This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
File:                     6y_2M0NFlzp0sAkALjaRcdk48DM.cer (raw, json)
Hash identifier:          79Ly05kJtUHU9/7FOs62+AwIr1sr0I+oJnT1ZekY6Xk=
Subject key identifier:   EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3CC1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:35:56 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328316
                          IP: 102.176.176.0/22
                          IP: 2c0f:eed0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15553 (0x3cc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:35:56 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36FDDCFAF, serialNumber=EB2FF6334345973A74B009002E369171D938F033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:81:a9:8a:d9:4e:ab:c1:2c:25:ac:e6:3d:2d:
                    93:87:76:dc:52:56:6a:6c:f6:d8:11:c1:ce:8f:36:
                    c4:3d:1a:ff:4a:e9:36:d8:53:35:a0:ac:b0:ca:20:
                    f9:ce:4e:de:81:b5:e8:f7:7b:e7:40:fa:9d:d7:ad:
                    24:2d:7d:1c:51:dc:8f:1b:4e:56:e8:50:a7:01:42:
                    f2:9f:8b:f8:da:fb:30:ef:7b:bd:b4:4b:f7:14:a7:
                    a1:08:e9:40:4a:17:0d:f6:af:49:ef:0f:ca:03:9a:
                    0e:c5:7a:73:71:6f:45:31:92:d5:bf:1a:5b:fa:f5:
                    e6:2c:23:28:1a:e0:5d:ba:7e:d3:2d:ba:7c:0a:d8:
                    26:90:79:0f:c8:70:9e:f9:53:82:38:2a:2a:d0:ca:
                    a9:9f:5c:be:69:36:24:72:b4:6b:05:38:7a:6f:66:
                    20:18:0c:b8:84:34:36:e9:34:0e:c2:ef:cb:24:6a:
                    20:31:38:13:ae:47:e1:a4:59:df:6a:83:b5:5f:31:
                    ea:5c:e9:3f:fc:96:53:d2:47:82:05:95:14:c5:3c:
                    a8:b0:cc:0c:ea:0f:fe:36:8c:ee:6a:56:98:c6:e9:
                    bd:d2:79:c5:da:1b:c1:9b:c9:10:29:ef:42:72:cb:
                    98:88:1e:7a:1a:23:5e:f1:16:57:2f:ae:0f:7e:d8:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328316

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.176.176.0/22
                IPv6:
                  2c0f:eed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:25:91:6b:e8:46:7c:d5:66:ab:a9:24:a5:5f:de:cb:ca:1d:
         56:86:8a:98:95:4c:b7:7c:d2:ee:87:2a:ae:41:91:f0:fd:dc:
         54:d0:bc:6a:28:d3:f7:dd:20:6b:62:9d:b1:3d:60:b3:7f:5c:
         aa:f2:52:98:c5:d6:9f:7c:6b:9c:27:e7:7d:52:69:91:bd:c4:
         07:68:6c:b2:47:3c:8b:b0:0d:c0:27:cb:ea:dc:2a:3b:b4:58:
         00:df:1c:59:05:08:af:75:4b:68:20:2b:a5:58:de:02:ad:d9:
         db:2b:03:91:1d:a7:84:fc:70:85:d8:f4:23:f9:43:64:c8:20:
         72:3d:1f:51:9e:4f:11:cb:79:d3:52:aa:95:2a:bb:ca:1b:f9:
         05:79:98:ad:dd:33:7a:6e:03:2a:db:fa:d7:91:bc:d3:66:93:
         5d:ef:8c:6f:ec:c7:ff:0e:fb:9c:93:af:45:1f:0e:c1:1a:8c:
         36:4d:cf:38:54:b1:ee:36:d2:8b:8d:2e:43:6a:84:5b:24:9e:
         c0:a5:7f:8f:f1:cf:10:b7:a3:cb:a1:82:09:06:03:b7:b6:19:
         12:be:af:77:d7:78:a9:75:4c:1e:d4:f1:a2:0b:66:21:f7:bc:
         c3:68:f0:77:7d:aa:2b:a1:ee:e1:5a:d3:e6:3a:8c:86:7c:36:
         28:8b:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:27:50 2026 by rpki-client