This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer
File:                     EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer (raw, json)
Hash identifier:          nCNdf1n5V3+xiHcO90sWlcmMVl1T7Cw9SeVyaIuFkkk=
Subject key identifier:   11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3BF3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:05:43 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328492
                          IP: 102.68.143.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15347 (0x3bf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:05:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3692425AF, serialNumber=11E23E8B2C8BC39CFA27519820176ACB343DC846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:b6:5a:d2:1b:61:27:17:83:41:7f:a6:fd:
                    ef:99:cb:d5:10:d6:5a:db:b6:48:d9:e3:0d:37:ce:
                    e3:1b:1a:36:28:ad:f1:47:38:35:ae:f1:d1:c1:49:
                    ab:68:56:40:21:e0:ba:d8:a0:52:74:6b:4b:6b:f8:
                    ca:74:e4:60:6f:46:67:09:d8:19:e9:0f:b1:86:2b:
                    72:28:35:20:44:e6:21:37:b1:e2:20:6f:50:48:a2:
                    cc:06:17:83:3d:c5:7f:65:79:f4:8f:f3:22:07:15:
                    25:92:8a:48:6f:81:fb:78:50:6b:51:da:f0:db:ab:
                    18:ed:cd:0e:e2:32:83:57:9d:86:41:59:11:b3:b7:
                    93:88:62:a1:70:2b:9b:c0:d2:df:39:bf:d2:30:1c:
                    bf:04:3b:32:cd:fb:23:26:2e:c1:bb:15:0c:e2:f8:
                    28:72:9f:f6:51:ad:1d:ec:f0:ee:15:cd:07:cc:3d:
                    2b:de:fa:01:f2:96:81:67:85:57:91:98:34:35:22:
                    ab:a9:16:fc:6d:86:ff:58:2e:81:30:db:09:ee:24:
                    ba:8c:ae:3b:ae:8a:c1:4c:2b:be:42:31:93:8f:54:
                    75:bc:4d:9b:54:1c:2f:c4:74:fb:b0:6d:81:fe:8c:
                    e4:b0:9b:94:3e:90:26:97:0b:b4:05:97:a0:77:41:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328492

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:7e:33:d7:fe:4b:42:56:aa:2f:62:2b:9b:96:06:56:e2:15:
         14:fa:e4:06:7c:a5:12:07:56:bd:52:21:3e:7a:b0:92:ea:14:
         5a:8c:2c:a9:42:b7:df:46:b2:07:36:fd:a9:b9:fd:c7:74:e7:
         87:74:56:ce:a1:8a:e7:49:98:74:7f:8c:a9:dc:02:42:bc:1a:
         f2:86:57:5b:17:5e:a1:75:42:c1:86:e5:69:12:79:01:7a:ee:
         70:af:32:75:51:a1:7e:9a:57:30:61:ff:12:13:be:a9:c1:4b:
         72:01:e6:1f:5a:dd:53:ab:63:5c:d4:70:3c:04:7b:9d:40:26:
         dd:ab:09:15:ea:36:f0:e4:91:51:49:0f:d8:78:3b:e0:20:44:
         c1:d4:99:a2:7e:e9:94:2d:29:42:03:5c:f4:69:59:e2:70:c9:
         38:f6:95:3b:75:a4:bd:b1:33:23:0f:fc:72:9e:6d:97:25:cf:
         6b:8d:72:18:9d:45:1b:75:84:9d:b6:3d:4e:dc:10:6f:f9:a0:
         d0:bb:45:50:6c:cd:ab:8e:27:4a:48:37:77:74:bf:35:5a:d5:
         d9:67:cc:9c:1f:72:22:2f:ff:dc:ec:30:b4:1e:22:05:eb:10:
         5d:49:81:da:79:cc:8e:11:6e:1d:da:2e:f1:85:5b:21:a8:2c:
         bc:e3:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:40:14 2026 by rpki-client