This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
File:                     GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer (raw, json)
Hash identifier:          uMj0LIUeuOq5sdj8i3hlEhLPMXoIYU5iP9gj9E2vX7U=
Subject key identifier:   1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3AEC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:28:06 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328275
                          IP: 102.165.120.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15084 (0x3aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:28:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36750E0AF, serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:44:a4:20:0b:60:45:f5:d2:0a:4c:92:ea:
                    f5:a0:78:98:5b:8c:04:0e:d4:97:fe:42:0d:6e:b1:
                    33:bf:2e:7f:24:f0:db:3c:da:12:c6:d6:d0:bf:45:
                    6b:df:05:4c:ab:8b:6d:13:b5:98:3d:76:2e:0e:0c:
                    f0:d3:fb:11:7b:e4:b8:74:d4:a0:b9:01:32:ba:2c:
                    ef:5e:a0:8e:f6:9f:c4:05:da:fd:d1:9e:45:4c:41:
                    71:a0:e3:58:ef:f6:cf:69:06:88:8e:57:82:16:31:
                    ba:72:aa:03:f8:42:96:95:bc:5f:71:a7:c5:fc:2c:
                    2c:0f:27:ee:9a:3d:e1:c7:14:7a:6f:d8:1f:d6:d3:
                    b7:50:f0:c8:fb:58:b6:ec:05:79:f9:32:9f:7b:3f:
                    65:61:49:0c:8e:4f:20:49:72:84:b0:a4:42:e4:71:
                    b5:ee:d6:ad:1a:ea:94:4b:c6:be:7d:c8:b8:eb:04:
                    a9:1c:c4:e3:fa:70:43:fd:04:e9:ef:02:a6:3b:b3:
                    da:93:f0:27:74:54:29:34:31:28:c2:5a:15:cb:46:
                    74:35:6c:b8:34:67:4a:ae:3e:d6:34:3b:92:60:1d:
                    82:c8:b3:dd:a1:99:4a:2c:54:d7:4b:de:07:a4:2a:
                    a8:4a:8a:bc:56:bf:27:2c:91:a1:99:51:da:c1:05:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328275

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:80:ac:f8:0f:24:0a:bc:32:04:92:fc:77:1d:8c:1b:e8:46:
         31:3f:ab:2a:85:7e:f6:28:cb:e2:42:02:82:a6:8c:1b:2a:70:
         e8:ca:c5:33:56:c5:d0:80:5d:f1:40:53:54:af:06:d7:e9:9c:
         22:12:e2:a1:d5:be:95:ee:71:88:2d:bf:c0:6e:21:17:b8:e1:
         25:85:3f:1c:a7:eb:64:7d:8b:70:03:e2:2a:60:d4:e3:86:58:
         fd:88:bf:37:ec:71:6a:bc:fa:76:d8:3f:c6:e9:62:6a:17:9a:
         57:d2:03:97:cc:eb:d3:50:ab:8a:67:3c:23:37:6e:93:dd:d3:
         a3:99:33:32:b8:67:95:49:61:01:02:43:42:90:6c:e5:a8:32:
         14:58:c9:81:d0:c3:cb:f5:45:61:2a:ab:06:1f:8f:7c:8a:1e:
         58:b3:84:b7:58:78:e5:aa:df:65:49:69:93:26:fb:7e:69:75:
         dc:6d:19:5e:93:8e:f2:1a:c8:39:31:83:c8:59:a2:7b:24:00:
         79:8d:60:66:43:68:7e:8b:6b:1b:80:55:f5:6c:ca:be:a5:ed:
         73:06:4c:dc:f9:fe:64:00:8a:32:6e:45:f2:8a:1b:d8:d0:8e:
         ed:51:c5:02:81:77:7c:5b:66:c7:fb:9e:06:15:61:77:d7:66:
         d0:59:bd:08
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICOuwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMjI4MDZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjc1MEUwQUYxMTAvBgNVBAUTKDFBQzI3MTFERTU2MDUxRTBDRDY3MDEw
NDFEMUQ4MjA0NzEwQkRERjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDK0kSkIAtgRfXSCkyS6vWgeJhbjAQO1Jf+Qg1usTO/Ln8k8Ns82hLG1tC/RWvf
BUyri20TtZg9di4ODPDT+xF75Lh01KC5ATK6LO9eoI72n8QF2v3RnkVMQXGg41jv
9s9pBoiOV4IWMbpyqgP4QpaVvF9xp8X8LCwPJ+6aPeHHFHpv2B/W07dQ8Mj7WLbs
BXn5Mp97P2VhSQyOTyBJcoSwpELkcbXu1q0a6pRLxr59yLjrBKkcxOP6cEP9BOnv
AqY7s9qT8Cd0VCk0MSjCWhXLRnQ1bLg0Z0quPtY0O5JgHYLIs92hmUosVNdL3gek
KqhKirxWvycskaGZUdrBBYGPAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUGsJxHeVg
UeDNZwEEHR2CBHEL3fUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3NTBFMC9GMUEwQkYzNEVCRDUx
MUVEQTRCQUE3MkE0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzUwRTAvRjFBMEJGMzRFQkQ1MTFFREE0QkFBNzJBNEFEOUU2RkMvR3NKeEhl
VmdVZUROWndFRUhSMkNCSEVMM2ZVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAlMwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmpXgwDQYJKoZIhvcN
AQELBQADggEBAG6ArPgPJAq8MgSS/HcdjBvoRjE/qyqFfvYoy+JCAoKmjBsqcOjK
xTNWxdCAXfFAU1SvBtfpnCIS4qHVvpXucYgtv8BuIRe44SWFPxyn62R9i3AD4ipg
1OOGWP2IvzfscWq8+nbYP8bpYmoXmlfSA5fM69NQq4pnPCM3bpPd06OZMzK4Z5VJ
YQECQ0KQbOWoMhRYyYHQw8v1RWEqqwYfj3yKHlizhLdYeOWq32VJaZMm+35pddxt
GV6TjvIayDkxg8hZonskAHmNYGZDaH6LaxuAVfVsyr6l7XMGTNz5/mQAijJuRfKK
G9jQju1RxQKBd3xbZsf7ngYVYXfXZtBZvQg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:06 2026 by rpki-client