This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
File:                     L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer (raw, json)
Hash identifier:          DxWvRB16Wk9a+sMMKcedSMXnFK/ZSR1ECa7TviGBJW8=
Subject key identifier:   2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3B1F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:35:13 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 3741
                          AS: 6089
                          AS: 6351
                          AS: 10393
                          AS: 10474
                          AS: 12258
                          AS: 20011
                          AS: 27598
                          IP: 41.77.104.0/21
                          IP: 41.86.96.0/19
                          IP: 41.132.0.0/14
                          IP: 196.1.8.0 -- 196.1.14.255
                          IP: 196.1.16.0 -- 196.1.25.255
                          IP: 196.1.32.0 -- 196.1.51.255
                          IP: 196.1.74.0 -- 196.1.86.255
                          IP: 196.1.103.0/24
                          IP: 196.2.16.0 -- 196.2.63.255
                          IP: 196.2.128.0/19
                          IP: 196.4.160.0 -- 196.4.162.255
                          IP: 196.6.240.0/23
                          IP: 196.12.16.0/20
                          IP: 196.14.0.0/16
                          IP: 196.22.160.0/19
                          IP: 196.23.0.0/16
                          IP: 196.26.0.0/16
                          IP: 196.28.8.0/24
                          IP: 196.28.16.0 -- 196.28.47.255
                          IP: 196.28.64.0 -- 196.28.223.255
                          IP: 196.33.0.0 -- 196.39.255.255
                          IP: 196.41.128.0/19
                          IP: 196.44.192.0/20
                          IP: 196.45.96.0/20
                          IP: 196.208.0.0/13
                          IP: 197.80.0.0 -- 197.103.255.255
                          IP: 2001:4308::/32
                          IP: 2c0f:fc00::/27
                          IP: 2c0f:ff40::/26
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15135 (0x3b1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:35:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367B216AF, serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:95:dd:8c:98:03:37:b7:03:51:38:98:05:
                    bf:17:bf:32:e9:9b:7c:14:f5:ac:07:e7:51:6e:92:
                    f8:e6:2d:99:3b:87:ea:4b:db:27:f0:14:8c:e9:d7:
                    87:f3:3c:b1:ba:22:14:c2:07:c2:3d:cb:37:88:22:
                    9f:2e:3a:78:1b:65:c5:93:3f:9e:f3:73:cc:b9:8e:
                    db:4b:ca:f2:ea:6a:ba:c7:b6:ab:92:bc:b6:cd:c0:
                    dd:2d:f3:3a:aa:93:58:79:ba:12:8c:cb:41:41:a0:
                    1a:24:2e:84:a3:59:63:1c:ce:60:21:21:51:73:65:
                    a3:8b:a4:fb:21:1a:2b:bf:9c:52:49:63:9b:f2:a8:
                    34:06:0a:37:f2:ab:4c:b2:12:de:b2:97:c2:a1:c9:
                    32:ec:49:61:ff:f4:2a:5a:b7:ca:29:e7:80:ac:53:
                    cf:6c:4f:f3:dc:73:87:9e:23:21:7d:9e:36:72:9e:
                    47:2f:92:2e:e4:ad:3e:73:8d:30:b3:95:fc:ee:30:
                    53:a8:6e:2e:44:70:b9:bc:b8:6b:5a:27:d0:de:f0:
                    31:33:f4:05:30:12:be:c6:20:17:03:e1:4b:10:58:
                    e0:79:75:d3:c0:7b:d0:20:1a:4a:98:94:04:22:82:
                    6e:1a:c4:c0:dc:74:43:b1:b7:11:05:92:88:7c:f2:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3741
                  6089
                  6351
