This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
File:                     B0rky8vOb02Yhv7yEVKxOmrac9Y.cer (raw, json)
Hash identifier:          yhk1rbWhuc9ndYT2lYrPVO7MJb76vFKTaC5J2OJo2Y4=
Subject key identifier:   07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       39E5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:50:18 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37511
                          AS: 327777
                          AS: 328013
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14821 (0x39e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:50:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3659F9CAF, serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:25:fe:60:ff:de:f0:9e:3b:e3:b2:b2:6a:
                    84:1f:f8:39:4a:b5:57:30:d7:d5:0d:de:cf:79:ba:
                    03:f1:df:96:c2:9c:63:ee:74:2c:17:c6:bd:12:53:
                    1e:1d:03:23:df:59:f5:4b:ca:8e:5e:68:0d:0f:64:
                    ea:82:bf:3a:58:26:aa:32:46:b2:fe:c9:71:3f:55:
                    58:a3:5a:a2:ac:a7:ef:9a:05:ef:dd:e2:1e:4d:a5:
                    25:07:b0:b8:a7:80:12:ae:6a:72:c9:53:8d:67:e4:
                    cb:b0:11:ea:9f:c4:ea:23:c7:98:cc:26:5b:64:ef:
                    12:a1:17:59:17:86:ca:32:bb:ab:e5:fc:5c:78:5c:
                    7a:0a:a5:0d:83:54:36:b5:0a:5e:48:ec:39:dd:0a:
                    26:74:e7:46:1f:66:2c:d2:85:25:1d:42:2a:80:c6:
                    04:75:6f:73:d2:fc:5b:f0:f7:14:1b:26:3c:f0:fd:
                    a5:2c:8a:5f:12:b2:00:a3:6b:c6:17:78:42:01:95:
                    99:90:38:a1:5b:4f:68:ed:62:69:44:85:46:b8:69:
                    ee:83:81:f1:2c:63:f0:30:92:44:f9:3a:89:44:18:
                    dd:1c:22:e8:e8:6e:58:fb:34:35:50:56:fa:5f:44:
                    4d:a2:d5:e7:b5:df:03:91:b6:b8:e1:1e:b8:f4:f8:
                    c8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37511
                  327777
                  328013

    Signature Algorithm: sha256WithRSAEncryption
         13:e6:a2:5a:37:9d:90:a6:96:79:d4:16:48:21:b7:04:38:73:
         aa:8d:fc:83:81:a5:4b:e5:84:d7:45:3e:17:ad:2c:75:0f:f9:
         16:38:fb:92:e8:f1:30:54:c9:62:2f:56:7a:27:b4:5a:e9:13:
         a9:76:f0:a0:ef:a0:75:4c:d6:4f:5c:89:af:09:61:63:99:23:
         9c:ee:b7:52:d3:1a:d8:a9:92:d1:3a:a8:49:d1:64:14:3c:77:
         08:c5:0b:3f:4a:72:76:e1:33:71:9d:3f:64:ce:fd:61:bb:8e:
         1f:ce:45:ea:a2:87:51:96:c0:9c:56:06:cb:0c:bb:86:2a:e7:
         08:a3:00:78:d7:fc:e4:59:76:49:27:85:9e:57:85:5c:40:ba:
         6b:db:f7:96:ab:49:99:e6:3f:fc:18:7c:a8:3e:e8:90:41:de:
         11:4d:7a:d4:41:9e:59:7e:7b:69:51:3a:53:de:13:74:0e:fd:
         d5:45:58:89:fa:cd:7f:a5:e2:1f:6f:54:e5:64:54:28:82:87:
         df:96:94:ed:60:7c:4e:7f:fc:b6:a0:58:6b:8a:8b:bb:69:25:
         95:bc:72:04:3a:3d:2e:d7:06:31:9f:12:b0:5e:a2:c2:4f:65:
         93:99:b1:3e:f2:1d:3f:a6:6f:ca:df:6f:a8:1b:b8:61:99:cc:
         1e:42:12:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:06:58 2026 by rpki-client