This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/YZqjZCy0bzvSy4kctn_92t5nNq4.cer
File: YZqjZCy0bzvSy4kctn_92t5nNq4.cer (raw, json)
Hash identifier: RxANiMbkSN1jh3MmxA3GXVavp6wt/mFDuWrJMB6RyeI=
Subject key identifier: 61:9A:A3:64:2C:B4:6F:3B:D2:CB:89:1C:B6:7F:FD:DA:DE:67:36:AE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3DF5
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:24:42 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328547
IP: 102.23.208.0/21
IP: 2c0f:ea90::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Feb 2026 13:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15861 (0x3df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 04:24:42 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36CC7DDAF, serialNumber=619AA3642CB46F3BD2CB891CB67FFDDADE6736AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:55:b3:6f:84:66:14:00:5c:55:82:60:08:
1e:2c:c3:0d:6d:5e:66:ab:db:97:af:2c:41:ae:39:
ec:84:d8:16:13:5d:5a:d2:4f:9f:85:9c:5c:38:66:
3f:89:2a:48:a9:6a:af:d2:30:4e:17:5d:88:90:89:
02:64:56:12:43:ab:8a:80:78:f1:c4:6b:6c:62:5c:
32:7d:f7:8c:25:d8:0c:17:62:2b:e5:82:c2:7c:06:
3c:1b:0f:df:de:1b:17:43:2f:d1:a7:f1:69:de:42:
79:b6:af:9a:eb:3f:1a:5f:e5:7a:33:23:bc:18:c3:
b4:ad:c7:ff:5a:41:c5:88:00:5c:40:6a:c4:32:7f:
4f:b7:12:2d:3c:0c:93:8b:14:0b:fe:e9:54:d1:13:
aa:ce:9c:48:cf:cc:71:fa:9a:8b:bc:58:e7:2b:7c:
d2:2d:43:24:80:32:10:44:ba:a0:bd:5e:21:fd:e8:
40:43:71:46:1a:7a:b8:c3:a1:2e:31:0d:ee:3c:a9:
ae:3e:e9:78:bb:b5:9f:77:85:58:9f:fd:0a:6b:2c:
53:7a:9e:7b:cc:3c:c3:05:70:67:cb:35:a0:f6:68:
0a:5b:9c:e1:f4:ab:a0:02:57:f8:3e:45:9a:0a:ab:
bf:0f:73:bb:1e:c0:26:df:c2:4a:c5:47:4e:00:73:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9A:A3:64:2C:B4:6F:3B:D2:CB:89:1C:B6:7F:FD:DA:DE:67:36:AE
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328547
sbgp-ipAddrBlock: critical
IPv4:
102.23.208.0/21
IPv6:
2c0f:ea90::/32
Signature Algorithm: sha256WithRSAEncryption
1e:a8:83:e2:ed:9a:4f:a0:f4:61:bb:d9:9d:c6:51:2b:96:c2:
a7:74:aa:a2:85:d3:43:6c:ad:44:88:76:67:51:58:c4:99:ea:
fb:c1:86:3e:7d:9d:13:13:2c:b1:c1:c3:43:6c:59:dd:b1:22:
e8:69:ec:4e:c3:65:92:ad:8b:26:e2:30:59:80:e9:17:62:21:
2d:97:13:ad:f8:d3:3c:0a:fc:54:f9:ee:aa:85:fb:96:e3:c0:
03:c2:ac:13:50:46:ec:fd:88:b9:56:a8:eb:17:58:21:ba:42:
e2:17:4c:89:19:5f:ec:28:67:17:fe:da:92:22:25:f4:7a:31:
63:3f:28:86:45:51:a5:02:4c:35:05:f3:77:03:83:50:ca:26:
62:ae:75:e2:7a:68:85:e1:7c:be:45:a2:3e:7c:1d:4d:5f:50:
34:e3:c4:51:69:60:2d:17:3b:14:93:f2:80:4d:0b:04:bd:7a:
bc:62:1f:61:71:b1:22:df:41:a1:d9:84:eb:fd:3a:d9:5b:44:
8d:20:86:0f:20:d7:d7:ff:11:99:50:82:39:3f:f4:69:f8:70:
f0:1a:10:6f:32:2e:c4:3a:8e:7d:cb:cf:ae:2f:8c:37:12:da:
cf:97:ec:ca:89:92:4d:24:e8:e4:fe:ae:a3:c2:1a:62:59:ee:
ef:a1:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:49:20 2026 by rpki-client