This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
File:                     J8yUlEs4mAyi4IYqXfxE2GQEF88.cer (raw, json)
Hash identifier:          bYGg458rgirxKczMuJz1P3L7jbnL7ggOser26EDWruM=
Subject key identifier:   27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3C2F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:14:54 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328975
                          IP: 102.218.124.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15407 (0x3c2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:14:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3698401AF, serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:de:6a:5f:37:39:e9:16:0b:c4:6c:6a:94:
                    0c:35:9a:9b:00:7b:1f:25:54:86:39:a5:d2:42:26:
                    14:24:1f:24:f7:57:8d:6d:49:82:84:94:13:24:d9:
                    83:c8:93:57:74:7e:cb:d8:6d:88:39:89:c3:d4:41:
                    1f:37:5a:e7:9c:33:98:02:e1:bc:66:c0:b2:c0:5e:
                    da:ea:90:30:d7:6b:2a:8e:55:0f:95:18:20:15:9f:
                    b9:5a:9c:9c:64:50:59:b8:66:9b:02:93:de:66:5a:
                    0f:18:60:10:74:9f:a3:e5:e7:be:a9:0c:ae:4a:5f:
                    97:fa:01:22:9c:59:28:92:cc:72:a0:1c:3e:62:b1:
                    e6:ee:2f:1c:94:b2:91:23:72:51:d9:de:5b:f5:9d:
                    fd:63:de:fa:e6:ee:b7:14:45:89:c5:12:63:7c:27:
                    af:93:d9:85:6b:d0:12:a9:d2:6b:71:fe:e1:f4:86:
                    a2:bd:66:23:f9:4d:fa:ba:28:a3:02:14:e1:2f:ca:
                    75:37:9e:c7:55:92:4a:bf:17:b4:7d:b9:9b:87:ce:
                    6b:04:87:5c:e7:54:7a:68:7f:22:1a:08:3c:75:b3:
                    2a:3f:c8:79:c7:5e:07:cd:0e:4e:4b:6a:94:c4:3a:
                    1a:16:56:d9:20:31:43:b1:d8:ff:95:de:f8:53:35:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328975

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:8e:04:9c:fc:e9:6f:23:a1:68:06:6b:bf:d5:bd:c2:44:b8:
         44:a0:b3:14:00:21:d8:ab:f3:cc:fe:3f:46:27:1b:a9:09:fe:
         03:f4:29:bb:af:3c:08:c8:81:b8:d6:0d:eb:91:7b:c9:2d:6c:
         79:e1:79:00:46:08:34:f9:d9:bb:85:ea:3a:0f:ca:4e:04:c7:
         b9:91:a9:b7:a9:0b:88:3d:08:bb:17:a5:b5:4b:b0:ab:62:8c:
         25:b8:ca:7b:bd:e9:43:77:2c:02:b8:f1:af:25:b5:b1:07:9e:
         a2:ad:86:e3:7a:18:16:ae:eb:21:84:06:69:b3:ac:bc:2d:a6:
         86:3f:e8:4c:d2:27:74:56:44:2b:7c:7e:b2:51:77:47:2b:76:
         fd:1c:3b:cd:fb:c9:47:ac:ca:61:80:09:e8:a2:ea:90:13:73:
         73:9e:d2:a5:a0:04:3c:ea:34:e2:4a:d4:4c:0b:ba:ce:49:e4:
         73:34:e5:ea:db:54:fa:63:f2:ca:ca:dc:3b:49:37:90:37:67:
         d5:0c:92:b8:85:17:09:02:50:7f:31:bc:17:5c:6b:61:95:b8:
         94:b1:d4:b8:6b:8d:db:a7:21:c4:3e:7d:7f:74:3d:2b:14:5f:
         8d:4d:b1:77:42:91:38:ca:8c:0a:25:ad:a7:fb:57:02:de:86:
         81:ea:40:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:21:08 2026 by rpki-client