This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
File:                     JV9qID5NQpmXaROm9i3oxI7sk70.cer (raw, json)
Hash identifier:          XAEYoRrZqsZ3RzJhGKqiVjIL83pQ1rPb7uKKokldtWY=
Subject key identifier:   25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3890
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:56:58 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 36976
                          IP: 41.223.164.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14480 (0x3890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:56:58 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F363460FAF, serialNumber=255F6A203E4D4299976913A6F62DE8C48EEC93BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:d0:2d:64:92:58:8e:c7:28:1e:b0:22:92:
                    64:08:32:ca:f0:d4:4d:44:79:cc:1c:10:1e:41:8e:
                    25:02:a2:a5:cc:bf:9d:e5:20:85:eb:ff:89:e8:68:
                    d9:3b:35:54:cd:ce:56:a3:ad:1b:b8:14:a7:ac:fc:
                    39:c9:18:ee:65:e3:4e:3e:87:6c:c6:b6:53:3b:37:
                    be:f0:1a:88:e0:6f:3d:ea:b6:d0:73:00:d7:1b:40:
                    d0:f1:40:e5:fa:79:d3:d1:f9:1d:c5:3a:09:e9:26:
                    1d:78:dc:04:0b:a1:94:34:27:a0:20:96:cf:0a:64:
                    14:1f:e8:75:6f:7d:90:60:fd:0d:54:04:4e:10:f1:
                    0b:a7:d1:d4:c0:ad:e3:de:e0:85:e7:c5:92:1b:d3:
                    5a:47:e9:16:6b:18:2a:1c:6b:b7:1d:af:15:9c:fa:
                    40:d5:4e:61:88:f8:ab:d5:e4:91:9b:b9:15:c9:73:
                    81:de:3f:8f:35:f9:14:f3:97:b4:a1:03:a8:d4:92:
                    7c:9a:79:a1:ae:cb:fa:c6:84:cf:f0:4e:ca:36:dc:
                    c1:91:35:db:97:24:76:e0:7e:79:93:b8:9d:57:c0:
                    96:00:35:51:71:d6:28:2f:25:9a:80:60:6c:f9:8f:
                    9f:4e:9e:f3:5e:52:05:ce:23:b0:25:8e:58:e9:52:
                    ec:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36976

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.223.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:f9:f0:57:31:4d:0c:a9:f5:52:d3:5b:b9:8d:4c:54:1d:bc:
         1c:52:71:e7:ef:91:8b:3c:01:1e:50:98:aa:31:97:68:06:0d:
         b9:c7:53:eb:5f:30:60:cd:ea:26:0f:6a:0d:83:81:60:bd:49:
         a3:00:08:a5:67:4e:0b:fb:6a:37:c9:05:13:d0:3e:34:05:65:
         7d:d9:88:a3:51:18:56:a1:93:8b:fc:d7:81:79:ff:7a:95:87:
         25:c6:9b:aa:34:88:3e:14:b4:fe:31:44:9e:99:80:5d:9a:48:
         94:f0:e8:5f:4c:4a:03:a7:6e:58:1f:09:c5:84:53:79:6f:07:
         37:cd:8e:7c:16:23:a6:5b:fe:86:8b:c3:4e:a2:7c:7c:a5:fe:
         69:4a:a8:aa:14:84:99:23:aa:3e:7e:36:d9:20:27:40:77:d8:
         db:02:74:be:2e:7b:c2:f7:3c:63:eb:e0:42:cc:65:bb:67:9e:
         09:87:bd:f5:6a:4f:f9:d7:14:10:ae:3f:0d:01:ea:5f:83:b9:
         fd:69:62:db:0f:98:83:d0:d7:c2:1b:78:73:f4:94:f5:2c:e1:
         4a:da:45:3e:fe:7f:28:0a:66:3e:7e:72:da:72:d2:55:e3:51:
         59:7a:8c:d7:bb:de:b6:3a:ff:7c:c2:73:82:81:76:33:62:cd:
         30:1d:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:18:42 2026 by rpki-client