This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
File:                     9quAr34JmFsP46OzgjMPLIk1jNg.cer (raw, json)
Hash identifier:          wl3QxJJNykAOD45SksqecMY7a1ZUKcy8TncFcF6lsgY=
Subject key identifier:   F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3F00
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 05:08:37 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328180
                          IP: 2001:43f8:d80::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16128 (0x3f00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 05:08:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36F5D39AF, serialNumber=F6AB80AF7E09985B0FE3A3B382330F2C89358CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:fb:d7:36:3a:ad:f2:c9:59:6c:fc:08:13:
                    43:07:8d:20:08:db:4e:37:96:89:68:bc:5d:0d:07:
                    e9:fe:4d:61:f5:08:dc:35:fb:8b:b7:61:70:5f:f1:
                    ff:ca:04:d9:10:da:6e:99:e8:70:75:5c:21:c1:1e:
                    b9:5d:25:fb:04:72:38:e2:9b:a7:f8:1f:fe:0c:52:
                    3f:10:ba:d0:8a:36:f9:14:d4:eb:7e:a9:3a:ae:56:
                    f1:f7:91:75:f0:fb:47:94:22:77:af:a1:3c:17:21:
                    1e:92:03:c7:a1:2f:50:e8:66:7a:ce:5e:79:72:bd:
                    64:87:95:5d:f5:4c:23:8b:8a:30:1a:73:40:5d:4c:
                    73:8e:58:32:d0:6f:b0:2d:55:77:99:d7:19:85:39:
                    73:03:b8:9c:71:ee:1e:ff:a4:3f:db:9d:aa:38:ae:
                    0e:31:7b:38:a9:52:38:3c:9a:5a:0e:0f:20:ba:7f:
                    2c:22:bb:33:67:13:35:6a:7b:2e:03:b2:c9:86:ed:
                    1c:11:a2:5f:37:04:1e:99:49:f0:4a:50:b3:cd:73:
                    9e:4b:67:b5:3d:76:29:86:79:10:09:57:17:56:6c:
                    66:a4:5b:54:57:01:ac:f7:32:bb:ed:a0:c5:6d:8b:
                    d3:8c:52:62:6b:06:ca:09:4b:47:64:5e:de:ac:ea:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328180

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:0b:aa:30:61:51:1f:d3:eb:13:5f:51:27:44:b2:9f:8e:57:
         5c:66:0f:16:de:20:38:b9:fc:0b:43:b7:17:40:76:e6:2d:4d:
         8c:69:3f:c0:4f:9a:28:ad:68:41:d3:42:67:67:83:d7:a5:ca:
         e3:0f:c6:dc:2f:ef:51:d4:93:46:8d:ea:06:52:db:28:8e:71:
         f9:e9:1d:56:b4:9f:38:4d:0e:35:6a:83:8d:4e:c3:b8:7d:ea:
         0f:db:99:80:f7:aa:a4:c8:09:ad:4e:e7:c5:82:8c:1e:fd:0f:
         a0:b2:b6:4d:e4:a0:d1:60:ce:58:d6:d1:74:64:0b:8b:af:c4:
         4b:ec:52:ef:65:8e:57:31:78:a2:ba:8d:ae:7a:67:dd:47:a5:
         ca:56:37:3f:4a:b1:27:32:42:ee:e9:88:7e:6c:3e:2c:1b:65:
         d8:9c:9e:13:60:93:2d:81:ec:6e:48:e1:4b:e7:1e:1e:58:59:
         1c:5d:9f:5c:6c:67:49:b4:92:78:e7:8a:4b:a6:9b:f4:09:c1:
         7c:07:4a:a8:0e:38:93:b8:56:7b:c5:06:12:ed:99:8b:b0:61:
         f0:2c:c9:a3:57:81:63:23:8a:42:ab:f4:84:2d:14:ce:d7:e1:
         5b:8e:a3:86:ba:5d:5a:a4:31:a7:24:a0:05:97:be:c7:da:66:
         31:35:4e:e5
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgICPwAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwNTA4MzdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkY1RDM5QUYxMTAvBgNVBAUTKEY2QUI4MEFGN0UwOTk4NUIwRkUzQTNC
MzgyMzMwRjJDODkzNThDRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoqfvXNjqt8slZbPwIE0MHjSAI2043lolovF0NB+n+TWH1CNw1+4u3YXBf8f/K
BNkQ2m6Z6HB1XCHBHrldJfsEcjjim6f4H/4MUj8QutCKNvkU1Ot+qTquVvH3kXXw
+0eUInevoTwXIR6SA8ehL1DoZnrOXnlyvWSHlV31TCOLijAac0BdTHOOWDLQb7At
VXeZ1xmFOXMDuJxx7h7/pD/bnao4rg4xezipUjg8mloODyC6fywiuzNnEzVqey4D
ssmG7RwRol83BB6ZSfBKULPNc55LZ7U9dimGeRAJVxdWbGakW1RXAaz3MrvtoMVt
i9OMUmJrBsoJS0dkXt6s6h0xAgMBAAGjggMOMIIDCjAdBgNVHQ4EFgQU9quAr34J
mFsP46OzgjMPLIk1jNgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGNUQzOS8yNjI0QjhBNDgyRTAx
MUVFQjg3RTUwMjY0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjVEMzkvMjYyNEI4QTQ4MkUwMTFFRUI4N0U1MDI2NEFEOUU2RkMvOXF1QXIz
NEptRnNQNDZPemdqTVBMSWsxak5nLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAfQwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DYAwDQYJKoZI
hvcNAQELBQADggEBAH4LqjBhUR/T6xNfUSdEsp+OV1xmDxbeIDi5/AtDtxdAduYt
TYxpP8BPmiitaEHTQmdng9elyuMPxtwv71HUk0aN6gZS2yiOcfnpHVa0nzhNDjVq
g41Ow7h96g/bmYD3qqTICa1O58WCjB79D6Cytk3koNFgzljW0XRkC4uvxEvsUu9l
jlcxeKK6ja56Z91HpcpWNz9KsScyQu7piH5sPiwbZdicnhNgky2B7G5I4UvnHh5Y
WRxdn1xsZ0m0knjnikumm/QJwXwHSqgOOJO4VnvFBhLtmYuwYfAsyaNXgWMjikKr
9IQtFM7X4VuOo4a6XVqkMackoAWXvsfaZjE1TuU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:20:42 2026 by rpki-client