This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
File:                     -wkj-GnVLjM4ArnFPXizuoZUMMw.cer (raw, json)
Hash identifier:          Opqo0Wo6qD8olSA56zlGMV2CpqxHx0k9V9KAuVpp6rQ=
Subject key identifier:   FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3968
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:30:18 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327872
                          IP: 102.213.0.0/22
                          IP: 102.219.88.0/22
                          IP: 196.250.128.0/19
                          IP: 2c0f:f4c8::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14696 (0x3968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:30:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:b6:bc:53:46:97:af:fe:05:98:27:5b:75:
                    13:dc:8c:e6:a3:f6:2d:cb:12:c2:a4:a0:1a:64:48:
                    31:74:bd:72:59:15:3f:88:63:32:53:b6:fe:62:d2:
                    e9:43:fa:78:22:66:fa:60:d2:58:bb:38:2d:fc:04:
                    47:51:25:8d:e5:48:7b:c9:08:af:9e:de:93:50:6f:
                    15:ae:15:76:b6:94:f3:d5:ad:36:51:de:b0:5a:79:
                    cd:e2:b6:5b:b3:19:db:29:0c:94:86:a1:69:9b:81:
                    16:0e:e3:2e:90:fa:d8:ed:4c:f0:c7:61:52:14:68:
                    32:51:74:be:2b:54:9d:e8:7d:7e:d6:59:44:f9:a8:
                    cf:23:9e:af:00:1e:19:79:68:80:9f:b5:af:46:bc:
                    45:f4:f7:8e:6d:50:b9:35:82:3d:a5:0f:b0:d5:ea:
                    5e:b7:e6:cc:ab:e6:19:a5:5b:28:ba:e4:45:8e:b0:
                    1a:e6:49:ca:05:cb:33:7b:84:54:2a:03:a6:4b:dc:
                    01:5d:fe:0f:55:cb:8d:ce:96:81:4e:fc:03:2a:2f:
                    89:92:1f:16:62:a7:b3:e7:3b:ce:39:e6:3b:bc:6e:
                    ce:f5:3d:5f:c6:cb:d9:35:fe:5b:79:0d:5c:20:21:
                    5e:db:cb:68:fc:c5:a9:74:8b:bf:ea:97:97:f6:70:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327872

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.0.0/22
                  102.219.88.0/22
                  196.250.128.0/19
                IPv6:
                  2c0f:f4c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:47:d3:92:3a:6c:33:d1:61:de:a5:a3:06:ca:16:74:1b:38:
         cb:92:59:95:f0:c6:c1:2d:62:6f:14:07:8d:f1:40:54:8a:4d:
         21:32:40:56:f9:7b:72:91:6c:7a:f4:45:05:7c:5f:eb:8e:b3:
         d9:73:16:ad:6b:25:98:60:dc:a6:4c:80:76:85:d4:45:d7:5d:
         c1:1d:06:fc:b8:0e:f3:2d:3d:80:1e:65:bd:00:69:2f:97:c3:
         85:29:02:7e:17:93:82:44:0d:70:66:b6:ff:93:39:9c:f4:7f:
         e1:ce:b9:d6:a9:39:35:e9:f4:74:43:24:85:eb:18:c5:c7:2f:
         e4:5d:db:72:bc:32:70:12:7c:62:2d:3f:c9:c5:a4:74:19:15:
         83:aa:9b:62:f4:80:0d:e7:8d:78:30:6b:31:8e:0b:44:5b:3b:
         1c:0a:80:5a:88:fa:98:d7:75:bc:ff:78:60:b7:6f:98:20:fc:
         7c:5c:1a:9a:6f:4a:d8:4b:f2:bd:da:08:e1:fa:55:c0:44:c2:
         a0:11:df:2b:62:82:f2:f3:69:19:a6:55:b8:04:82:78:90:89:
         60:48:c6:3d:01:40:bf:91:56:04:82:c7:e0:97:f2:8f:88:c7:
         8c:ee:e7:7b:a4:27:60:e8:91:5e:11:c9:53:41:61:06:e0:bd:
         1f:91:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:09:20 2026 by rpki-client