This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
File: DV2bCS_jnIf5O8uUysP2yR0WyOs.cer (raw, json)
Hash identifier: w2NriR+jiTAS2TKsd92IjY4RMDNu2f4uxsmBYvQczSg=
Subject key identifier: 0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3B0A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:32:07 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37186
AS: 37195
IP: 196.10.141.0/24
IP: 196.46.25.0/24
IP: 196.60.8.0/22
IP: 196.60.70.0/23
IP: 2001:43f8:6d0::/46
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Jan 2026 15:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15114 (0x3b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:32:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F367890AAF, serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:15:05:bb:94:ec:d1:aa:3a:45:69:36:f3:
3f:9a:94:5e:c6:e5:bd:4a:85:0f:c5:b3:d7:f2:5b:
18:16:61:1f:55:0f:68:18:19:65:40:42:1b:f8:0d:
8f:02:36:3a:ec:7b:47:7e:07:cb:be:f6:09:a3:a4:
a0:1b:c5:81:7c:00:9f:9b:96:99:68:0d:0a:7e:79:
99:22:56:ed:86:3c:22:4e:1e:61:9e:2d:e2:8c:fa:
b7:88:b7:39:ae:11:a3:b0:9a:44:e2:e6:ca:e2:9e:
e6:5a:c6:55:fc:b9:65:e5:e2:6d:70:71:b7:b2:63:
6d:9b:c2:fc:23:3d:73:48:6a:d0:cc:bf:df:83:68:
6d:86:1a:04:34:79:b8:f0:de:41:a6:d5:e7:c2:f4:
3d:d4:83:02:59:6e:fe:d0:54:9c:55:fe:b2:c1:02:
4d:2a:61:3d:e5:5c:14:5d:98:09:01:70:d7:5e:c4:
da:1d:06:31:22:59:e3:0c:ae:d2:01:06:e5:1a:93:
9e:a3:b5:1a:8d:8c:bc:3a:60:22:26:52:63:b4:fe:
0a:f5:8e:d7:05:e9:af:39:8a:ff:9b:82:1c:1a:f8:
5b:6c:4c:58:26:cc:5a:e1:3e:d4:fb:82:8e:49:53:
76:4e:ae:4a:bf:63:91:ec:47:8c:42:eb:a7:73:85:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37186
37195
sbgp-ipAddrBlock: critical
IPv4:
196.10.141.0/24
196.46.25.0/24
196.60.8.0/22
196.60.70.0/23
IPv6:
2001:43f8:6d0::/46
Signature Algorithm: sha256WithRSAEncryption
68:cb:1a:0e:78:53:5b:d6:a7:21:74:0c:39:e3:81:17:35:ee:
80:c0:b1:6b:1e:96:bb:d5:c0:fe:70:de:f7:83:99:fd:97:81:
48:54:96:0b:75:fb:47:bd:8e:ad:78:8d:7a:1f:e3:ad:45:06:
7b:25:ee:1b:58:03:29:be:50:84:49:99:84:94:34:a2:e6:59:
bd:e5:77:de:b6:0d:f1:7e:2e:2a:e0:1c:4f:d9:1b:a3:d0:ef:
58:6b:cc:c6:35:6f:84:52:63:a3:6d:57:75:62:e4:c5:50:96:
46:19:2f:47:93:0c:1c:da:65:6a:ff:32:95:8c:c2:01:b6:f2:
13:af:e0:d8:8f:0e:8e:a1:0d:1e:4b:e0:65:06:8a:b1:df:47:
25:8a:91:50:a7:3a:34:05:77:3c:a2:30:16:d3:fa:81:82:bc:
1d:8c:78:7c:9f:2c:39:1a:bf:7d:ae:99:da:8c:ab:af:c8:1b:
c2:d5:68:da:09:00:20:ea:ed:3b:d5:e5:0f:80:01:c5:ce:e9:
fd:d5:6a:00:52:d3:1a:dd:39:cc:d4:c7:f3:a6:e3:69:8b:19:
ea:d2:a5:a4:87:a3:0b:4b:2b:37:ad:ca:b0:f7:48:03:93:6c:
b6:18:4a:ab:ae:21:ee:9f:cb:16:4c:b5:ca:69:c5:4e:f3:d8:
fb:62:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:51:41 2026 by rpki-client