This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-g_6yHvTgP7bhzcer63RaQsq2C4.cer
File:                     -g_6yHvTgP7bhzcer63RaQsq2C4.cer (raw, json)
Hash identifier:          HzlNtFTFac2eV0sD/DBPsKLKXUfgv6+9U7737lPET6w=
Subject key identifier:   FA:0F:FA:C8:7B:D3:80:FE:DB:87:37:1E:AF:AD:D1:69:0B:2A:D8:2E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       38EA
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:10:40 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329214
                          IP: 102.212.184.0/22
                          IP: 2001:43fe:9000::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14570 (0x38ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:10:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F363F154AF, serialNumber=FA0FFAC87BD380FEDB87371EAFADD1690B2AD82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:7a:30:4e:cc:16:27:c9:8b:a8:9e:f2:da:
                    4a:8f:12:24:45:6a:19:b2:ad:a3:85:f6:5f:71:7b:
                    b4:d1:44:bf:a8:e5:1e:72:7a:2d:d5:db:6c:5e:a9:
                    ca:0d:f2:e0:9e:c1:50:22:d4:90:04:d3:0b:03:e7:
                    77:7c:14:05:a9:24:d5:d9:65:f4:9f:c8:d1:c4:bd:
                    22:ae:9e:37:23:cc:25:34:36:ba:db:22:ac:57:09:
                    9e:d8:f8:d6:4a:1f:fa:3a:08:02:01:2e:b6:ed:07:
                    68:e4:5b:52:d4:29:ae:a8:40:74:6d:03:ca:67:58:
                    87:59:e0:6e:5a:b1:10:d5:57:f2:e5:17:f1:e6:32:
                    18:b6:cd:2d:32:34:5b:d0:59:26:8c:93:cf:d3:db:
                    9b:3f:14:1e:6e:3e:77:07:d6:72:90:0a:0e:13:ef:
                    1c:9f:f3:15:fc:d5:73:d1:6b:7a:2b:41:a6:b9:6d:
                    4a:72:6c:b0:a9:71:2a:9a:0b:90:8e:a7:97:42:bd:
                    ca:30:3b:2b:ba:69:8e:5b:c4:ad:57:57:5b:c5:58:
                    f6:ce:6f:50:e5:c6:81:df:93:92:c4:7b:6c:d7:1f:
                    39:95:21:77:92:72:a8:ed:8a:81:cf:09:f8:0d:2d:
                    b7:f2:e5:8b:b2:66:a7:7e:5d:7c:b7:56:42:00:1d:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0F:FA:C8:7B:D3:80:FE:DB:87:37:1E:AF:AD:D1:69:0B:2A:D8:2E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329214

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.184.0/22
                IPv6:
                  2001:43fe:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:91:e4:cb:ae:f4:3d:77:f9:52:c7:c8:da:53:20:dc:f0:b2:
         54:75:39:89:6f:97:a2:69:1d:da:f0:6f:98:bd:71:b4:9c:0c:
         96:58:85:74:5e:90:b8:b7:63:9f:06:46:2d:02:36:3c:23:e9:
         55:37:56:d4:dd:b7:11:cc:9a:06:06:18:50:b8:34:ec:a0:1b:
         e2:73:f1:df:54:30:7d:96:fb:8c:1c:54:eb:0e:f9:81:5e:93:
         a0:36:ec:08:c7:e1:97:d0:3d:4d:c9:f5:1c:fe:1c:90:d0:ef:
         71:4e:92:e1:16:df:d9:9e:d8:4f:c7:25:e5:ba:74:65:63:c4:
         da:35:5a:51:b0:74:a6:21:d2:8e:42:bd:f3:3d:05:6c:5a:af:
         85:18:af:ad:e5:20:22:25:7e:62:c4:1b:7d:71:45:05:f3:1b:
         16:c3:fa:41:eb:ab:5d:fd:60:5b:05:47:39:71:f6:4d:7e:fb:
         3b:c9:8e:8c:01:7f:7e:66:12:8a:c4:d8:2d:5d:32:c3:ac:dc:
         3f:91:92:0f:d6:c0:89:d1:14:09:9c:4f:df:9a:0a:80:90:b2:
         ad:e3:98:98:a4:11:21:ef:04:f9:59:13:3a:c3:9d:58:73:b5:
         e6:30:03:7b:5c:eb:90:37:2b:d5:72:6e:94:d9:b5:bc:19:36:
         dc:b6:97:c2
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgICOOowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMTEwNDBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjNGMTU0QUYxMTAvBgNVBAUTKEZBMEZGQUM4N0JEMzgwRkVEQjg3Mzcx
RUFGQUREMTY5MEIyQUQ4MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzeHowTswWJ8mLqJ7y2kqPEiRFahmyraOF9l9xe7TRRL+o5R5yei3V22xeqcoN
8uCewVAi1JAE0wsD53d8FAWpJNXZZfSfyNHEvSKunjcjzCU0NrrbIqxXCZ7Y+NZK
H/o6CAIBLrbtB2jkW1LUKa6oQHRtA8pnWIdZ4G5asRDVV/LlF/HmMhi2zS0yNFvQ
WSaMk8/T25s/FB5uPncH1nKQCg4T7xyf8xX81XPRa3orQaa5bUpybLCpcSqaC5CO
p5dCvcowOyu6aY5bxK1XV1vFWPbOb1DlxoHfk5LEe2zXHzmVIXeScqjtioHPCfgN
Lbfy5YuyZqd+XXy3VkIAHdvFAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQU+g/6yHvT
gP7bhzcer63RaQsq2C4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzRjE1NC81QjY0MDNDQzYzMjAx
MUYwODg0NkZGODNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0YxNTQvNUI2NDAzQ0M2MzIwMTFGMDg4NDZGRjgzREFFNEVDOUMvLWdfNnlI
dlRnUDdiaHpjZXI2M1JhUXNxMkM0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBf4wMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAJm1LgwDwQCAAIwCQMH
ACABQ/6QADANBgkqhkiG9w0BAQsFAAOCAQEAipHky670PXf5UsfI2lMg3PCyVHU5
iW+Xomkd2vBvmL1xtJwMlliFdF6QuLdjnwZGLQI2PCPpVTdW1N23EcyaBgYYULg0
7KAb4nPx31QwfZb7jBxU6w75gV6ToDbsCMfhl9A9Tcn1HP4ckNDvcU6S4Rbf2Z7Y
T8cl5bp0ZWPE2jVaUbB0piHSjkK98z0FbFqvhRivreUgIiV+YsQbfXFFBfMbFsP6
QeurXf1gWwVHOXH2TX77O8mOjAF/fmYSisTYLV0yw6zcP5GSD9bAidEUCZxP35oK
gJCyreOYmKQRIe8E+VkTOsOdWHO15jADe1zrkDcr1XJulNm1vBk23LaXwg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:08:20 2026 by rpki-client