This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
File:                     JRG61AeNRnKs9DJCmSGM5IVdA50.cer (raw, json)
Hash identifier:          O6HqTxlQyOGBdJikgvFi49jBA3OLzvy5iISZ6SkKkL8=
Subject key identifier:   25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3F40
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 05:19:07 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37680
                          IP: 102.132.128.0/17
                          IP: 102.223.148.0/22
                          IP: 154.0.0.0/20
                          IP: 2c0f:f9a8::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16192 (0x3f40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 05:19:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36FC6C8AF, serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:f8:a0:db:61:b3:68:fc:55:d2:31:11:8e:
                    d9:8d:83:0b:25:8a:e6:5d:f7:b4:43:ba:16:1c:71:
                    ae:36:17:c0:1e:49:40:9a:70:d6:a9:7e:81:4f:26:
                    64:24:68:50:19:b8:77:19:31:ab:c6:19:0e:57:28:
                    a5:53:d5:e6:c3:7c:0f:8a:3c:94:8f:fd:e9:bb:be:
                    44:e2:14:21:88:16:03:69:3e:10:64:b3:d7:bc:62:
                    6c:3f:73:9f:97:5d:82:e6:2b:94:32:7d:0a:21:0b:
                    20:67:44:73:f1:bf:e9:ac:4c:2f:e5:40:fa:8f:31:
                    14:38:2f:db:92:90:7e:8c:f6:4b:28:1f:aa:c6:41:
                    9d:51:6e:61:32:79:8a:9d:93:4f:d5:31:9d:79:48:
                    87:41:21:46:2f:a8:69:87:20:c8:13:1a:45:66:33:
                    ef:30:91:41:92:0c:02:b2:bb:2c:c2:8a:38:c0:1f:
                    42:c4:3d:7f:2d:d3:fc:49:e3:e6:93:82:8c:9e:a1:
                    44:7b:a4:53:6e:d2:b0:03:75:cd:bf:52:98:ba:c9:
                    d6:30:cf:4b:79:32:85:1c:74:92:1c:00:a1:f2:6d:
                    6d:f9:3b:f7:5c:84:c9:c7:5e:7e:64:e3:c8:b3:c2:
                    08:59:b7:70:35:42:a6:8b:eb:09:aa:f3:c0:30:29:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37680

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.132.128.0/17
                  102.223.148.0/22
                  154.0.0.0/20
                IPv6:
                  2c0f:f9a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:75:75:a0:7f:72:b5:e1:56:f7:6e:e7:fc:a9:d8:88:25:21:
         f6:7c:5a:6c:19:c3:cd:12:e0:93:68:7b:c8:01:b7:b4:dc:f1:
         68:65:44:5f:2f:25:5a:d6:9a:72:bf:37:cc:e8:3c:aa:f0:47:
         0e:f7:ef:3b:f8:d0:16:28:d6:f6:da:89:0c:50:b9:db:e9:a9:
         5e:10:a3:e6:d2:ba:29:ee:bf:3b:47:3d:c5:64:29:95:a3:1b:
         8a:fa:1b:9d:a5:e3:45:aa:75:ba:6e:95:3c:4f:a8:c5:ee:98:
         cb:7e:aa:d7:a1:9d:d0:b0:d1:ab:d4:fd:4b:76:e3:84:14:20:
         56:bd:a9:e2:8e:ce:6e:84:6a:6b:6c:90:d8:f1:10:97:bf:0c:
         b2:3e:9c:91:a6:46:14:59:6b:b4:45:4e:d7:18:a2:a9:88:b8:
         5b:da:a0:a5:3a:44:a8:e5:49:12:c6:e2:34:11:ed:71:1b:d3:
         b7:7e:33:55:aa:da:50:af:a2:1e:23:45:5d:52:54:4b:3e:bd:
         80:b3:c8:74:0c:23:11:20:c3:47:9c:69:2a:53:4c:a4:8e:af:
         e4:c9:42:b5:b1:9e:e3:75:85:bf:d8:8b:57:f5:d4:0a:66:0d:
         2a:39:7f:74:ff:fa:5e:09:89:ec:76:5b:e9:68:d7:87:46:08:
         f4:c2:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:28:43 2026 by rpki-client