This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
File:                     -wB7KUv_2n8YvxAiZXr2TarOGL8.cer (raw, json)
Hash identifier:          SwV3XFDt7Hd9u4q9u/pF3/HDwvFHUVxabvtWa/IVoqY=
Subject key identifier:   FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3802
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:30:41 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329564
                          IP: 102.205.146.0/23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14338 (0x3802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:30:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F362438EAF, serialNumber=FB007B294BFFDA7F18BF1022657AF64DAACE18BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ed:8f:31:be:54:c1:e2:08:1d:30:d7:fb:4b:
                    a5:47:b0:77:be:a9:dd:7e:15:88:5c:b5:8b:d6:dc:
                    bf:e8:c7:2c:5e:b1:49:9b:ee:3a:e6:32:f5:34:16:
                    b2:cf:ca:de:6a:b5:84:5d:12:08:12:f0:32:c2:8e:
                    b4:1f:ae:da:dc:08:bb:97:3e:39:75:d7:97:21:1a:
                    b8:a9:53:8c:16:5d:49:83:86:18:09:ae:d0:23:29:
                    d9:c5:4b:27:d4:95:19:36:f4:dc:16:e3:ca:02:ca:
                    fb:7f:ca:5e:b0:fe:58:e2:b7:af:eb:4b:24:f8:45:
                    c8:51:b6:c9:2a:9e:9c:6b:da:2a:2b:cf:f3:64:93:
                    c7:c0:0f:f1:1c:15:18:84:c8:67:15:66:24:8d:bc:
                    f1:96:b4:4a:92:b6:c2:28:8d:14:ec:d7:89:96:d2:
                    95:7e:0b:02:06:b7:54:d5:b4:36:00:2c:ca:f7:0b:
                    a0:85:d5:43:93:f1:6e:be:2c:61:9c:8a:74:1d:32:
                    95:f8:ab:6c:27:42:04:41:fe:2c:4f:51:59:fe:73:
                    15:69:36:36:de:71:23:5f:4d:36:de:a6:82:34:c7:
                    c4:ba:d7:78:5f:5e:88:5b:de:a3:e3:6a:96:b4:f4:
                    98:5f:9f:89:4b:16:93:2b:5e:72:35:47:9d:b5:31:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329564

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:41:7b:07:5c:1f:68:ad:ee:18:e3:54:26:91:5e:d6:73:47:
         c6:49:e4:d9:66:08:10:c5:9c:8c:d0:6c:97:80:d4:2a:d6:6e:
         fe:d0:10:97:16:c0:ab:38:ec:50:e9:82:09:f9:2d:fc:e1:ba:
         7a:67:31:38:71:41:12:02:3c:69:a1:39:81:0e:98:6a:01:ec:
         dc:7a:af:06:03:33:93:1e:64:20:aa:6c:bc:85:20:ef:91:03:
         ec:88:bd:cc:fb:d6:02:0d:1c:58:93:a7:da:ef:87:5c:e1:14:
         e0:02:90:ed:46:51:ed:84:56:3c:c2:7f:5c:7a:2b:d9:52:a3:
         e4:8c:0a:ac:08:72:d1:10:bf:bc:14:65:57:6d:44:cd:c6:2f:
         ab:be:85:19:84:d4:7d:5a:24:a6:88:21:d3:ce:e8:05:58:a3:
         44:a6:ba:58:84:2c:62:08:d4:b3:ee:00:ab:b1:1b:8e:cb:e7:
         32:00:02:9a:a0:bd:a8:23:35:8c:8a:d1:da:34:64:48:c0:c9:
         ed:c4:a0:14:69:39:b3:c2:d2:b7:4e:e5:dd:34:a7:bd:7f:bd:
         c1:bd:fd:54:26:a8:9f:0f:39:80:92:d6:6f:c5:24:c8:81:5c:
         3c:29:8d:83:c5:e0:0b:ff:5f:d4:98:5f:d4:67:3d:9d:db:19:
         0c:bb:3a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:12:16 2026 by rpki-client