This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
File: x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer (raw, json)
Hash identifier: 8+bu1+NqsR57xcB/63Xzj7DTzLivreA4OcuAWXYid/U=
Subject key identifier: C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 38A8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:00:52 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328233
IP: 102.207.221.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Jan 2026 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14504 (0x38a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 01:00:52 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36390A9AF, serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:75:fd:3d:c6:c0:20:96:18:4e:a6:7d:70:
af:69:fe:16:3b:1f:66:90:43:64:7c:38:15:aa:23:
d8:93:c9:d0:80:be:fc:00:8f:25:e5:19:f0:40:f0:
70:cd:5a:a5:22:cf:e5:7f:78:b1:74:43:33:f1:b8:
49:0d:37:93:6d:42:a2:6f:ca:82:00:40:29:aa:b5:
8b:fe:af:28:bf:2a:10:4b:84:e4:12:cb:9a:5e:44:
c6:b3:88:82:d7:e5:d7:bf:6d:e4:a7:c5:fa:a3:a9:
f5:6c:e8:91:3d:f9:dc:c2:9d:cb:d6:2b:cf:09:22:
f6:7a:9a:55:c3:45:6b:f1:ba:bc:2a:41:6c:dd:6d:
9b:14:7d:20:89:fe:e7:c5:d5:55:b4:bf:73:f9:0d:
d9:87:6c:c8:dc:da:2d:a8:34:c4:9e:61:cb:85:b2:
26:4f:ed:9a:49:db:a8:13:97:96:8e:bf:c5:f8:f7:
88:16:d1:ac:b5:2a:47:d7:07:7c:36:0f:5b:92:86:
ac:72:0d:a3:61:e8:e0:d5:08:3c:08:c3:b0:43:c8:
1e:7b:fe:6c:1b:c8:e3:7f:9c:51:fa:3c:ad:28:9d:
e7:16:53:5d:64:4a:8f:d9:ef:f1:e7:18:20:c0:3f:
b0:d7:18:e3:d7:01:3f:72:b4:52:91:d1:14:9d:b5:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328233
sbgp-ipAddrBlock: critical
IPv4:
102.207.221.0/24
Signature Algorithm: sha256WithRSAEncryption
17:71:4e:83:30:52:73:1c:e8:78:ca:6d:62:c9:f5:ae:97:97:
10:55:51:7a:ea:b7:28:bc:06:1a:c0:f6:44:8e:5b:4a:14:1c:
09:c7:8f:38:43:08:39:3f:0d:fa:32:a3:4d:be:bc:68:e5:63:
74:66:cd:cc:65:1a:5c:1c:24:77:15:bf:6c:9c:45:9b:29:bd:
2e:83:bf:73:2f:63:41:8e:80:25:e1:8f:c6:eb:07:db:54:05:
14:f7:0c:eb:45:bf:4e:bc:d0:55:71:0e:3e:48:9c:a4:0e:f0:
13:4e:42:6e:a1:c4:47:94:5c:aa:94:f3:47:1a:55:1d:a8:49:
da:d8:4f:61:fa:17:54:30:14:da:90:6d:a4:bb:48:e2:d7:bf:
20:60:fa:56:44:f6:be:07:bc:f8:6b:c6:57:88:a9:c3:0a:93:
a9:77:31:02:b4:49:5a:5c:55:48:ac:33:28:cc:6d:ff:4f:01:
64:36:9b:aa:cc:38:3a:e7:48:dc:c7:ff:4f:31:82:39:9d:f9:
1f:6c:66:c6:24:43:b0:69:5f:08:fa:8e:ed:af:bf:ea:bf:d0:
93:73:17:08:d8:d0:cd:0f:ce:d2:be:d9:79:a2:54:ae:b0:71:
60:ee:87:5b:0b:d2:82:bb:31:19:b8:bf:f6:ea:8f:e5:2c:e6:
13:d7:41:8e
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICOKgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMTAwNTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjM5MEE5QUYxMTAvBgNVBAUTKEM3NDIzRUQyN0FGQ0MxMEQ1OTgyOUE4
MEIxNzk3MTYyQjY0NkZGREQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9a3X9PcbAIJYYTqZ9cK9p/hY7H2aQQ2R8OBWqI9iTydCAvvwAjyXlGfBA8HDN
WqUiz+V/eLF0QzPxuEkNN5NtQqJvyoIAQCmqtYv+ryi/KhBLhOQSy5peRMaziILX
5de/beSnxfqjqfVs6JE9+dzCncvWK88JIvZ6mlXDRWvxurwqQWzdbZsUfSCJ/ufF
1VW0v3P5DdmHbMjc2i2oNMSeYcuFsiZP7ZpJ26gTl5aOv8X494gW0ay1KkfXB3w2
D1uShqxyDaNh6ODVCDwIw7BDyB57/mwbyON/nFH6PK0onecWU11kSo/Z7/HnGCDA
P7DXGOPXAT9ytFKR0RSdtQVVAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUx0I+0nr8
wQ1ZgpqAsXlxYrZG/90wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzOTBBOS8zMUEzRERBMjg2RTIx
MUVGQkIzRDZDOTY3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzkwQTkvMzFBM0REQTI4NkUyMTFFRkJCM0Q2Qzk2NzYyRTk1MUEveDBJLTBu
cjh3UTFaZ3BxQXNYbHhZclpHXzkwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAikwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmz90wDQYJKoZIhvcN
AQELBQADggEBABdxToMwUnMc6HjKbWLJ9a6XlxBVUXrqtyi8BhrA9kSOW0oUHAnH
jzhDCDk/Dfoyo02+vGjlY3RmzcxlGlwcJHcVv2ycRZspvS6Dv3MvY0GOgCXhj8br
B9tUBRT3DOtFv0680FVxDj5InKQO8BNOQm6hxEeUXKqU80caVR2oSdrYT2H6F1Qw
FNqQbaS7SOLXvyBg+lZE9r4HvPhrxleIqcMKk6l3MQK0SVpcVUisMyjMbf9PAWQ2
m6rMODrnSNzH/08xgjmd+R9sZsYkQ7BpXwj6ju2vv+q/0JNzFwjY0M0PztK+2Xmi
VK6wcWDuh1sL0oK7MRm4v/bqj+Us5hPXQY4=
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:04:00 2026 by rpki-client