This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
File:                     EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer (raw, json)
Hash identifier:          CmJA+iXVkzsJKetxd1kly523mjNu0PbHddr56mOpqY4=
Subject key identifier:   11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3C1E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:12:33 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37428
                          IP: 196.15.12.0/23
                          IP: 2001:43f8:620::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15390 (0x3c1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:12:33 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3696A10AF, serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:22:24:b1:8f:72:b0:d0:51:7c:1b:54:24:
                    64:0f:a0:12:6a:c9:58:3f:0c:a6:e7:cb:29:f2:18:
                    27:0b:57:14:5d:a7:8d:29:87:f9:45:05:9d:aa:72:
                    02:9a:2d:20:45:d6:de:6e:7d:48:47:0f:98:fd:07:
                    e6:b6:18:f3:94:3c:4b:30:e5:b2:c8:89:fc:29:55:
                    27:03:1c:45:99:b2:d5:ea:96:92:7f:6d:c0:84:5b:
                    06:db:ae:34:c7:bf:5b:9c:fa:40:d1:7b:55:f0:68:
                    79:91:4c:3f:73:a4:ef:71:bb:0f:00:c3:90:23:40:
                    17:29:88:3c:12:aa:79:63:ac:91:17:5c:1f:6b:9f:
                    55:07:cb:e0:8c:4b:34:4d:94:c2:c9:bc:6c:51:6c:
                    79:65:8b:94:40:19:25:b0:43:61:a1:94:6e:4f:67:
                    5a:c8:be:54:0c:aa:34:68:60:b9:84:64:ed:79:13:
                    00:4f:48:9e:1b:83:85:ac:da:51:8f:95:c4:ce:28:
                    f8:02:c0:cb:2d:d1:f7:ae:6e:dc:b7:4b:f7:20:0c:
                    f1:83:c8:7a:fa:50:84:c4:11:bc:d8:0d:a4:1d:c0:
                    a4:e6:b1:98:41:48:30:bc:46:7a:ab:d2:f9:ec:80:
                    62:89:83:b8:d0:7d:14:eb:c4:08:89:10:d8:a6:1b:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37428

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.15.12.0/23
                IPv6:
                  2001:43f8:620::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:91:61:e3:69:36:35:58:8a:1a:7c:22:9d:fb:5d:a8:06:
         4e:dd:06:65:41:32:77:25:80:ed:fc:d6:5c:22:b3:18:e6:95:
         81:c2:de:a2:bf:c4:e5:73:be:c5:73:6b:90:30:f4:20:96:30:
         49:cf:1c:3b:4d:84:fe:a4:a1:cb:de:9a:03:a5:a4:f7:0e:36:
         62:69:0c:83:66:ba:71:df:78:86:c4:8d:e9:93:8b:38:19:65:
         83:a9:37:54:60:9a:63:19:3a:86:53:79:56:3d:92:09:f7:95:
         f6:81:83:17:21:ff:82:2d:c2:89:9a:49:6c:ce:ae:f1:ca:0d:
         c4:43:98:dc:0f:f8:b8:91:04:cd:c8:90:8d:cc:63:76:05:00:
         71:fb:20:ca:7e:8f:26:44:55:a7:4d:92:51:14:99:36:b5:56:
         2e:cb:6e:f0:95:38:36:0d:55:9c:7a:36:66:e9:7b:fe:ef:2e:
         ae:27:7a:c9:fc:84:84:a3:c1:3c:e2:dc:3d:6f:a8:57:fe:a9:
         fc:f1:b4:07:5e:d3:8f:5d:a8:9d:0b:f2:d9:50:0a:a3:b3:4e:
         af:3d:72:ea:0b:27:56:d8:fa:fe:86:c1:5e:64:6c:48:65:35:
         4a:49:f5:e5:e7:d2:c5:93:4e:02:ec:aa:6e:c1:0e:dd:58:07:
         3b:a1:37:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:09:09 2026 by rpki-client