This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
File: e5q4nC36bjo-yHXuV_4sDZpxQcA.cer (raw, json)
Hash identifier: OPbyM3H7DX+UuGaHhxyCnvm9pXgp3RkqE+cYPErW+H4=
Subject key identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 36E7
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 18 Nov 2025 10:45:54 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36946
AS: 329666
IP: 196.49.0.0/24
IP: 196.223.4.0/24
IP: 2001:43f8:940::/47
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14055 (0x36e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Nov 18 10:45:54 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E6854AF, serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:92:e8:72:5b:2b:43:cf:ad:10:7d:de:e6:
c8:33:c3:b0:be:3e:1c:a6:15:95:22:bd:a8:e0:18:
dc:ce:16:16:9f:b5:d0:89:89:cd:03:56:22:4c:83:
2a:31:ba:86:9b:f9:10:75:93:31:b1:43:42:aa:49:
9e:44:a1:7c:68:d8:32:5f:25:e0:3f:b3:cb:57:aa:
06:cc:b7:25:ea:ed:8f:64:35:72:68:b4:f5:55:c6:
b9:62:75:a5:b5:c7:36:a7:4a:0e:ee:d3:19:05:3c:
d1:59:5c:01:2b:02:00:61:86:58:09:7b:48:24:a0:
f4:99:33:f0:09:31:a0:81:95:5f:9c:a4:80:16:a6:
d2:ed:86:0d:6c:62:38:98:b2:3f:52:64:28:15:8c:
f6:79:1b:30:14:cb:c3:9a:1e:6f:73:86:3d:8c:7b:
28:9d:c1:18:7a:95:23:38:ba:4f:aa:a1:a4:d2:a6:
a4:be:96:68:03:93:e9:c2:c6:8f:bb:4c:5c:b6:4a:
44:6e:64:52:77:91:d6:03:7a:0f:63:c2:cc:15:83:
b0:6a:0e:b1:04:18:69:59:b8:e7:27:67:77:ad:92:
72:d1:1d:a6:f6:89:c4:33:ca:2e:83:5a:b4:39:62:
7c:1f:27:97:f6:23:a2:f3:96:5b:08:b7:3f:58:cf:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36946
329666
sbgp-ipAddrBlock: critical
IPv4:
196.49.0.0/24
196.223.4.0/24
IPv6:
2001:43f8:940::/47
Signature Algorithm: sha256WithRSAEncryption
1b:64:3d:16:08:18:90:63:ad:c5:bc:78:02:dc:f0:06:72:2a:
b9:76:59:1b:1d:d9:29:7c:a9:2a:89:b8:ce:cd:d7:98:33:8b:
75:bd:51:a2:08:e5:7f:c8:77:29:44:a0:7c:59:e4:cf:0a:f4:
1c:da:f3:d8:9a:7b:44:98:ce:85:41:58:ce:c4:81:31:ba:5f:
a1:20:03:4e:6a:74:21:12:91:96:3a:32:eb:00:98:42:d7:7d:
2c:f8:86:d1:c0:3f:7a:b1:c9:a9:62:29:4c:d2:8b:be:39:3b:
74:80:9f:77:4d:c5:5c:8c:3f:91:f9:c0:7a:d7:ef:61:53:1c:
c1:3b:2a:cc:35:34:9c:c0:b3:d4:19:1e:3a:f5:eb:0b:6a:dd:
98:a8:b9:09:a9:04:51:25:ec:61:51:7e:22:93:cc:90:b6:fc:
a9:82:7f:a7:95:99:1a:04:17:a3:85:82:24:c4:08:b2:c1:cf:
6e:9a:d2:42:81:3d:df:e4:ff:5e:7b:76:8f:a6:19:8d:71:01:
76:c8:56:4d:b4:f6:67:bf:aa:08:69:0c:12:7c:e2:25:ce:44:
74:50:f4:0b:ac:b1:aa:47:91:fd:df:05:b6:54:04:29:e4:b0:
10:79:a4:51:80:d3:63:5f:d6:d6:95:89:f3:84:af:2f:9e:15:
b5:5d:38:2c
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgICNucwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTExMTgxMDQ1NTRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkU2ODU0QUYxMTAvBgNVBAUTKDdCOUFCODlDMkRGQTZFM0EzRUM4NzVF
RTU3RkUyQzBEOUE3MTQxQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzLJLoclsrQ8+tEH3e5sgzw7C+PhymFZUivajgGNzOFhaftdCJic0DViJMgyox
uoab+RB1kzGxQ0KqSZ5EoXxo2DJfJeA/s8tXqgbMtyXq7Y9kNXJotPVVxrlidaW1
xzanSg7u0xkFPNFZXAErAgBhhlgJe0gkoPSZM/AJMaCBlV+cpIAWptLthg1sYjiY
sj9SZCgVjPZ5GzAUy8OaHm9zhj2MeyidwRh6lSM4uk+qoaTSpqS+lmgDk+nCxo+7
TFy2SkRuZFJ3kdYDeg9jwswVg7BqDrEEGGlZuOcnZ3etknLRHab2icQzyi6DWrQ5
YnwfJ5f2I6LzllsItz9Yz1iNAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQUe5q4nC36
bjo+yHXuV/4sDZpxQcAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFNjg1NC8zODVGQkU5MjIzMEQx
MUVGQTI3QzgxMjc3RERDMjRDMi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTY4NTQvMzg1RkJFOTIyMzBEMTFFRkEyN0M4MTI3N0REQzI0QzIvZTVxNG5D
MzZiam8teUhYdVZfNHNEWnB4UWNBLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMAkFICAwUHwjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMQxAAMEAMTf
BDAPBAIAAjAJAwcBIAFD+AlAMA0GCSqGSIb3DQEBCwUAA4IBAQAbZD0WCBiQY63F
vHgC3PAGciq5dlkbHdkpfKkqibjOzdeYM4t1vVGiCOV/yHcpRKB8WeTPCvQc2vPY
mntEmM6FQVjOxIExul+hIANOanQhEpGWOjLrAJhC130s+IbRwD96scmpYilM0ou+
OTt0gJ93TcVcjD+R+cB61+9hUxzBOyrMNTScwLPUGR469esLat2YqLkJqQRRJexh
UX4ik8yQtvypgn+nlZkaBBejhYIkxAiywc9umtJCgT3f5P9ee3aPphmNcQF2yFZN
tPZnv6oIaQwSfOIlzkR0UPQLrLGqR5H93wW2VAQp5LAQeaRRgNNjX9bWlYnzhK8v
nhW1XTgs
-----END CERTIFICATE-----
Generated at Mon Dec 8 03:03:25 2025 by rpki-client