This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
File:                     9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer (raw, json)
Hash identifier:          8Q7dfb+MY3OIu2zrcqgrVhY5FVjulZOhQ0cRJrWJlJg=
Subject key identifier:   F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3B8A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:50:51 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328761
                          IP: 102.221.112.0/23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15242 (0x3b8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:50:51 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36848BCAF, serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:01:07:be:f3:98:b8:bc:85:a1:15:78:d0:
                    58:94:3c:5c:f4:ee:ce:da:23:32:0d:02:e0:83:ac:
                    c9:8c:5d:8a:f5:24:3b:5e:2f:23:0d:ac:55:30:6a:
                    d3:11:ba:b7:b6:08:ca:10:be:eb:ed:04:7b:3b:ed:
                    08:07:33:97:3b:21:72:03:d9:46:ca:a3:59:51:d2:
                    c9:6a:cd:13:64:b1:5a:4c:8a:b9:f3:c7:61:97:b3:
                    cc:58:46:8b:4e:05:15:85:32:4f:35:55:94:c8:21:
                    88:6a:40:ab:71:d8:e4:33:41:54:14:42:1a:52:e6:
                    09:ae:d3:11:8c:fd:72:7d:95:4e:fd:d2:c8:fa:11:
                    58:72:be:59:da:e9:ca:86:72:39:9f:40:1b:66:db:
                    c3:bd:bc:63:6b:62:3b:a0:24:86:38:d9:86:c5:6d:
                    67:a5:f8:cc:cc:65:4d:17:d0:a5:35:44:8a:b6:dd:
                    86:e3:01:3d:ae:97:6f:fe:70:f2:a9:f8:21:90:b4:
                    1c:5c:11:68:f3:f9:a1:61:56:10:47:44:db:ec:59:
                    c9:4e:e9:a4:fa:c4:05:d4:0d:b3:da:31:bc:63:c6:
                    f6:e6:ca:7d:2d:37:91:c2:62:99:c0:db:3c:61:5d:
                    83:0e:16:24:ac:7c:b8:8c:bb:a9:79:f1:f1:f9:9d:
                    69:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328761

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:94:c1:08:1f:cc:3e:c3:10:8c:62:ff:9e:f3:65:c6:3e:ae:
         20:49:a8:0c:1d:28:19:68:e5:bc:fc:f1:76:ad:97:e6:6e:3b:
         4c:99:e4:62:bc:e9:fa:9e:97:f7:3a:4f:d8:97:ea:ed:c3:c6:
         6d:4a:c9:6f:bd:3b:5e:49:fa:e9:cb:d8:09:9c:ef:5b:e4:7a:
         96:f7:d7:00:e3:e5:03:7e:dd:85:80:32:fe:3b:02:0c:6a:ea:
         fe:9d:5a:8b:53:71:63:72:0a:8c:96:a1:34:3e:a7:b5:fc:3f:
         35:3a:b1:77:ae:f4:ed:c6:75:62:d2:9b:f0:96:5e:88:b4:05:
         55:29:95:79:4f:19:97:cb:61:bf:2b:39:a0:0a:c0:eb:21:1a:
         25:53:62:d4:16:d1:65:14:92:cd:26:51:d7:f0:76:f5:f8:45:
         4a:fe:c0:7e:a3:97:1f:84:fb:07:2d:b7:81:67:9a:2f:a8:19:
         18:20:fc:0b:71:11:b1:5f:6d:1f:49:6a:c5:85:f6:71:c7:18:
         79:5a:b5:a3:2b:b8:10:7b:dd:6c:33:d6:8c:b1:1d:c5:dd:22:
         8c:7e:16:7d:9b:69:1a:17:63:58:a2:df:6d:c4:d6:99:64:78:
         2b:b4:96:ad:09:3e:e3:ad:3d:b3:b2:e5:58:c3:d1:e2:d5:f9:
         53:bc:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:19:16 2026 by rpki-client