This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
File:                     0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer (raw, json)
Hash identifier:          fT1qHE8VvPlpUQg1ie2jQXwvnsCt+SNzUalrvdZ8gcg=
Subject key identifier:   D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3BAC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:55:12 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37527
                          IP: 197.149.180.0/22
                          IP: 2c0f:f8b8::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15276 (0x3bac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:55:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3688596AF, serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:ca:13:2a:b1:73:3d:38:da:63:6b:ef:1b:
                    6f:e3:f5:60:ec:ed:a7:40:69:2b:9d:9e:27:6e:73:
                    1d:db:88:ed:81:69:53:94:2c:58:d9:3f:34:ac:86:
                    d9:e9:3e:e7:1e:33:e6:62:87:0e:65:b9:5b:71:37:
                    67:1f:e0:9b:09:2e:10:42:dc:4b:df:4b:3a:cc:e9:
                    05:83:aa:27:c6:f9:b3:3d:34:e8:0b:48:f0:ab:65:
                    9c:1b:4c:34:d3:2a:3a:50:3e:cc:2b:80:fb:06:8c:
                    30:39:f7:55:a6:ae:75:54:d4:b2:fe:bf:ba:6a:c8:
                    04:bf:64:e2:89:bd:4e:ef:93:6f:93:83:87:11:07:
                    2f:18:87:e9:b3:b0:3d:28:88:1f:ed:2f:0f:1c:17:
                    a0:af:62:e6:9a:3f:df:af:e5:6b:2a:c4:ea:8a:fe:
                    90:1c:72:92:14:2d:4d:cf:1a:b9:b4:da:7a:d2:79:
                    48:9e:0d:38:b0:7d:fe:93:7f:50:98:e0:11:97:92:
                    57:15:82:c1:0e:eb:10:bd:5c:7f:e3:80:3e:db:82:
                    c9:f6:0c:f2:6d:a6:37:1d:1c:3d:96:5d:be:09:92:
                    78:b9:51:cd:37:c2:a4:6f:2f:d1:15:5d:e7:73:c5:
                    23:32:21:fe:7f:f3:9e:b6:3c:5b:32:58:4a:c6:6d:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37527

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.149.180.0/22
                IPv6:
                  2c0f:f8b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:88:72:08:3d:69:17:a6:92:cf:85:2f:f7:73:f6:0f:58:a0:
         f0:6e:ff:43:1e:f9:99:62:60:dd:89:81:03:6d:3f:04:8b:52:
         5b:c7:a7:1d:ba:66:8a:b9:4f:18:85:c2:20:cb:a5:a2:78:84:
         c6:49:6e:d9:34:29:06:cd:af:6b:06:ab:01:ad:44:e7:76:4a:
         ad:49:46:be:37:41:e6:8e:f8:6a:fe:b7:62:85:8f:f8:f1:d5:
         65:b8:d5:bb:99:d6:e4:6d:d9:81:13:b3:51:ae:90:e7:5c:bc:
         ae:76:df:80:d5:a4:84:ef:26:b2:7a:6c:c5:0d:3b:0d:ee:78:
         ea:45:1b:5d:e6:fd:1b:0f:46:b0:b5:dc:5a:ee:6b:98:f4:b4:
         df:e6:da:ce:a5:23:85:6a:b1:74:13:c4:17:6f:bd:7b:3c:d3:
         6e:41:9b:e1:97:3c:a7:f0:5d:fb:60:aa:83:9b:64:ad:6e:27:
         e3:55:31:40:a9:bf:56:90:93:78:5b:bc:27:df:5e:70:6e:a9:
         b1:5b:14:ff:cb:24:73:b6:01:4c:39:c6:94:c3:df:1f:bd:19:
         d1:9d:17:3f:8e:82:46:dd:89:fb:d1:ad:b4:2b:cf:36:a6:45:
         3a:a5:54:56:82:59:ca:e1:37:68:d1:76:6a:4b:e1:2f:f9:84:
         19:8b:69:94
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICO6wwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMjU1MTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjg4NTk2QUYxMTAvBgNVBAUTKEQyQUFBMUE1RTFBRTE3QzNGNjZGNjZG
QTcxRDlBNjExNjE5NUE3OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKxMoTKrFzPTjaY2vvG2/j9WDs7adAaSudniducx3biO2BaVOULFjZPzSshtnp
PuceM+Zihw5luVtxN2cf4JsJLhBC3EvfSzrM6QWDqifG+bM9NOgLSPCrZZwbTDTT
KjpQPswrgPsGjDA591WmrnVU1LL+v7pqyAS/ZOKJvU7vk2+Tg4cRBy8Yh+mzsD0o
iB/tLw8cF6CvYuaaP9+v5WsqxOqK/pAccpIULU3PGrm02nrSeUieDTiwff6Tf1CY
4BGXklcVgsEO6xC9XH/jgD7bgsn2DPJtpjcdHD2WXb4Jkni5Uc03wqRvL9EVXedz
xSMyIf5/8562PFsyWErGbfvTAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU0qqhpeGu
F8P2b2b6cdmmEWGVp4wwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4ODU5Ni81OUVGMkM2ODZFNjMx
MUU1ODU1MzQ0MzBGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODg1OTYvNTlFRjJDNjg2RTYzMTFFNTg1NTM0NDMwRjhBRUEyMjgvMHFxaHBl
R3VGOFAyYjJiNmNkbW1FV0dWcDR3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkpcwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALFlbQwDQQCAAIwBwMF
ACwP+LgwDQYJKoZIhvcNAQELBQADggEBAJ2Icgg9aRemks+FL/dz9g9YoPBu/0Me
+ZliYN2JgQNtPwSLUlvHpx26Zoq5TxiFwiDLpaJ4hMZJbtk0KQbNr2sGqwGtROd2
Sq1JRr43QeaO+Gr+t2KFj/jx1WW41buZ1uRt2YETs1GukOdcvK5234DVpITvJrJ6
bMUNOw3ueOpFG13m/RsPRrC13Frua5j0tN/m2s6lI4VqsXQTxBdvvXs8025Bm+GX
PKfwXftgqoObZK1uJ+NVMUCpv1aQk3hbvCffXnBuqbFbFP/LJHO2AUw5xpTD3x+9
GdGdFz+OgkbdifvRrbQrzzamRTqlVFaCWcrhN2jRdmpL4S/5hBmLaZQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:27:41 2026 by rpki-client