This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer
File: m1ZovBMhETHfDtPunCXTEUxUspM.cer (raw, json)
Hash identifier: 14RBC+UwTlhS+hq640VDjU/jlGutfjUWlwDpXcttIF4=
Subject key identifier: 9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3CBC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 03:35:17 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328170
IP: 102.22.80.0/22
IP: 102.67.136.0/21
IP: 102.211.28.0/22
IP: 102.221.36.0/22
IP: 2c0f:ed68::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Feb 2026 13:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15548 (0x3cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:35:17 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36A42DFAF, serialNumber=9B5668BC13211131DF0ED3EE9C25D3114C54B293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:96:2f:d4:8b:7b:c7:9d:47:b9:d4:c4:1a:
fc:63:d7:47:2e:e4:bb:ab:03:12:a3:ea:76:e4:2c:
08:d0:d4:69:64:f4:a5:71:26:24:d6:6f:2d:ff:2e:
53:d9:2b:ec:1d:f2:75:3b:6a:74:22:2a:4c:bf:a3:
3c:3c:7d:7e:13:28:47:32:aa:dc:34:a7:6d:70:60:
9b:66:fd:39:d8:a7:e8:50:dc:27:3d:99:8d:df:18:
b5:a3:0e:e1:09:12:7a:bd:9f:61:b2:82:8c:8c:3d:
1d:8e:c9:de:17:3a:ac:41:98:af:d3:f3:2b:5d:0e:
87:cc:3b:b8:11:84:46:cd:b5:57:a5:c9:cc:17:2e:
5b:d0:0b:26:18:d3:25:ba:6c:b8:71:a2:d4:60:a9:
db:fc:b9:eb:71:fd:d4:d7:6a:c8:d8:b0:56:8c:0e:
5f:62:ad:6c:22:6a:f8:2a:2d:e2:a5:01:21:68:f1:
8e:99:d1:7b:93:cd:a9:b6:f0:8a:d4:bf:9f:41:e3:
20:7d:4e:7c:45:ad:cf:88:dd:f9:13:e0:88:81:f1:
44:1e:56:3f:20:d0:00:29:3b:82:ed:84:f4:a7:16:
6e:43:97:40:4b:54:78:1b:b2:40:ed:82:32:ed:83:
ef:29:df:33:9b:da:29:ba:f7:d4:89:a4:88:32:0f:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328170
sbgp-ipAddrBlock: critical
IPv4:
102.22.80.0/22
102.67.136.0/21
102.211.28.0/22
102.221.36.0/22
IPv6:
2c0f:ed68::/32
Signature Algorithm: sha256WithRSAEncryption
74:5b:9b:30:a5:70:93:2d:b7:6a:1f:38:d6:84:b6:c5:56:0d:
c4:75:46:2b:b9:5d:c6:c0:d2:5b:44:81:b9:f6:cc:17:61:95:
93:a6:cf:71:00:eb:cd:dc:70:01:71:d2:db:6d:05:35:73:b2:
d7:d2:b3:fe:84:05:92:59:7c:e9:3f:1e:44:b3:79:bd:7d:37:
0e:c6:87:e2:e3:a1:a9:70:7a:78:9a:48:b7:0d:02:36:17:48:
20:b6:a5:bf:fa:f8:da:01:9c:e4:e8:85:d0:81:f7:3c:3e:18:
fe:47:20:70:8a:5e:ea:62:92:b6:7d:2d:78:35:d8:59:30:67:
f2:4d:a9:4a:d5:0c:91:c2:27:19:e1:d1:f1:16:eb:5e:87:0b:
b7:55:7d:f0:aa:d8:59:bd:b0:01:1e:7b:77:ff:2b:c2:42:cc:
74:8d:f1:a0:16:b2:7a:26:de:0f:bb:8a:eb:be:cb:1e:db:70:
09:31:91:ab:c1:e3:77:e2:18:cf:a4:a5:c6:24:07:24:11:7e:
e9:ce:83:25:d7:ae:04:1e:2c:c6:df:c8:d6:0e:93:eb:5f:34:
46:3f:3c:3c:53:f8:de:0f:fd:56:07:f4:7b:b1:e8:50:d4:5e:
bb:29:d2:50:ec:c1:16:44:2c:f8:a1:e3:55:43:d0:fb:54:1c:
ac:45:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:49:20 2026 by rpki-client