This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.cer (raw, json)
Hash identifier:          IQ6b9eKLjxlnLD58qrgDeuIDqxNMSnR+oSgK/IeuCTc=
Subject key identifier:   D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       378E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:10:20 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329506
                          IP: 102.207.128.0/22
                          IP: 2c0f:11c0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14222 (0x378e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:10:20 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ca:b2:f6:55:c8:45:dc:ff:8e:9a:4c:3b:d5:
                    37:0c:6e:66:13:5a:c9:f4:dc:00:f9:ea:eb:b1:f3:
                    6d:3b:87:55:a6:11:25:f4:53:a1:8b:39:e1:a9:94:
                    66:b0:9a:ef:8e:03:67:73:2d:aa:e6:80:6f:01:37:
                    37:d3:0c:ab:0b:90:0a:31:f7:4a:d0:44:f8:8c:dd:
                    8b:8b:ef:78:02:93:6f:57:da:37:e6:be:cc:68:12:
                    f3:74:42:a8:39:3b:37:82:15:f3:ce:39:cf:60:3b:
                    8c:7d:d7:9f:ca:f7:cc:71:eb:c6:be:90:43:b9:3c:
                    4d:8f:62:20:dd:63:3c:53:e5:35:3a:5a:9a:6b:76:
                    4b:4d:f2:49:e5:80:66:23:ac:a5:72:37:96:a8:a4:
                    3d:54:e3:06:60:ea:23:7a:ad:6c:7c:b0:7c:99:12:
                    db:73:bc:e2:f7:85:fe:29:47:2b:a9:62:1d:2f:81:
                    bb:ea:17:f1:81:1a:7c:6e:b7:52:51:37:7b:40:86:
                    76:6a:25:4e:df:e4:17:e6:ed:64:c4:bd:59:36:cb:
                    f8:23:69:03:e7:08:e2:ad:03:bf:cd:1a:a6:83:b9:
                    6e:10:f6:ad:6b:19:7f:e1:97:97:7b:0a:d9:95:f5:
                    56:c1:6b:05:b1:70:dd:4a:64:87:cc:24:5c:ea:91:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329506

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.128.0/22
                IPv6:
                  2c0f:11c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:a3:84:b0:07:65:12:f5:6f:31:c2:1d:62:e6:49:ab:a5:c1:
         df:97:91:af:2b:7f:8c:5e:03:26:e8:56:f2:01:6b:9a:7e:ef:
         77:74:5b:99:74:a8:df:fe:3e:37:e9:97:1a:88:39:89:6b:27:
         30:6b:f8:d0:44:0b:d7:6f:ff:fb:e4:a4:20:5f:82:81:11:be:
         d5:89:65:23:fb:45:7e:c5:0d:d8:51:4f:83:3c:7d:32:db:1e:
         90:d8:65:76:9c:02:48:00:3a:27:d0:bc:f6:e2:04:3b:9b:78:
         08:3d:7f:44:9d:b5:a7:19:3d:e2:2c:74:b5:de:d4:bd:2f:99:
         a2:b6:07:cd:66:1f:cc:91:dd:71:0f:69:26:06:55:f3:d6:fd:
         15:8d:9e:45:ab:a3:8c:0f:71:f9:c5:1c:26:f9:9b:98:cd:d5:
         3c:30:77:6c:55:86:e3:56:c9:c2:89:65:3c:af:cb:18:47:59:
         db:b4:0f:0d:72:af:44:e6:15:42:90:2b:08:42:f6:1a:72:9d:
         4c:53:39:0d:49:5f:55:a4:38:e6:2a:45:e4:03:48:47:b2:68:
         a9:bf:fe:eb:1a:56:26:c8:95:27:41:0b:4a:19:55:3e:96:66:
         90:88:46:e1:19:7f:54:48:77:72:da:a7:b1:78:91:01:b5:e1:
         99:7c:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:08:03 2026 by rpki-client