This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
File:                     -kNarmNKJJQBjFzfiFcJr1vONro.cer (raw, json)
Hash identifier:          ylGkIhAU4Xf1fcnsLtSZTxG2uMhi2GHKvPFlBopNlhs=
Subject key identifier:   FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3C09
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:09:22 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327981
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15369 (0x3c09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:09:22 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:6f:26:dc:a9:8b:e4:cb:a0:6e:4f:2c:b8:
                    97:60:a4:10:d2:44:f8:ab:37:58:be:00:aa:95:f9:
                    c1:a8:4c:17:bd:e4:76:74:4e:65:1c:45:46:4d:8d:
                    a6:46:54:13:c9:75:cd:91:40:c5:19:73:e5:fd:f5:
                    58:fb:f3:22:10:b3:b4:81:24:d7:98:52:2d:9a:25:
                    0f:63:0e:2e:5d:9c:fd:eb:fd:01:28:76:f5:38:26:
                    e3:f1:92:a5:c3:57:4c:6d:78:0a:77:18:ed:55:5d:
                    ee:15:d8:89:e0:7d:37:45:d3:2e:d4:16:4f:fe:72:
                    37:6a:b8:9c:fe:cb:6e:f0:ef:23:8b:1d:c1:62:10:
                    13:5d:38:d9:c6:53:72:d9:b6:98:f8:55:cf:0c:71:
                    15:38:a2:32:e1:82:97:f4:ab:2d:bb:ab:51:ce:52:
                    48:e9:d9:0d:7f:2a:eb:46:51:56:7a:d3:5f:70:dd:
                    a7:53:19:98:1f:18:d9:32:9c:30:80:09:87:ef:89:
                    ab:b8:44:a9:d4:19:26:59:09:1c:64:6c:cd:ae:25:
                    f0:de:3d:ee:99:ba:8c:d1:55:77:e8:6b:17:a4:04:
                    4c:ee:0a:64:91:70:18:7a:6b:70:dd:14:a1:0e:5e:
                    55:23:3a:8a:78:15:e4:bc:26:2f:31:57:e4:64:ba:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327981

    Signature Algorithm: sha256WithRSAEncryption
         14:eb:7b:a7:9d:3f:91:fe:91:0a:a9:d7:81:37:20:5d:0d:89:
         ca:d9:36:d9:a6:8e:65:7a:d4:cd:d1:99:28:63:eb:b7:68:76:
         d5:67:c2:d2:51:72:20:de:73:2a:48:6d:d5:eb:97:e5:24:ae:
         01:8b:46:54:f1:84:4d:6d:0a:5c:02:2b:60:58:a0:3a:75:0f:
         9e:2f:2b:dd:00:6f:53:b4:5a:e1:8c:ea:f8:37:25:15:e2:4f:
         84:34:ef:51:9d:6c:4f:dd:1f:d7:ff:0f:ff:5c:8c:c0:39:f2:
         7f:41:70:86:bf:cb:e5:ca:78:8d:93:c3:94:6e:cf:53:18:31:
         4e:49:1a:36:fb:5c:22:2e:3d:f4:c5:be:1c:e6:b0:e2:2a:b1:
         d9:97:e5:27:29:82:da:d0:23:14:67:1e:ea:06:1a:24:a9:ce:
         b1:b4:39:35:77:4b:a8:6e:a2:21:13:95:b0:77:da:e4:b3:e3:
         49:e7:dd:fb:38:fc:3c:45:86:a4:10:71:51:d7:36:7c:27:e1:
         88:1a:e5:50:4b:a6:5a:5c:7a:d0:2d:c5:07:93:c1:c9:3f:10:
         0b:ae:53:72:32:45:7f:46:64:20:7e:eb:d0:76:b6:4e:0b:95:
         6e:64:0f:64:c4:7c:b7:4d:9a:32:95:42:48:06:78:d5:66:c0:
         e1:e2:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----