This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
File:                     CbNOEzY507TuNRYTuKYNaxkCrWM.cer (raw, json)
Hash identifier:          Xzv33TVehoTzTecgBMAuzGylcz6pcKJfFaI0FwSe69I=
Subject key identifier:   09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3BFF
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:07:44 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328586
                          IP: 102.22.232.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15359 (0x3bff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:07:44 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:2d:d2:9b:ab:e3:e7:1c:25:aa:c5:df:13:
                    35:02:17:05:8a:4b:2b:ad:68:83:6e:4c:b4:d4:41:
                    05:c7:ba:e9:99:91:86:4d:3d:5f:0f:38:bf:33:c8:
                    f6:8f:5c:aa:53:fa:c4:ff:51:15:4c:cd:a7:62:87:
                    fa:f9:22:a5:57:a0:bc:2b:73:4c:ba:27:93:6f:5d:
                    6f:5a:b1:42:15:e0:9c:c9:24:4c:e6:76:f7:ae:cb:
                    96:c0:f0:5e:ae:c0:ef:b7:4e:f5:a4:2b:a0:f1:f2:
                    35:81:02:08:0c:ce:d5:ba:19:6c:52:bf:d9:a8:3a:
                    e5:8b:64:08:4b:b3:eb:28:51:9d:43:d2:ec:43:12:
                    39:9c:1e:96:6d:8c:ac:4d:df:1e:be:82:83:28:2a:
                    99:48:34:97:a3:f4:0b:3e:76:a4:b9:0d:ed:2f:db:
                    a5:93:1b:80:68:1c:37:5b:64:13:06:2b:e1:2c:10:
                    4d:d4:16:2e:ad:c2:a3:d5:ed:50:fb:7f:1d:79:e9:
                    5f:fd:67:f7:31:eb:09:b5:a1:84:10:d5:49:f5:31:
                    41:6d:9b:df:bc:94:53:64:41:eb:79:1a:7f:56:0e:
                    d7:69:76:aa:bd:db:ad:82:34:f6:65:1d:8a:63:93:
                    e8:66:5f:07:e2:35:31:3a:7c:e6:6c:46:77:b7:86:
                    06:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328586

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:b9:0e:93:a6:ac:b8:48:36:53:4d:5c:72:af:3a:17:51:
         61:dc:7b:54:ea:cb:0a:61:a3:7f:da:d1:25:b5:19:77:73:62:
         ff:f1:81:85:cd:4b:bc:63:75:b8:41:7c:0e:40:9e:6f:e0:22:
         91:e0:8b:76:93:09:60:0c:6d:cc:8f:80:5e:40:ff:db:f1:da:
         7a:73:35:73:a9:91:57:62:ba:c2:b1:e6:56:16:8b:0a:ef:65:
         a1:92:05:8d:25:eb:da:05:de:dd:7e:ce:d8:bb:09:d9:6b:29:
         9d:5d:d9:08:f7:ad:68:a9:58:d3:c1:15:08:61:97:9b:2f:ce:
         6b:d5:be:a9:01:b0:5b:e9:bd:35:e1:9f:ea:68:ac:1e:6d:67:
         89:6d:61:25:4e:1b:62:a4:2b:96:c3:81:57:33:25:19:19:ff:
         ab:77:cb:5d:2c:2d:2f:cc:e8:9b:fc:a4:9b:a0:85:0a:53:7b:
         52:25:50:7d:a9:3b:b3:47:57:f9:6c:db:be:56:ac:7d:35:07:
         5e:a7:84:99:29:a3:f0:23:72:47:aa:2f:38:2a:58:d3:8e:32:
         ee:09:76:95:e6:c9:94:9f:56:0f:ef:fa:92:52:46:ab:10:18:
         a8:b9:86:59:f4:51:7a:e1:07:cd:c5:43:69:b2:e0:bd:5b:3a:
         ec:bb:9d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:05:40 2026 by rpki-client