This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer
File:                     Bevs4xKZG-PE6ppU-CJmlQVGg7Q.cer (raw, json)
Hash identifier:          gdQPF+Vb6C4mlmKnk2wV2MTIG4yL1wbA8zCtGFiDdC8=
Subject key identifier:   05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3E2D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:33:01 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328192
                          IP: 196.6.229.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15917 (0x3e2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:33:01 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36D65B9AF, serialNumber=05EBECE312991BE3C4EA9A54F8226695054683B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:da:9c:cd:82:60:4f:c6:8f:6d:86:1b:bb:
                    9d:5e:bb:cf:9e:19:aa:59:70:38:2d:11:67:cd:d1:
                    f8:55:99:59:de:38:ca:da:eb:8f:60:5c:08:03:0c:
                    1d:aa:9e:85:0d:16:26:05:3f:d4:9f:b0:0c:27:1f:
                    26:c7:18:40:98:a7:53:62:21:97:64:38:db:e5:7b:
                    b7:39:9f:a5:b4:8e:0b:46:04:56:1b:54:e0:e0:21:
                    13:4e:46:da:aa:35:76:d9:a5:fe:58:82:21:3c:97:
                    fa:51:8d:fe:28:6e:c0:47:97:d3:34:cb:e8:ab:94:
                    4f:aa:9b:2f:8b:d3:fc:a9:bf:53:58:1d:c7:a0:5b:
                    f0:50:53:36:b4:63:f1:f8:5a:96:b4:6f:4c:de:75:
                    e2:a4:bb:ab:17:13:86:80:0c:45:d4:e4:99:c8:d6:
                    49:a7:6c:96:5e:42:ad:83:94:d9:c8:30:a5:20:7c:
                    15:68:bd:66:42:d3:62:a7:42:57:96:00:d8:bc:ca:
                    cf:42:55:88:70:cf:e3:af:f0:93:06:0d:94:b6:17:
                    0f:c9:ca:c3:2e:54:89:fb:fb:00:de:23:13:ee:11:
                    7d:f3:7b:bd:d1:26:09:10:59:12:42:7b:74:8b:2e:
                    62:64:a3:b1:cb:7f:cb:db:af:70:37:9b:5e:6f:1b:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EB:EC:E3:12:99:1B:E3:C4:EA:9A:54:F8:22:66:95:05:46:83:B4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D65B9/75C6F8D63F4611EF9CAD4D6C762E951A/Bevs4xKZG-PE6ppU-CJmlQVGg7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328192

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.6.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:4a:2e:23:c7:0e:b0:78:0b:2c:76:19:f2:9d:ab:cc:ea:dd:
         3e:65:01:e6:f1:26:ae:7b:3b:a1:8f:66:c2:80:1f:d2:03:5c:
         f2:fb:7a:cb:ff:07:51:bd:f5:11:04:93:0b:0c:05:35:ca:25:
         23:69:b2:cd:5a:8a:33:66:c4:00:3a:02:bd:ea:61:16:cd:89:
         39:ae:69:8f:77:83:a0:b2:a4:b0:45:b0:98:f6:d1:11:e5:fe:
         db:06:8c:b7:b3:f7:0c:74:d1:31:5b:df:b8:6e:4c:f2:94:a6:
         3b:96:f9:56:ab:b0:33:f6:71:a9:10:c6:b1:cc:6b:e8:ea:3c:
         ed:5c:37:26:c3:20:49:0b:6d:b6:ad:46:7c:ec:4c:c8:2a:94:
         c5:3c:3f:dd:71:c6:14:a7:a7:ba:32:7b:40:28:16:05:95:53:
         7a:3d:63:e4:8e:42:1b:ef:7c:f7:30:30:f6:5a:9c:38:e9:d0:
         7f:e3:16:25:3b:7f:31:26:11:44:87:9b:ca:7d:ff:45:11:3f:
         56:86:3d:77:f0:3c:19:f7:72:ea:04:5f:57:64:18:87:da:af:
         38:3c:64:90:d2:3f:76:28:2a:cc:83:71:fe:8f:31:09:fc:f1:
         a3:07:2a:14:50:a7:25:22:be:98:71:53:3c:bb:20:7e:2f:de:
         c8:62:08:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:44:43 2026 by rpki-client