This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
File:                     0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer (raw, json)
Hash identifier:          24+esNS/YvwJBktpxMf611wNgFCu51FK/wtwXRQFu08=
Subject key identifier:   D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3D86
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:06:50 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329590
                          IP: 102.205.60.0/23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15750 (0x3d86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:06:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36C04EAAF, serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:73:98:22:67:2f:87:3d:e7:d1:8c:f2:ad:
                    08:fe:53:9d:93:6f:11:9f:23:6d:ac:57:08:46:60:
                    10:5a:6f:26:87:a2:1a:a1:1a:74:77:63:f6:b0:e5:
                    e5:d7:40:03:3e:e8:31:19:80:60:b9:5d:d2:72:29:
                    bc:06:c2:a1:47:96:14:70:cc:d8:68:e4:be:e0:5b:
                    a3:a6:d5:ef:70:ac:4c:e6:5a:12:3a:05:f5:d9:ab:
                    44:48:95:28:75:7c:1f:b3:d8:b2:55:da:e7:dc:8d:
                    6a:3a:bd:70:14:19:20:8b:b8:b9:2e:21:23:b4:74:
                    0a:2e:27:7e:04:1a:c4:23:85:66:bc:66:e4:a8:c4:
                    d4:f1:5c:d1:e8:00:e3:00:db:64:10:a3:fa:bc:a2:
                    a6:c2:1a:f1:df:e5:21:38:20:58:88:60:5d:59:8c:
                    0f:89:6f:5e:83:55:29:aa:a9:e2:c8:8d:b5:29:33:
                    cd:89:53:5b:98:1c:ce:c9:bd:3b:01:10:58:18:7f:
                    eb:cc:9d:d1:38:c2:c6:00:2e:dd:79:f6:66:00:39:
                    37:c7:9f:8a:27:b8:c4:df:6a:6b:7d:8e:16:63:1d:
                    81:65:b1:72:cf:be:49:5a:1d:63:f9:bf:f3:56:49:
                    2c:b9:50:20:94:bf:00:ae:ba:53:88:3d:8d:9e:a7:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329590

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:5a:ab:0d:03:44:f6:0b:0f:a1:f0:92:ec:b1:66:1c:d8:23:
         c0:5e:be:c2:4d:84:eb:ca:54:29:87:12:d0:6c:09:a5:66:24:
         4d:54:9c:82:ab:c2:70:42:81:b0:1f:4a:d1:d8:f3:17:c6:fe:
         0a:21:06:33:46:60:dc:e1:c3:ad:e1:52:b1:75:8c:8e:79:dc:
         91:2e:99:66:b2:60:96:4a:3f:72:b7:ef:73:48:30:00:79:ff:
         7b:96:8a:a4:ba:33:4f:73:b2:0c:f8:a5:ed:3b:0a:d4:9f:2a:
         7d:f4:19:aa:93:59:a7:bb:3d:23:16:a8:4f:6b:42:a6:b4:c2:
         65:ad:bb:2c:9c:62:c8:f7:66:60:13:d4:46:1a:3a:95:e8:9a:
         55:aa:ce:5c:85:25:49:10:f8:eb:71:e5:98:38:c0:77:35:01:
         14:86:8d:9d:83:ba:a3:33:93:55:ad:5c:75:fc:74:c3:06:9a:
         0e:43:ab:07:81:f3:ad:0b:44:b3:92:8e:55:e0:87:46:f3:4c:
         9e:4b:6a:26:4c:02:4f:3d:90:35:e0:a6:8a:f3:8a:0f:d5:bd:
         0e:79:c3:e1:ac:20:24:d7:3a:0b:9f:f9:53:b9:f1:3c:6c:ef:
         c1:0b:d1:c2:41:de:71:40:b6:a6:27:b5:65:de:32:18:4b:e9:
         16:f1:99:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:17:59 2026 by rpki-client