:7f:99:14:57:be:ea:6e:b7:
c5:1b:af:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:49:29 2026 by rpki-client