This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UH5i-o7V9Wfi-yR22KsQ2uXOAQk.cer
File: UH5i-o7V9Wfi-yR22KsQ2uXOAQk.cer (raw, json)
Hash identifier: U7lPiJATJgXzVwMfWeMJP55WpVnXCaw7JnlbZBEpPbU=
Subject key identifier: 50:7E:62:FA:8E:D5:F5:67:E2:FB:24:76:D8:AB:10:DA:E5:CE:01:09
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3FB1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362F553/3AD78E68FB6811F09F7DB0D7DAE4EC9C/UH5i-o7V9Wfi-yR22KsQ2uXOAQk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362F553/3AD78E68FB6811F09F7DB0D7DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 27 Jan 2026 10:09:21 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329426
IP: 102.209.236.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Feb 2026 13:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16305 (0x3fb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 27 10:09:21 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F362F553AF, serialNumber=507E62FA8ED5F567E2FB2476D8AB10DAE5CE0109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:ec:92:55:28:66:37:46:1d:34:28:f5:21:
26:b4:4b:99:19:b2:f3:a4:3c:91:29:69:9e:08:cb:
ab:9d:46:b4:99:f8:35:95:ca:40:b3:a1:25:26:52:
85:53:12:87:eb:95:e1:f8:f2:b0:5f:fb:73:2c:db:
0a:a2:e8:bc:09:2e:2a:88:53:36:95:3b:37:ca:f0:
11:31:cd:e9:29:a6:b5:7e:c0:fa:4a:e9:65:8b:c5:
b0:23:64:a0:49:93:b0:49:1a:82:57:ff:84:ff:e6:
77:cc:54:ae:10:2d:38:95:78:7a:76:ed:db:47:e9:
07:cc:e4:63:8b:87:1d:02:d7:80:6f:a5:52:5b:24:
6e:7c:af:c2:9d:79:ee:f6:7c:2e:bc:4d:9d:16:14:
4b:74:15:9a:fd:c1:4e:ca:6d:b3:ab:62:65:47:dc:
7b:f5:bc:05:c0:b8:83:59:62:a3:94:58:be:a2:10:
5d:fc:fa:c5:64:a7:e1:4f:cc:5f:b6:b5:e1:25:12:
55:6b:5b:3d:22:6b:05:ff:1e:fc:42:02:14:77:dc:
d7:af:52:2f:4c:e9:7a:7c:97:e4:70:59:c8:19:2a:
91:f6:99:fd:8a:d6:f6:dd:3e:42:f9:07:a8:8a:27:
d9:79:d6:89:7e:f4:93:65:5a:46:d9:f4:f8:d2:f5:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7E:62:FA:8E:D5:F5:67:E2:FB:24:76:D8:AB:10:DA:E5:CE:01:09
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362F553/3AD78E68FB6811F09F7DB0D7DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362F553/3AD78E68FB6811F09F7DB0D7DAE4EC9C/UH5i-o7V9Wfi-yR22KsQ2uXOAQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329426
sbgp-ipAddrBlock: critical
IPv4:
102.209.236.0/24
Signature Algorithm: sha256WithRSAEncryption
82:22:7e:33:03:46:79:8b:e3:84:ac:61:ac:48:e8:51:b1:f5:
97:a3:e8:40:4b:fd:fa:b8:d4:0f:c1:cc:dc:d1:12:3e:2a:bb:
cd:94:d2:8d:ae:0b:d5:8e:a5:fd:90:93:8c:0c:eb:33:0f:b1:
c5:06:7a:c1:e0:2b:2c:8c:25:08:36:16:37:a7:20:10:2a:f6:
64:a9:c7:57:a8:28:4c:c3:05:11:d0:14:45:28:0e:89:a8:a7:
81:68:cf:84:ef:b7:be:44:3f:18:eb:0a:9b:9b:dc:54:e5:27:
3b:d1:68:ab:87:65:97:f0:fb:25:4c:c5:bb:45:8f:16:0d:31:
4d:f3:c4:78:08:a6:d3:30:9e:30:60:c3:76:86:f1:85:93:73:
cd:9a:b5:b9:0b:b6:52:40:58:d8:ae:98:c7:ab:1b:ee:5c:13:
4c:f7:b1:3d:fa:c7:f0:6a:29:73:39:f4:db:1e:9a:62:f9:98:
e7:1b:f5:f7:55:e2:1d:81:e5:ae:cd:79:9d:ea:4a:f3:b7:82:
f9:52:c0:05:8b:e0:07:2e:dd:f4:b8:33:7c:c7:0c:ed:c6:af:
ad:a1:57:c5:38:7a:82:d9:d0:25:27:d9:51:0a:b2:82:52:86:
4d:e5:cb:05:4a:cd:a2:ad:b0:4d:61:d7:a1:7b:2d:fc:23:5c:
30:78:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:45:36 2026 by rpki-client