This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
File:                     GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer (raw, json)
Hash identifier:          uECVPS3paV+/rMDA8fJpk4dhnakLyBRLr7V286Br45M=
Subject key identifier:   19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       37B0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:16:52 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327741
                          IP: 41.77.80.0/21
                          IP: 2c0f:f3d8::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14256 (0x37b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:16:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F361935CAF, serialNumber=190945C50473976873EF254B4FA833BC31D9484B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:46:e3:58:10:94:5e:da:eb:be:e8:14:2a:
                    28:1e:e6:eb:a8:2f:26:41:fa:c7:c3:65:4f:06:ae:
                    91:f1:22:76:d6:bf:6a:bf:b9:58:86:64:57:d1:eb:
                    12:e6:4b:ba:9a:2e:2c:8b:e8:eb:0a:ee:fe:69:c7:
                    cf:96:1c:21:8f:0b:59:d4:1e:11:6d:dd:f6:16:e3:
                    89:55:0c:bd:a2:df:71:62:f2:47:bb:17:db:61:9a:
                    2c:a9:c9:1a:f0:af:72:24:53:17:15:93:bd:9c:13:
                    e2:8c:f8:29:71:89:a4:f4:87:f7:4a:0e:43:32:57:
                    c9:dc:b6:91:79:45:70:7e:84:1f:92:5e:c5:1a:01:
                    e7:e9:8c:cd:8c:33:91:09:b7:11:6c:72:40:c2:c4:
                    17:a9:a1:fc:ff:6e:14:99:82:f9:6d:a2:ae:bc:c8:
                    b8:02:4d:9b:dd:77:fd:aa:bb:5a:0b:ae:88:33:db:
                    2e:c0:10:a6:8d:2b:c2:0c:31:3d:99:cb:02:84:56:
                    33:3f:c6:7f:81:fa:ad:16:1b:4a:7b:03:a0:89:87:
                    cd:21:7a:cc:7e:82:db:ce:79:ef:fb:ac:45:06:d1:
                    e8:b5:17:80:34:3d:11:e7:f5:b2:c7:ac:3c:ef:fd:
                    79:55:80:e8:ed:75:0a:8f:d1:15:23:fa:c2:53:4c:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327741

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.77.80.0/21
                IPv6:
                  2c0f:f3d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:e5:a7:7c:42:d7:85:0d:9a:05:26:ea:f6:2f:bb:23:e3:83:
         e4:dc:e9:18:3d:11:4a:b0:49:d3:ea:41:f7:42:19:d4:92:07:
         9d:17:ec:7c:7b:86:c6:4a:98:ee:b0:b7:8e:60:56:9e:c2:08:
         9f:20:f7:54:c7:30:a5:40:c6:ea:fd:91:5e:76:f7:92:c4:18:
         5e:79:b7:71:f3:41:af:9c:f0:a6:e8:6b:99:ac:a4:d5:70:d1:
         14:90:d2:9c:d1:65:13:15:df:b9:f8:f9:51:95:42:29:58:86:
         4a:30:c7:32:e3:c9:51:71:4a:bc:1e:96:47:fa:3c:05:b6:7d:
         52:25:07:12:cc:43:4d:dd:80:b2:51:8e:4c:43:d2:b7:f0:c3:
         d1:06:a2:6b:ed:b8:e1:69:6f:76:15:b8:7e:78:de:3d:17:63:
         ad:c7:95:2c:5a:79:52:60:18:e1:28:5b:20:8b:80:68:b7:c3:
         52:da:3e:7f:23:86:de:ed:79:4f:29:b6:e2:aa:12:eb:38:24:
         e6:45:3d:01:28:f1:28:c0:af:94:81:d8:24:a3:3b:37:67:2d:
         61:9e:dc:b7:a2:99:6f:ac:1a:10:9b:d2:5f:86:57:6b:e8:0f:
         cd:c2:71:ed:46:7f:e6:77:6b:18:18:16:a2:9c:2c:f8:49:2b:
         5d:93:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:34 2026 by rpki-client