This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer
File:                     5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer (raw, json)
Hash identifier:          W6j5FN3b4hE4xQO4EOLDLGx/8bSULhArYdsN85z96w4=
Subject key identifier:   E6:E2:C4:7B:90:97:3D:3A:88:8C:D8:03:D7:58:4D:04:22:7D:57:4A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3F7E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 12 Jan 2026 07:04:16 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329654
                          IP: 102.204.12.0/23
                          IP: 2c0f:7fc0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16254 (0x3f7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan 12 07:04:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F363D052AF, serialNumber=E6E2C47B90973D3A888CD803D7584D04227D574A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:63:a6:ed:b2:0e:2f:d5:bf:42:d7:89:2f:
                    90:98:02:06:d1:9f:3c:2c:45:fc:2c:66:8b:52:9b:
                    64:24:5b:d7:d6:01:2d:47:9a:22:60:3b:7e:7e:28:
                    46:8f:58:97:f3:28:10:13:a0:90:ed:81:d6:3f:64:
                    bf:20:48:a8:aa:86:6f:7a:59:4d:00:c4:ee:cc:b6:
                    f2:ae:0c:5f:96:52:8e:22:b7:72:6c:88:60:c3:8f:
                    1a:0a:de:b7:bb:1d:e4:29:07:06:9d:b9:bd:54:4b:
                    ed:a6:c6:a8:20:c8:71:fe:29:ae:65:3d:e1:39:f0:
                    eb:f8:72:49:54:f6:04:e8:86:d5:d7:a6:e4:cc:78:
                    9f:0d:0c:1c:3b:f1:31:64:6b:7e:60:82:27:19:fd:
                    2e:e0:be:f9:55:a2:3b:0e:d5:e4:47:be:91:fd:42:
                    7f:fc:41:90:f3:ce:71:ae:83:73:19:ad:ed:16:95:
                    4e:cc:c0:70:09:82:80:0f:1a:61:9d:10:96:46:3d:
                    c5:47:ea:32:4a:5c:84:fe:5c:81:d3:f6:6e:bd:e6:
                    f1:c8:db:81:ac:51:90:4e:f4:8a:f4:2c:67:2d:cc:
                    4f:08:c9:62:6f:c8:08:97:b1:c0:99:99:65:b2:5f:
                    cc:ba:b4:64:95:43:6e:bb:dd:3e:ba:ad:5a:c1:0f:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E2:C4:7B:90:97:3D:3A:88:8C:D8:03:D7:58:4D:04:22:7D:57:4A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329654

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.12.0/23
                IPv6:
                  2c0f:7fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:3d:2e:59:53:26:c7:3c:4f:19:36:ed:4f:1c:08:76:f1:
         a7:db:20:a6:99:ec:91:6c:8d:90:11:62:32:ab:03:c6:23:df:
         b4:77:07:8c:df:f8:c8:7c:fb:35:34:39:d1:11:38:ce:60:d0:
         50:3a:5b:92:58:37:98:11:0e:80:29:10:5d:f3:3b:ac:55:cf:
         6f:2a:da:fa:a5:11:bf:87:b8:f7:31:bd:5f:06:85:fb:12:63:
         0d:e5:ac:69:7e:43:01:df:fa:52:b0:e6:00:d5:1d:9a:3d:7d:
         41:d9:90:35:cd:10:ca:56:48:c3:31:1d:ad:df:bb:74:0b:6e:
         13:5d:33:4e:f8:38:6c:73:d7:71:f1:52:29:ea:96:a7:2d:4a:
         72:df:f8:78:82:7d:9c:ef:50:9e:8f:e4:3a:2e:1f:10:9b:fe:
         aa:3f:6c:e4:c2:21:ad:30:52:0c:84:bb:76:29:58:39:e9:74:
         1c:d0:b6:44:74:4c:ff:73:a3:56:57:0a:45:f0:5c:66:2e:2d:
         87:a6:22:87:68:b3:61:77:35:05:22:93:ff:43:4f:f3:d1:d4:
         26:42:7a:77:50:22:b6:af:13:fe:e3:2d:53:76:af:8c:33:fb:
         7e:56:10:49:a7:0a:d2:cf:8c:a2:a5:a5:3a:b8:f3:a9:85:15:
         ab:ce:fd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:54:24 2026 by rpki-client