This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
File: wI8-3FkViULC3znxQl5uuCFovj4.cer (raw, json)
Hash identifier: NBenJ2/Ta+YG/b/uFmLDyGd5V0Bk9MZzUFcilpf5RWs=
Subject key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3D7D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:05:35 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 327901
IP: 102.141.128.0/18
IP: 102.215.100.0/22
IP: 102.216.196.0/22
IP: 102.217.108.0/22
IP: 102.217.200.0/22
IP: 102.217.224.0/22
IP: 102.218.240.0/22
IP: 102.219.116.0/22
IP: 102.220.148.0/22
IP: 102.221.120.0/22
IP: 102.222.168.0/22
IP: 196.201.232.0/21
IP: 2c0f:f0e8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Feb 2026 13:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15741 (0x3d7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 04:05:35 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36C65C6AF, serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:b8:0b:a2:6e:da:65:f5:6e:65:dd:bd:d0:
3d:f9:cc:c1:4c:6d:e3:99:71:3f:b9:d2:ab:f4:19:
da:cc:60:64:f9:67:bb:82:cd:92:7d:83:6a:ba:b1:
d2:4a:6a:03:61:ae:ef:d6:1c:d8:5e:58:cb:c3:bd:
73:61:82:5a:19:4c:ea:0c:99:13:d8:3a:c6:82:55:
01:77:bf:dc:5a:c3:dd:06:2e:74:b7:85:0b:84:52:
a1:40:81:76:a7:0f:6c:41:56:d6:3c:60:a7:f6:eb:
ff:10:50:4b:fa:4b:a0:e8:ad:7d:b5:3b:21:9a:be:
be:35:c4:40:62:a8:ef:0e:b4:82:27:f9:50:06:55:
b9:80:20:15:d2:c6:c4:48:ae:8a:6e:22:23:be:c5:
47:94:a5:45:3d:df:58:61:45:72:42:ae:ab:d8:24:
73:10:f0:cf:5f:c8:8d:b6:78:76:65:b9:e3:81:bd:
08:e0:f3:db:78:3f:ba:5f:0d:ca:ed:b4:e6:85:45:
da:db:0e:73:f0:01:f1:52:4b:02:50:8c:e7:d0:2d:
be:1f:c4:0e:6c:8e:00:32:09:11:81:ce:ce:07:b9:
9e:c9:09:cd:10:5d:31:bf:df:a0:d6:7c:b8:b1:bd:
f0:42:19:a3:5f:80:5c:97:f4:2f:14:e4:68:48:eb:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327901
sbgp-ipAddrBlock: critical
IPv4:
102.141.128.0/18
102.215.100.0/22
102.216.196.0/22
102.217.108.0/22
102.217.200.0/22
102.217.224.0/22
102.218.240.0/22
102.219.116.0/22
102.220.148.0/22
102.221.120.0/22
102.222.168.0/22
196.201.232.0/21
IPv6:
2c0f:f0e8::/32
Signature Algorithm: sha256WithRSAEncryption
85:af:b5:d2:48:77:06:64:fc:47:fe:cf:18:d9:4a:fb:ed:24:
13:f4:c4:fc:b6:db:1e:29:b8:58:9b:bc:98:13:05:ba:8c:21:
e4:8d:84:97:aa:f3:78:c7:d5:96:a1:67:e3:0d:d5:49:5e:c1:
72:99:f9:00:19:06:12:71:6e:63:af:07:cc:44:1b:9e:6d:6f:
62:19:6b:2b:02:ed:d8:c9:0b:6e:07:af:4d:50:01:b0:1d:6b:
e6:47:94:b1:04:15:d2:cf:43:9e:a6:f3:42:b8:7a:7c:af:14:
70:c2:ac:c2:74:2f:a6:9f:6b:4d:50:42:67:d3:87:04:33:70:
9e:66:60:4d:2a:cd:3f:70:d5:64:a8:9f:81:28:95:50:77:3e:
2e:54:86:4e:93:72:00:d5:4d:7b:3f:41:58:a8:77:1e:37:ba:
b7:b2:3f:31:da:10:b6:59:ef:62:14:59:68:c4:c6:9a:db:bf:
8a:44:1c:b5:82:f5:2d:a6:32:79:7f:93:2e:84:6e:28:70:a5:
23:45:d7:1f:51:f2:78:e9:c2:c5:5c:3d:8e:66:cd:70:6a:d5:
b3:39:7b:2d:73:cf:e3:e4:3e:12:0a:8f:f2:20:07:53:f0:26:
a8:bd:d6:7d:60:67:7e:fc:21:b3:c9:57:48:c8:89:dc:dd:03:
79:ec:7c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:48:59 2026 by rpki-client