This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
File:                     GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer (raw, json)
Hash identifier:          aYzLOlA4rkszr51O2BS4xB8WLSd9DCfZJcJXH14SLD0=
Subject key identifier:   19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3B79
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:48:21 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37539
                          IP: 41.207.252.0/22
                          IP: 2c0f:f8e8::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15225 (0x3b79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:48:21 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:e9:86:e9:76:49:5f:f3:45:e2:e8:06:90:
                    43:e9:ba:19:c0:c0:ec:45:92:fa:d7:65:d7:b8:9a:
                    f0:9c:99:f1:70:70:8d:79:12:ee:18:ce:85:26:21:
                    e3:54:5c:29:65:5e:a4:cf:ea:16:44:22:f5:fa:0a:
                    c4:c4:80:65:1c:98:9a:09:95:bc:3e:20:d6:7e:cb:
                    f6:92:d8:fc:95:b6:ab:c5:c3:dc:87:39:6f:12:0a:
                    30:83:0b:75:39:88:6c:53:45:bd:a6:84:0c:70:73:
                    00:b2:93:60:6f:24:9a:03:ed:77:a4:34:6c:80:98:
                    e0:be:3c:95:08:7e:52:66:44:33:a8:f1:e2:da:60:
                    34:de:6a:1c:81:d2:95:18:ae:32:9d:5b:50:1c:46:
                    ab:98:a3:a8:4d:91:b4:ee:15:ba:85:bb:4d:d4:ef:
                    8e:a6:83:9f:27:0a:be:0e:a3:ef:af:b1:2d:1d:88:
                    f9:74:29:06:0a:fd:b1:7c:49:5a:03:16:4b:c9:93:
                    16:ff:2f:b8:1f:31:8d:10:01:b4:36:b6:1b:d9:b5:
                    79:1e:5f:ac:f1:11:f2:46:29:bf:ba:08:00:4c:84:
                    9d:24:91:6c:d3:66:54:e0:14:ff:3f:a4:82:1e:5f:
                    c0:24:c6:f3:b6:27:3b:a9:b7:bb:d1:af:db:c6:70:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37539

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.207.252.0/22
                IPv6:
                  2c0f:f8e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:58:f3:43:47:02:ca:1e:33:c6:89:e3:32:d7:2a:9b:a4:a1:
         dd:74:73:07:82:f8:37:26:44:50:85:d6:13:4e:76:7e:7f:44:
         a3:d1:d5:81:68:99:d9:d6:63:14:02:37:9f:86:bb:3c:27:6e:
         ba:d6:a7:37:a8:c5:58:9f:a2:07:8f:d2:80:73:21:01:62:ee:
         72:f6:eb:e5:47:8b:21:04:ee:fe:69:87:76:a6:9e:58:cc:6f:
         70:0e:ec:03:7a:a9:aa:32:b2:20:ae:03:86:df:ff:dc:4b:5a:
         27:a6:28:02:a9:f4:06:9c:5a:1f:91:15:30:f7:20:82:be:b4:
         1d:dd:61:03:42:9c:e0:41:e1:a5:17:5b:72:83:2c:2d:47:5b:
         09:7a:ab:9c:e7:08:fa:7e:6b:23:b0:9c:c5:25:01:66:ae:ea:
         5b:8c:58:be:e3:d8:a5:83:98:e3:b9:2c:91:35:33:87:44:7b:
         64:d2:f0:7d:7c:0e:c3:c4:8d:e2:a3:b1:fa:85:45:2a:62:79:
         25:75:8a:39:cc:37:5c:fa:a1:b1:de:8d:17:08:6d:aa:29:f0:
         77:62:cd:a4:08:69:c1:3b:a1:18:d9:29:fe:9e:83:66:15:42:
         a8:64:64:1e:34:ec:84:d7:c5:af:8d:e9:59:2b:37:77:f3:3e:
         52:da:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:17:47 2026 by rpki-client