This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
File: k4vok1GoGkLfhHvzkxNy0JgwREY.cer (raw, json)
Hash identifier: MYwzdwvJTSS/O6QMTQ4C8vZnCGEmIsuOvoaWDjgP5Kc=
Subject key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3B7B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:48:33 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 327987
IP: 41.78.244.0/22
IP: 196.250.192.0/21
IP: 2c0f:6800::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Jan 2026 00:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15227 (0x3b7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:48:33 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36F3412AF, serialNumber=938BE89351A81A42DF847BF3931372D098304446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:80:2a:9f:74:2e:b8:72:8d:1e:76:ce:12:
b3:66:31:c1:16:42:90:26:85:69:bf:8e:b5:9b:b1:
79:34:dd:42:6a:00:52:f0:84:85:a5:e8:63:a2:bb:
bb:58:fa:4b:04:bc:c1:1c:e2:aa:bf:c3:0e:82:d1:
cd:e3:49:b1:7b:8d:e9:ab:90:92:df:3f:1e:dd:7a:
68:bd:63:65:99:0d:4f:f5:ce:e5:ee:96:25:04:49:
61:06:ad:60:c2:77:62:e5:38:58:05:cc:22:3a:fd:
1e:8d:a4:cd:5d:78:08:58:ca:86:19:42:6a:96:a7:
45:ef:89:4b:08:8f:c9:37:d8:81:ea:50:b6:d6:48:
d7:6b:ad:69:4b:49:2d:7c:7d:5c:27:46:57:cc:0a:
fa:34:8b:70:92:bd:b4:5f:8a:19:fd:82:26:94:71:
68:38:63:b4:a8:5c:b2:55:e7:69:74:e4:6f:88:25:
35:12:36:9c:80:4c:cf:4e:d7:71:b0:b5:4a:20:cb:
99:74:db:18:ad:f9:bc:f8:d6:a0:dd:7a:cc:de:4c:
8b:ed:9e:cb:f2:ea:bf:a4:1a:5f:53:b0:65:b4:af:
20:49:1e:37:b2:62:b4:41:e8:c2:0a:c7:d2:70:3b:
9c:63:a0:1d:8e:d3:dc:bd:dd:6f:ef:c0:de:23:0a:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327987
sbgp-ipAddrBlock: critical
IPv4:
41.78.244.0/22
196.250.192.0/21
IPv6:
2c0f:6800::/32
Signature Algorithm: sha256WithRSAEncryption
1d:00:03:76:bf:73:66:5b:dc:db:34:78:a0:f8:89:14:72:9a:
32:4b:84:6b:db:8a:78:29:7a:bd:4c:c8:ba:bf:0a:08:3a:2c:
11:10:58:c9:74:b4:28:f0:88:18:28:a4:6b:a5:a2:f5:e5:d9:
c9:1a:84:62:b5:da:a9:46:87:33:5f:67:29:15:24:88:80:9f:
8d:00:c5:72:ed:81:3c:b5:34:fd:43:86:ec:ce:db:42:8a:8c:
65:60:c6:b8:77:4b:43:54:7f:59:70:be:1a:63:01:43:52:50:
13:82:6a:c9:2b:ec:f6:9d:a9:91:0f:19:4c:4b:06:53:85:e6:
56:6e:d8:e7:ea:8d:e6:1c:48:ae:7c:cf:1e:50:db:14:41:63:
80:4a:17:9b:62:27:40:f7:ae:4e:e5:07:37:ea:cf:01:29:e4:
b1:4f:79:d3:6b:dd:97:de:2b:44:1c:0a:54:f9:bd:ea:df:61:
ca:71:06:45:aa:6e:96:70:18:e8:08:5e:f4:b5:e7:28:7c:1c:
78:30:b0:b0:ca:5f:d4:bd:ad:e0:27:69:10:f1:7e:58:c3:55:
d7:d2:7a:71:6e:ad:fa:da:26:66:41:4e:9f:26:dd:00:8e:44:
f4:06:f9:8d:74:1a:6a:c5:64:11:b7:a6:0c:57:6d:3d:7e:f5:
c5:e7:32:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:56:26 2026 by rpki-client