This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
File:                     8oCesrM_mm8nojXfSsFD0ZKvTiA.cer (raw, json)
Hash identifier:          gfg4edE2XvHh5SmchLvFivEcLc7E6NqvcmaP2Gg/HdY=
Subject key identifier:   F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3859
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:47:16 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37506
                          IP: 41.220.80.0/20
                          IP: 197.148.80.0/21
                          IP: 2c0f:5380::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14425 (0x3859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:47:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F362D462AF, serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:9b:0a:22:a9:aa:47:d3:8c:69:59:b7:25:
                    3e:6c:c7:39:a7:b4:c1:60:9e:a5:4a:f9:56:01:ac:
                    66:a7:f9:90:b1:9d:ab:b6:ae:00:60:a7:87:73:57:
                    88:d8:c5:d4:d5:93:b6:23:15:95:62:df:34:b7:60:
                    dc:be:99:9b:d0:17:e6:29:ae:8d:91:1c:1a:c3:21:
                    1b:84:88:a6:0b:8e:7c:c2:a6:98:af:39:87:b9:36:
                    31:72:de:b5:a0:d1:a7:b0:1f:aa:5d:1e:8b:e9:2f:
                    be:ab:f7:24:24:91:b8:f2:05:40:70:02:c8:38:f5:
                    3a:8c:a5:9b:2c:d7:4b:d9:01:b5:c3:e5:f4:12:60:
                    e6:5b:db:92:0f:d3:7a:6b:55:ac:00:05:7d:ce:ce:
                    c9:ab:22:17:3d:71:08:e7:c7:d1:1a:5c:4c:c2:eb:
                    78:00:a0:af:83:36:42:a8:b3:8f:69:c7:b9:15:a2:
                    05:06:50:76:a5:11:fe:54:f5:ef:d8:ee:ca:92:76:
                    9d:3e:54:23:c5:85:00:12:28:95:4e:2e:78:ec:5e:
                    72:07:4a:f2:5c:3a:dd:16:4a:8d:b8:58:54:a5:b4:
                    d6:52:71:ee:3c:83:17:cb:2a:90:17:e2:ca:48:3b:
                    a6:39:c7:52:97:66:35:1f:dc:4b:18:b7:56:a1:b0:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37506

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.220.80.0/20
                  197.148.80.0/21
                IPv6:
                  2c0f:5380::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:18:75:b7:f1:3c:f3:31:4f:d7:cc:c2:04:ce:f5:1b:06:02:
         c8:ff:a7:96:c8:fb:e7:a8:1b:7a:28:30:cf:d0:d6:0b:c1:40:
         64:1f:99:8c:9a:35:58:cc:47:29:0c:0e:0a:8c:35:6a:fb:35:
         cd:fd:bd:99:cd:3c:42:6c:e5:b3:d5:1e:1d:15:1c:85:c6:cb:
         46:7d:10:9e:33:dd:70:e5:6a:31:f2:3a:76:a8:02:b3:a3:36:
         7d:9d:67:21:5d:ee:18:2c:ea:90:6c:76:a2:6d:6b:07:4f:fa:
         0c:f2:38:78:43:c8:1b:51:44:7c:41:9c:ce:a6:13:3e:dc:c3:
         e0:f3:e7:3d:88:59:ef:d6:db:cb:7f:e2:8f:2b:8a:04:bd:99:
         c1:57:c1:de:cd:6e:d6:b8:ba:9b:c9:64:ef:6a:0a:b6:e8:53:
         c7:eb:50:40:4b:9a:4c:de:38:7f:9c:1e:31:f3:e8:94:92:08:
         42:09:83:bf:d6:b8:80:ce:95:a0:a6:59:55:ec:70:90:e0:3d:
         c6:60:76:8f:37:06:7b:b7:5f:c3:0e:ec:29:01:c8:69:f9:11:
         42:72:63:2a:c9:e7:78:24:f0:a4:a9:b0:4d:6a:bb:1b:bf:30:
         0a:32:c4:c1:a3:5f:74:95:8f:95:31:48:f0:50:00:2c:02:cd:
         00:c7:7b:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:17:43 2026 by rpki-client