This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9e2RvGqsS_b5N0e41TmTDZwMAis.cer
File:                     9e2RvGqsS_b5N0e41TmTDZwMAis.cer (raw, json)
Hash identifier:          ZSFlGdVqKloxUiMMa+Ecyv4aXDvvbMlv0373VSUUl50=
Subject key identifier:   F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3E91
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:49:25 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 20928
                          IP: 41.187.0.0/16
                          IP: 197.246.0.0/16
                          IP: 2001:43c8::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16017 (0x3e91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:49:25 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36E558EAF, serialNumber=F5ED91BC6AAC4BF6F93747B8D539930D9C0C022B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:1a:44:89:1e:6b:9f:6c:f0:d0:0e:95:4b:
                    e7:08:8f:df:fc:9f:1d:dc:4d:62:d3:6a:3a:19:11:
                    88:54:f4:c0:f2:10:07:b7:8f:9c:e9:05:2a:63:ee:
                    d3:2d:61:a0:90:c5:61:ae:9e:c4:fc:ff:85:dc:6e:
                    db:e9:3f:00:2e:cc:fc:4b:2c:51:4d:ef:82:4d:d6:
                    4c:b3:fc:91:de:cd:f2:43:aa:87:03:85:4a:4f:25:
                    42:6d:1a:c4:c7:64:43:17:1c:01:2e:8a:94:de:08:
                    f7:d4:f0:ff:a0:fc:ce:70:e5:3e:e3:91:d5:a8:e8:
                    a5:52:34:84:16:d2:fc:12:81:f9:9f:88:c9:a8:d0:
                    8a:c2:c2:c3:d8:2a:27:6b:a1:75:ad:a5:a2:0e:0f:
                    97:8f:a3:66:3c:12:7f:40:dd:16:cb:8c:74:64:69:
                    6f:7b:32:8e:17:bd:29:6d:c3:e3:d8:50:75:07:47:
                    12:9d:15:48:05:2e:a6:a5:d2:ff:cc:47:81:0d:83:
                    e9:ef:53:3d:3a:c3:79:fd:eb:bf:f5:04:41:33:41:
                    b0:ce:c5:0b:76:9a:dd:a8:9e:69:02:6f:90:01:3e:
                    a9:11:a5:ea:5c:b8:3a:4c:af:b7:98:7a:48:51:54:
                    3d:fb:1e:d2:db:fa:8a:e9:db:93:ab:78:6a:fd:7b:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:ED:91:BC:6A:AC:4B:F6:F9:37:47:B8:D5:39:93:0D:9C:0C:02:2B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/8AD037A48CEF11F091627E7CDAE4EC9C/9e2RvGqsS_b5N0e41TmTDZwMAis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20928

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.187.0.0/16
                  197.246.0.0/16
                IPv6:
                  2001:43c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:fc:23:44:67:50:e8:ee:1c:ff:4a:94:78:72:f5:ee:d9:99:
         c9:8e:14:a8:79:06:27:b3:f7:b4:4c:70:ea:f0:02:a2:2e:65:
         44:f4:ef:d7:09:40:70:56:20:c1:43:81:13:f7:d9:a0:3d:8a:
         97:49:03:60:cc:7c:86:6b:36:02:38:9b:83:97:1e:c4:05:43:
         c0:39:f3:32:4d:be:4f:ae:2c:d1:af:3b:97:59:f1:17:57:32:
         18:18:73:1a:64:00:e0:62:b7:6b:e3:f3:74:03:2a:1b:40:60:
         a7:bb:5c:28:54:98:00:57:87:4f:85:22:5b:30:13:4f:a8:6b:
         1c:5e:84:87:70:1f:ea:f6:18:f2:2b:60:44:50:c9:8b:b6:dc:
         38:67:2c:b3:93:2b:71:68:b0:86:3d:31:55:9f:d5:c2:7a:1d:
         fd:24:09:26:80:f2:f7:d0:6c:5a:37:08:0c:cd:0c:aa:51:59:
         5c:9a:d1:17:89:e9:ca:7f:67:15:8d:80:16:a8:22:36:8c:db:
         a2:36:1e:f8:62:1d:ec:35:6b:d7:d0:fa:52:e4:8f:2c:af:cc:
         39:61:c0:fd:8b:bd:1c:f7:b1:d0:98:8f:f5:23:5f:75:1a:6c:
         8d:79:e8:3d:7c:32:aa:e9:54:16:09:a6:ab:ea:ef:86:14:74:
         d2:45:91:56
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgICPpEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwNDQ5MjVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkU1NThFQUYxMTAvBgNVBAUTKEY1RUQ5MUJDNkFBQzRCRjZGOTM3NDdC
OEQ1Mzk5MzBEOUMwQzAyMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0iBpEiR5rn2zw0A6VS+cIj9/8nx3cTWLTajoZEYhU9MDyEAe3j5zpBSpj7tMt
YaCQxWGunsT8/4XcbtvpPwAuzPxLLFFN74JN1kyz/JHezfJDqocDhUpPJUJtGsTH
ZEMXHAEuipTeCPfU8P+g/M5w5T7jkdWo6KVSNIQW0vwSgfmfiMmo0IrCwsPYKidr
oXWtpaIOD5ePo2Y8En9A3RbLjHRkaW97Mo4XvSltw+PYUHUHRxKdFUgFLqal0v/M
R4ENg+nvUz06w3n967/1BEEzQbDOxQt2mt2onmkCb5ABPqkRpepcuDpMr7eYekhR
VD37HtLb+orp25OreGr9e5UPAgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQU9e2RvGqs
S/b5N0e41TmTDZwMAiswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFNTU4RS84QUQwMzdBNDhDRUYx
MUYwOTE2MjdFN0NEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTU1OEUvOEFEMDM3QTQ4Q0VGMTFGMDkxNjI3RTdDREFFNEVDOUMvOWUyUnZH
cXNTX2I1TjBlNDFUbVREWndNQWlzLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJRwDAyBggrBgEFBQcBBwEB/wQjMCEwEAQCAAEwCgMDACm7AwMAxfYwDQQCAAIw
BwMFACABQ8gwDQYJKoZIhvcNAQELBQADggEBABz8I0RnUOjuHP9KlHhy9e7ZmcmO
FKh5Biez97RMcOrwAqIuZUT079cJQHBWIMFDgRP32aA9ipdJA2DMfIZrNgI4m4OX
HsQFQ8A58zJNvk+uLNGvO5dZ8RdXMhgYcxpkAOBit2vj83QDKhtAYKe7XChUmABX
h0+FIlswE0+oaxxehIdwH+r2GPIrYERQyYu23DhnLLOTK3FosIY9MVWf1cJ6Hf0k
CSaA8vfQbFo3CAzNDKpRWVya0ReJ6cp/ZxWNgBaoIjaM26I2HvhiHew1a9fQ+lLk
jyyvzDlhwP2LvRz3sdCYj/UjX3UabI156D18MqrpVBYJpqvq74YUdNJFkVY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:19:31 2026 by rpki-client