This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
File:                     6J7-NR5gJSomJW2N7o9p53JMrVo.cer (raw, json)
Hash identifier:          3Hhd2SbMaExOgyPXci0hBBgGwWNZHh2nvyuIxpeM6ok=
Subject key identifier:   E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3926
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:20:01 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329027
                          IP: 102.204.232.0/22
                          IP: 102.213.44.0/22
                          IP: 102.223.156.0/22
                          IP: 2c0f:9c0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14630 (0x3926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:20:01 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3644FF0AF, serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:d7:4c:d2:f2:68:53:38:d7:09:c0:cc:cf:
                    9f:6a:73:a2:47:c1:78:20:0a:5c:1e:25:75:6c:b0:
                    94:83:c7:12:85:59:57:e9:25:fe:27:6e:5d:93:36:
                    27:0d:50:38:18:9f:93:a5:44:2b:46:3a:80:23:bf:
                    99:d8:7b:40:42:51:a3:d0:22:dd:0f:83:c9:f7:a0:
                    db:1f:5f:c1:67:c8:02:8c:ab:e6:88:14:64:d0:d7:
                    54:03:b4:37:73:8a:e3:54:f0:8d:81:62:8c:71:a7:
                    53:36:5f:c3:90:52:80:e2:85:7e:c3:fb:e8:a9:e3:
                    c3:6a:89:b2:d0:ff:dc:4e:c0:a3:76:00:2e:02:ef:
                    fd:e5:6c:39:ca:6a:38:4f:4e:60:9a:bf:8b:6a:c2:
                    3e:e3:f5:44:f9:93:2a:1f:e1:23:d6:bc:68:05:f5:
                    8c:52:13:5b:66:70:96:35:88:23:6e:03:95:76:a3:
                    70:91:46:cb:80:43:f7:87:12:a8:81:33:90:79:6f:
                    4c:c3:31:f2:d0:0e:a3:b9:82:c3:3f:4f:9e:12:22:
                    13:c9:42:03:8a:b3:58:68:c7:c1:5b:a5:99:a9:6b:
                    47:67:f3:38:27:a9:76:79:fd:78:ef:13:09:4c:46:
                    9c:0c:eb:b1:fd:32:e2:6f:36:ad:4a:7d:a0:7e:5e:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329027

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.232.0/22
                  102.213.44.0/22
                  102.223.156.0/22
                IPv6:
                  2c0f:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:9e:f3:9c:67:d3:74:b3:46:d7:b0:b1:ef:fa:23:0b:c5:dd:
         1e:bd:aa:2d:bb:48:f1:77:79:f2:93:1f:5a:02:cc:e6:1f:0b:
         e3:73:42:eb:1a:5c:0c:f9:5f:d7:e0:f8:0c:07:fa:e1:ca:24:
         14:4a:08:11:b1:62:30:ff:26:01:e2:36:10:55:fa:0b:3f:17:
         c5:3b:fe:5b:84:04:2e:d9:8b:de:88:8e:41:2b:cc:58:d9:f6:
         0a:1b:6c:3d:5e:ab:92:ff:76:57:d9:5e:75:7d:8f:ae:68:68:
         46:64:38:a8:16:b3:ad:dc:62:7c:f4:47:a4:a6:1b:df:a2:44:
         ac:59:ed:c2:67:b7:fb:8a:09:55:b2:7e:bd:c6:f9:d2:59:57:
         15:a8:0a:18:25:96:ef:4a:eb:cf:da:d7:93:d2:19:58:23:e1:
         81:60:31:e9:8e:2d:ea:db:91:78:04:d7:45:80:04:2e:de:3e:
         29:af:2e:4d:95:c5:72:6a:52:56:60:a3:9d:35:49:14:12:f8:
         3c:f7:d3:8f:0f:6a:c1:e8:69:cd:62:ec:c8:3e:94:66:f9:fb:
         78:a7:3e:00:a1:c1:29:ec:6b:e9:f8:b2:0f:c2:50:08:90:f6:
         dd:ce:58:bc:94:96:45:c8:4b:81:2a:e3:35:34:09:35:f6:da:
         86:c8:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:19:19 2026 by rpki-client