This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
File: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer (raw, json)
Hash identifier: aaYmSkBJ48CqA6Ct4jMHBJ3Dnh8BKSR8tD7aq68KwUQ=
Subject key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3957
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:27:27 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328799
IP: 154.70.200.0/21
IP: 2c0f:5400::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Feb 2026 13:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14679 (0x3957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 01:27:27 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:43:a3:46:c2:07:b5:a2:37:68:9a:ff:e6:
23:fc:af:97:5e:6d:91:28:7c:58:d1:c8:77:35:ac:
ef:cf:54:bf:c1:89:66:ec:3c:d6:92:df:4a:90:a3:
7f:96:e8:33:55:de:15:8e:d0:47:b2:e9:85:53:4b:
35:8a:8a:66:19:f6:af:14:7e:17:8d:57:47:61:27:
ee:30:d0:38:f4:72:7b:8d:0c:e1:02:95:42:eb:78:
52:f8:09:0c:ec:a9:cc:2f:d8:71:4c:25:03:14:bf:
c8:e7:80:17:87:10:60:81:74:44:f1:55:cb:8e:9d:
69:40:49:65:c7:0a:e4:cb:4c:1e:1f:1e:c8:8a:68:
bd:7d:88:26:4a:7e:bd:3e:64:4d:14:62:f2:1d:1c:
3f:90:7f:3f:ef:02:28:9f:be:44:e4:27:21:c5:80:
d9:55:e4:ed:22:2c:07:af:c1:7e:66:63:95:4f:c5:
85:c0:b8:2e:4a:75:7f:a0:d6:1c:d0:4c:f2:8f:02:
e9:f4:78:23:82:3c:1f:d8:4a:33:d9:15:5b:a5:a1:
c1:b7:72:86:c0:12:60:6b:ca:15:27:cb:c4:55:2a:
35:4d:36:3d:0e:d6:4f:49:3b:a8:e9:91:1f:3d:6e:
d3:5a:c2:fd:9f:77:18:b7:89:56:78:7c:cb:5e:d4:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328799
sbgp-ipAddrBlock: critical
IPv4:
154.70.200.0/21
IPv6:
2c0f:5400::/32
Signature Algorithm: sha256WithRSAEncryption
8b:c0:39:d8:15:36:fd:cd:bb:98:02:62:1c:4d:2c:83:d6:cc:
83:68:61:29:01:ab:cf:7d:7d:26:c0:83:f9:99:be:d5:24:9d:
ef:d2:70:14:e0:37:d4:00:2f:57:58:ab:a7:18:44:ac:32:91:
5f:55:02:ec:df:c3:8c:a6:90:58:61:d9:67:86:4d:ad:db:cf:
ae:7b:d8:3c:fc:0b:e8:62:b9:ab:85:69:95:67:b0:ef:c4:be:
35:05:5f:7f:14:31:e1:5d:4c:73:a7:6f:7c:4a:6c:d2:72:16:
83:ad:e0:df:1f:2c:42:bd:2a:f5:a4:e9:17:70:81:81:50:b9:
63:e4:96:1b:70:97:49:21:4d:24:94:3b:bf:44:ce:31:93:52:
39:33:c3:23:8a:3d:aa:49:be:36:6f:5c:87:86:06:12:f2:6b:
1e:17:5d:d4:bf:69:f2:58:e9:70:eb:a5:39:21:51:df:ba:96:
4e:57:3f:d0:15:79:db:f0:d9:c3:e4:52:f1:06:63:8b:b5:8f:
19:5f:54:bc:fd:b7:00:b2:68:c1:72:43:50:dc:02:ea:24:00:
eb:8f:75:d3:5d:f0:91:c0:b9:b9:e7:7f:b0:25:4d:d0:b4:20:
04:19:f8:1b:d6:b8:1b:74:22:54:65:20:03:2d:a0:68:6a:da:
77:c9:55:c7
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICOVcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMTI3MjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjQ5M0UyQUYxMTAvBgNVBAUTKEE4QTFBRjAyRjk2QzFCQTkyRDkzQTUy
MkNBQkU5RUQ4RTUyOTUxNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKAkOjRsIHtaI3aJr/5iP8r5debZEofFjRyHc1rO/PVL/BiWbsPNaS30qQo3+W
6DNV3hWO0Eey6YVTSzWKimYZ9q8UfheNV0dhJ+4w0Dj0cnuNDOEClULreFL4CQzs
qcwv2HFMJQMUv8jngBeHEGCBdETxVcuOnWlASWXHCuTLTB4fHsiKaL19iCZKfr0+
ZE0UYvIdHD+Qfz/vAiifvkTkJyHFgNlV5O0iLAevwX5mY5VPxYXAuC5KdX+g1hzQ
TPKPAun0eCOCPB/YSjPZFVulocG3cobAEmBryhUny8RVKjVNNj0O1k9JO6jpkR89
btNawv2fdxi3iVZ4fMte1GshAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUqKGvAvls
G6ktk6Uiyr6e2OUpUVMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0OTNFMi9DRDBEQ0MxMDZGREMx
MUVCOUZGNzdCNThGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDkzRTIvQ0QwRENDMTA2RkRDMTFFQjlGRjc3QjU4RjhBRUEyMjgvcUtHdkF2
bHNHNmt0azZVaXlyNmUyT1VwVVZNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBF8wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOaRsgwDQQCAAIwBwMF
ACwPVAAwDQYJKoZIhvcNAQELBQADggEBAIvAOdgVNv3Nu5gCYhxNLIPWzINoYSkB
q899fSbAg/mZvtUkne/ScBTgN9QAL1dYq6cYRKwykV9VAuzfw4ymkFhh2WeGTa3b
z6572Dz8C+hiuauFaZVnsO/EvjUFX38UMeFdTHOnb3xKbNJyFoOt4N8fLEK9KvWk
6RdwgYFQuWPklhtwl0khTSSUO79EzjGTUjkzwyOKPapJvjZvXIeGBhLyax4XXdS/
afJY6XDrpTkhUd+6lk5XP9AVedvw2cPkUvEGY4u1jxlfVLz9twCyaMFyQ1DcAuok
AOuPddNd8JHAubnnf7AlTdC0IAQZ+BvWuBt0IlRlIAMtoGhq2nfJVcc=
-----END CERTIFICATE-----
Generated at Fri Feb 6 22:46:25 2026 by rpki-client