This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
File: wuvMmPPo4ykKmvMvnqjYKsevH8o.cer (raw, json)
Hash identifier: BRlWsAN1k5yF24rgYgDNR461IFZi7XomCDwv/lItZUk=
Subject key identifier: C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3D2A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 03:52:33 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328576
AS: 329318
IP: 102.22.240.0/21
IP: 102.218.156.0/22
IP: 102.219.60.0/22
IP: 102.220.60.0/22
IP: 102.221.200.0/22
IP: 2c0f:eb48::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Feb 2026 13:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15658 (0x3d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:52:33 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36B6125AF, serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:cc:2b:aa:f6:c8:ba:23:03:a9:d9:8d:46:
d3:8e:74:d5:59:a8:49:35:32:e3:07:1a:43:59:7d:
ae:b2:9d:b8:bf:04:32:94:56:16:57:a9:7b:73:dd:
b3:bf:83:23:f9:93:57:4a:29:d6:0f:30:82:7d:dd:
48:01:59:99:93:27:e3:d4:bc:cf:35:62:1e:17:26:
6e:fe:7f:d7:d3:ae:14:af:d1:5f:67:25:49:76:43:
36:ae:77:4c:10:db:9e:a3:97:d0:5a:28:8b:19:08:
bf:a1:ed:02:6d:60:2e:e5:8d:ee:65:f9:6d:62:69:
4e:61:5e:48:19:5a:33:a6:50:72:14:0d:46:8f:a7:
d5:38:8f:28:13:b1:d9:ea:ec:c7:ac:cb:7c:3e:54:
1d:0e:02:3e:4e:45:fa:aa:59:6b:81:30:5b:ae:85:
24:3d:67:73:c8:4f:8b:30:f4:fc:44:4b:ee:00:b6:
ea:28:bb:04:40:15:2d:09:41:76:2d:b2:81:6a:37:
57:e7:f6:40:64:18:9e:cc:a6:ef:ed:99:52:64:87:
9d:d9:86:dc:db:41:0a:2b:23:6c:f5:dd:3c:2c:74:
36:45:f7:7d:68:aa:28:c4:11:28:be:a3:ae:45:a7:
74:e7:3a:29:bc:da:8a:d2:2f:c4:48:f6:9c:27:f8:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328576
329318
sbgp-ipAddrBlock: critical
IPv4:
102.22.240.0/21
102.218.156.0/22
102.219.60.0/22
102.220.60.0/22
102.221.200.0/22
IPv6:
2c0f:eb48::/32
Signature Algorithm: sha256WithRSAEncryption
2a:33:09:18:e8:89:80:f7:86:13:32:f5:0b:1f:ea:cf:0e:65:
a2:50:fc:23:f1:eb:49:89:8e:da:2b:87:53:e1:75:98:d3:4a:
d6:bc:06:68:04:ea:4f:4b:88:43:e0:8a:68:75:19:3f:ce:7a:
77:f5:dd:f4:20:bf:b1:ee:43:bf:81:25:8d:2a:a1:e6:18:9a:
36:fb:e5:24:9c:68:2b:20:52:95:ca:99:43:9c:0c:53:20:66:
26:61:86:fe:ae:47:7e:09:60:a2:43:ab:85:f5:ae:0b:b4:63:
6c:11:5b:2c:42:48:98:51:6f:07:a1:76:97:37:b8:ac:ec:2f:
58:d2:bc:4f:42:52:96:92:95:ca:4d:78:68:d9:59:19:dc:97:
86:b7:81:12:00:53:f1:e9:a1:2f:28:1e:cf:c2:f5:21:4c:c9:
a1:c0:21:ce:e4:e8:7c:4c:d9:6f:43:ec:f3:de:73:0a:ec:f1:
69:34:56:88:9e:14:58:40:d3:48:1a:f4:f4:b0:91:e3:b5:a3:
90:c3:de:f8:10:63:1e:8b:74:45:7b:cc:46:bb:5b:c8:a2:3a:
78:fb:f7:f0:bf:22:8e:7a:66:95:f0:78:97:bf:35:6f:9a:6a:
26:ae:cd:f2:3a:0c:0a:20:37:92:68:d7:bb:d3:6c:69:34:9c:
b2:f9:8d:e8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgICPSowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMzUyMzNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkI2MTI1QUYxMTAvBgNVBAUTKEMyRUJDQzk4RjNFOEUzMjkwQTlBRjMy
RjlFQThEODJBQzdBRjFGQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNNcwrqvbIuiMDqdmNRtOOdNVZqEk1MuMHGkNZfa6ynbi/BDKUVhZXqXtz3bO/
gyP5k1dKKdYPMIJ93UgBWZmTJ+PUvM81Yh4XJm7+f9fTrhSv0V9nJUl2Qzaud0wQ
256jl9BaKIsZCL+h7QJtYC7lje5l+W1iaU5hXkgZWjOmUHIUDUaPp9U4jygTsdnq
7Mesy3w+VB0OAj5ORfqqWWuBMFuuhSQ9Z3PIT4sw9PxES+4AtuoouwRAFS0JQXYt
soFqN1fn9kBkGJ7Mpu/tmVJkh53ZhtzbQQorI2z13TwsdDZF931oqijEESi+o65F
p3TnOim82orSL8RI9pwn+NA7AgMBAAGjggM3MIIDMzAdBgNVHQ4EFgQUwuvMmPPo
4ykKmvMvnqjYKsevH8owHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCNjEyNS82NDRDOTVDNEI0MjEx
MUVCOUU4OTdENUZGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjYxMjUvNjQ0Qzk1QzRCNDIxMTFFQjlFODk3RDVGRjhBRUEyMjgvd3V2TW1Q
UG80eWtLbXZNdm5xallLc2V2SDhvLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMFA4ACAwUGZjBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEA2YW8AMEAmba
nAMEAmbbPAMEAmbcPAMEAmbdyDANBAIAAjAHAwUALA/rSDANBgkqhkiG9w0BAQsF
AAOCAQEAKjMJGOiJgPeGEzL1Cx/qzw5lolD8I/HrSYmO2iuHU+F1mNNK1rwGaATq
T0uIQ+CKaHUZP856d/Xd9CC/se5Dv4EljSqh5hiaNvvlJJxoKyBSlcqZQ5wMUyBm
JmGG/q5HfglgokOrhfWuC7RjbBFbLEJImFFvB6F2lze4rOwvWNK8T0JSlpKVyk14
aNlZGdyXhreBEgBT8emhLygez8L1IUzJocAhzuTofEzZb0Ps895zCuzxaTRWiJ4U
WEDTSBr09LCR47WjkMPe+BBjHot0RXvMRrtbyKI6ePv38L8ijnpmlfB4l781b5pq
Jq7N8joMCiA3kmjXu9NsaTScsvmN6A==
-----END CERTIFICATE-----
Generated at Fri Feb 6 22:50:36 2026 by rpki-client