This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/INQ_9eRM5MOe47-3ribe6wBBH9U.cer
File:                     INQ_9eRM5MOe47-3ribe6wBBH9U.cer (raw, json)
Hash identifier:          oTLZeLRMQr94r6ywy9kpq38NApca9bXJchiuJbldV0U=
Subject key identifier:   20:D4:3F:F5:E4:4C:E4:C3:9E:E3:BF:B7:AE:26:DE:EB:00:41:1F:D5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3A0B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:56:03 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328511
                          IP: 102.68.68.0/23
                          IP: 102.206.186.0/23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14859 (0x3a0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:56:03 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F365D370AF, serialNumber=20D43FF5E44CE4C39EE3BFB7AE26DEEB00411FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:33:75:cf:38:19:fe:89:9f:1b:be:64:2d:
                    2e:87:a5:05:24:2c:15:e5:39:79:32:dd:68:b7:23:
                    2e:cc:89:61:fa:f2:e9:10:61:d3:a4:26:13:57:9b:
                    4d:43:79:b0:8d:ee:ff:7b:b8:ca:56:8d:ba:aa:eb:
                    7f:6c:c8:50:53:b9:a1:9e:62:89:14:04:d7:54:c5:
                    9a:51:ea:e9:d5:7f:5f:6e:69:e1:1b:69:5c:63:2f:
                    d8:e6:35:bf:4c:a9:a2:d1:5d:03:83:be:ef:74:cf:
                    00:f4:bf:81:af:0b:c6:5c:79:25:34:6f:bf:1e:9a:
                    4b:f2:32:eb:63:8f:8d:9f:1c:c7:28:85:df:1e:d3:
                    1a:68:61:87:8f:5a:a8:c9:3a:9f:2d:8e:9d:c1:bf:
                    6d:77:3f:97:0e:3b:e9:36:ac:1a:99:48:8a:b9:e6:
                    e6:3d:d6:da:ea:7e:cd:56:b7:d3:fc:df:f3:4b:02:
                    52:80:60:28:6b:8a:32:11:59:76:1b:91:3a:96:ab:
                    6a:ff:a3:39:e7:c7:c4:31:83:79:8d:44:bd:65:49:
                    5c:a2:66:b3:21:2e:18:dc:2f:91:85:fd:68:3b:04:
                    39:e6:35:4d:d9:33:6f:f6:ee:90:52:ab:d0:5c:18:
                    3b:1b:0f:cb:f6:14:f7:31:51:63:c9:1e:d5:d8:a0:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D4:3F:F5:E4:4C:E4:C3:9E:E3:BF:B7:AE:26:DE:EB:00:41:1F:D5
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328511

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.68.0/23
                  102.206.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:48:4e:3f:e7:c1:d4:a8:f3:fe:74:7a:e7:c8:f9:7c:3b:11:
         00:bd:29:a6:70:3e:90:eb:d4:cb:21:d9:16:e7:50:b8:78:6c:
         7c:d3:c4:fd:ea:4f:ee:0a:4e:d5:bc:3f:87:57:a5:18:82:69:
         f2:10:91:c6:2b:12:30:24:33:ef:73:29:57:ff:44:98:a5:fe:
         62:24:78:0e:5f:e5:8b:26:d6:04:94:22:8c:97:6d:11:a5:63:
         61:c1:20:4e:67:6e:f7:44:f7:75:16:b6:97:54:9e:ae:53:3f:
         83:18:c0:23:bb:93:d8:8c:0d:ae:b2:3c:9b:61:34:16:1b:58:
         6c:14:d4:6f:bd:da:05:92:d4:47:63:0e:95:a4:03:5c:bf:20:
         ef:6d:15:03:ef:8b:bf:ea:b6:5d:f5:a8:8e:6c:c3:9d:ef:8f:
         c8:e4:f9:74:91:04:82:c1:0b:48:94:c5:8e:99:f6:9f:3b:3d:
         54:81:ac:3c:49:f2:47:1d:09:4c:e0:a5:d6:da:f3:59:10:02:
         c8:4c:1d:4a:95:0e:c2:2e:17:a3:42:e1:56:59:7e:c3:9e:31:
         be:4d:aa:5c:dd:c5:41:33:64:4d:91:ed:82:57:a6:2f:80:78:
         2d:fc:cf:da:1f:44:df:92:26:ee:9d:1e:dc:c4:bb:5c:c9:59:
         45:4a:83:88
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgICOgswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMTU2MDNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjVEMzcwQUYxMTAvBgNVBAUTKDIwRDQzRkY1RTQ0Q0U0QzM5RUUzQkZC
N0FFMjZERUVCMDA0MTFGRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLZjN1zzgZ/omfG75kLS6HpQUkLBXlOXky3Wi3Iy7MiWH68ukQYdOkJhNXm01D
ebCN7v97uMpWjbqq639syFBTuaGeYokUBNdUxZpR6unVf19uaeEbaVxjL9jmNb9M
qaLRXQODvu90zwD0v4GvC8ZceSU0b78emkvyMutjj42fHMcohd8e0xpoYYePWqjJ
Op8tjp3Bv213P5cOO+k2rBqZSIq55uY91trqfs1Wt9P83/NLAlKAYChrijIRWXYb
kTqWq2r/oznnx8Qxg3mNRL1lSVyiZrMhLhjcL5GF/Wg7BDnmNU3ZM2/27pBSq9Bc
GDsbD8v2FPcxUWPJHtXYoHndAgMBAAGjggMRMIIDDTAdBgNVHQ4EFgQUINQ/9eRM
5MOe47+3ribe6wBBH9UwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1RDM3MC85QTM0QkJGQTYxQkYx
MUVFQjNCODA5NzI0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NUQzNzAvOUEzNEJCRkE2MUJGMTFFRUIzQjgwOTcyNEFEOUU2RkMvSU5RXzll
Uk01TU9lNDctM3JpYmU2d0JCSDlVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAz8wJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAFmREQDBAFmzrowDQYJ
KoZIhvcNAQELBQADggEBAMRITj/nwdSo8/50eufI+Xw7EQC9KaZwPpDr1Msh2Rbn
ULh4bHzTxP3qT+4KTtW8P4dXpRiCafIQkcYrEjAkM+9zKVf/RJil/mIkeA5f5Ysm
1gSUIoyXbRGlY2HBIE5nbvdE93UWtpdUnq5TP4MYwCO7k9iMDa6yPJthNBYbWGwU
1G+92gWS1EdjDpWkA1y/IO9tFQPvi7/qtl31qI5sw53vj8jk+XSRBILBC0iUxY6Z
9p87PVSBrDxJ8kcdCUzgpdba81kQAshMHUqVDsIuF6NC4VZZfsOeMb5NqlzdxUEz
ZE2R7YJXpi+AeC38z9ofRN+SJu6dHtzEu1zJWUVKg4g=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:45:13 2026 by rpki-client