This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
File:                     0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer (raw, json)
Hash identifier:          C8K2V4JDIXl8cxuHpIeiapAHlIab/zG7KvDlN3UQAKU=
Subject key identifier:   D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       36EC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 18 Nov 2025 16:47:05 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329590
                          IP: 102.205.60.0/23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14060 (0x36ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov 18 16:47:05 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36C04EAAF, serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:73:98:22:67:2f:87:3d:e7:d1:8c:f2:ad:
                    08:fe:53:9d:93:6f:11:9f:23:6d:ac:57:08:46:60:
                    10:5a:6f:26:87:a2:1a:a1:1a:74:77:63:f6:b0:e5:
                    e5:d7:40:03:3e:e8:31:19:80:60:b9:5d:d2:72:29:
                    bc:06:c2:a1:47:96:14:70:cc:d8:68:e4:be:e0:5b:
                    a3:a6:d5:ef:70:ac:4c:e6:5a:12:3a:05:f5:d9:ab:
                    44:48:95:28:75:7c:1f:b3:d8:b2:55:da:e7:dc:8d:
                    6a:3a:bd:70:14:19:20:8b:b8:b9:2e:21:23:b4:74:
                    0a:2e:27:7e:04:1a:c4:23:85:66:bc:66:e4:a8:c4:
                    d4:f1:5c:d1:e8:00:e3:00:db:64:10:a3:fa:bc:a2:
                    a6:c2:1a:f1:df:e5:21:38:20:58:88:60:5d:59:8c:
                    0f:89:6f:5e:83:55:29:aa:a9:e2:c8:8d:b5:29:33:
                    cd:89:53:5b:98:1c:ce:c9:bd:3b:01:10:58:18:7f:
                    eb:cc:9d:d1:38:c2:c6:00:2e:dd:79:f6:66:00:39:
                    37:c7:9f:8a:27:b8:c4:df:6a:6b:7d:8e:16:63:1d:
                    81:65:b1:72:cf:be:49:5a:1d:63:f9:bf:f3:56:49:
                    2c:b9:50:20:94:bf:00:ae:ba:53:88:3d:8d:9e:a7:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329590

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:be:68:d9:9e:25:30:71:ef:21:cb:52:dd:58:74:6b:01:61:
         3a:2a:12:06:c0:ed:ad:d2:eb:43:75:3b:34:ba:a3:aa:7b:eb:
         1f:07:37:19:ff:a6:26:a6:56:92:97:00:fb:48:2e:71:95:12:
         de:28:1c:1e:f3:99:c7:34:b3:3d:c7:99:2a:15:67:b3:39:1d:
         44:9e:9c:6e:33:4b:68:a8:4f:23:72:eb:70:13:a5:c2:27:0b:
         45:71:69:0e:b6:07:8e:4e:26:9b:72:e2:46:ce:04:78:78:e3:
         3d:30:ec:a9:00:81:2e:51:4f:15:ed:c7:c0:8a:ed:ae:1c:c8:
         f0:31:57:d4:db:2f:43:7c:c3:72:9d:65:f8:cf:22:e6:1d:ac:
         fb:e2:e3:1c:c7:bd:34:78:ac:84:f1:48:21:4b:d9:d5:d0:e1:
         ba:cb:b4:68:1f:18:18:08:8d:17:7d:4d:c6:b4:3b:c6:4c:5e:
         a7:95:c1:65:f8:79:5e:b3:72:69:f4:4e:b3:e6:cb:6b:22:0d:
         5f:5b:8f:43:cf:23:2a:35:82:04:40:68:0f:fe:85:b5:33:0e:
         71:6a:d6:68:39:b2:48:08:94:12:40:05:79:76:e0:04:bd:50:
         cb:fa:6f:6f:fb:93:1b:5a:2b:d5:5e:a8:b9:f5:cf:81:c5:3c:
         36:05:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 16:18:35 2025 by rpki-client