                  10393
                  10474
                  12258
                  20011
                  27598

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.77.104.0/21
                  41.86.96.0/19
                  41.132.0.0/14
                  196.1.8.0-196.1.14.255
                  196.1.16.0-196.1.25.255
                  196.1.32.0-196.1.51.255
                  196.1.74.0-196.1.86.255
                  196.1.103.0/24
                  196.2.16.0-196.2.63.255
                  196.2.128.0/19
                  196.4.160.0-196.4.162.255
                  196.6.240.0/23
                  196.12.16.0/20
                  196.14.0.0/16
                  196.22.160.0/19
                  196.23.0.0/16
                  196.26.0.0/16
                  196.28.8.0/24
                  196.28.16.0-196.28.47.255
                  196.28.64.0-196.28.223.255
                  196.33.0.0-196.39.255.255
                  196.41.128.0/19
                  196.44.192.0/20
                  196.45.96.0/20
                  196.208.0.0/13
                  197.80.0.0-197.103.255.255
                IPv6:
                  2001:4308::/32
                  2c0f:fc00::/27
                  2c0f:ff40::/26

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:f9:9f:0f:b9:32:1c:40:7d:a0:03:d9:af:28:9b:3d:4f:
         09:84:80:d3:eb:b9:06:f2:68:49:97:5f:a2:4f:fd:da:89:90:
         d3:0a:9d:f3:0a:b6:2a:46:6d:21:2a:59:a1:a4:8f:d8:7e:8d:
         6a:27:ac:db:f9:14:35:27:80:94:78:14:97:fa:97:51:66:cb:
         e0:46:a6:5e:ed:5a:e8:54:38:be:ff:f7:11:fb:97:6f:b3:f3:
         95:3f:f9:7f:f2:a1:96:e0:45:04:80:29:4d:cb:29:54:51:d4:
         ee:02:4f:db:f3:26:7d:d1:f0:a7:b5:af:ca:eb:60:10:06:0e:
         36:0e:90:c2:45:f6:f6:6a:6a:b0:91:ff:13:d2:1e:01:95:7f:
         80:80:74:3c:92:1c:c4:29:a5:59:8e:e7:b3:97:44:90:1e:e6:
         c6:cd:97:71:e3:ff:7b:88:7c:c5:a8:17:30:ea:3a:d6:f5:88:
         00:96:ee:f3:a3:2b:77:69:8a:73:33:fb:0d:cb:89:ca:c0:f8:
         2b:20:93:b0:6c:b5:2d:a6:96:9b:aa:1c:e1:66:8e:c5:fd:47:
         1f:1c:ee:cf:39:a6:82:67:cc:11:e3:7f:83:57:ea:67:bb:6a:
         e9:fd:de:86:51:22:45:55:a1:92:32:b1:c5:f3:3d:97:a9:2e:
         5a:4a:29:79
-----BEGIN CERTIFICATE-----
MIIHMzCCBhugAwIBAgICOx8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMjM1MTNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjdCMjE2QUYxMTAvBgNVBAUTKDJGNDA3RkVDRDhCN0RERENBNUQ1Qjkw
QTVFMTk1ODlEMDZDMTAxREMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgEJXdjJgDN7cDUTiYBb8XvzLpm3wU9awH51FukvjmLZk7h+pL2yfwFIzp14fz
PLG6IhTCB8I9yzeIIp8uOngbZcWTP57zc8y5jttLyvLqarrHtquSvLbNwN0t8zqq
k1h5uhKMy0FBoBokLoSjWWMczmAhIVFzZaOLpPshGiu/nFJJY5vyqDQGCjfyq0yy
Et6yl8KhyTLsSWH/9Cpat8op54CsU89sT/Pcc4eeIyF9njZynkcvki7krT5zjTCz
lfzuMFOobi5EcLm8uGtaJ9De8DEz9AUwEr7GIBcD4UsQWOB5ddPAe9AgGkqYlAQi
gm4axMDcdEOxtxEFkoh88taNAgMBAAGjggQoMIIEJDAdBgNVHQ4EFgQUL0B/7Ni3
3dyl1bkKXhlYnQbBAdwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3QjIxNi8zNkFDMEY5Njg3RDUx
MUVCQUFGRjM0NDdGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0IyMTYvMzZBQzBGOTY4N0Q1MTFFQkFBRkYzNDQ3RjhBRUEyMjgvTDBCXzdO
aTMzZHlsMWJrS1hobFluUWJCQWR3Lm1mdDA1BggrBgEFBQcBCAEB/wQmMCSgIjAg
AgIOnQICF8kCAhjPAgIomQICKOoCAi/iAgJOKwICa84wggEfBggrBgEFBQcBBwEB
/wSCAQ4wggEKMIHqBAIAATCB4wMEAylNaAMEBSlWYAMDAimEMAwDBAPEAQgDBADE
AQ4wDAMEBMQBEAMEAcQBGDAMAwQFxAEgAwQCxAEwMAwDBAHEAUoDBADEAVYDBADE
AWcwDAMEBMQCEAMEBsQCAAMEBcQCgDAMAwQFxASgAwQAxASiAwQBxAbwAwQExAwQ
AwMAxA4DBAXEFqADAwDEFwMDAMQaAwQAxBwIMAwDBATEHBADBATEHCAwDAMEBsQc
QAMEBcQcwDAKAwMAxCEDAwPEIAMEBcQpgAMEBMQswAMEBMQtYAMDA8TQMAoDAwTF
UAMDA8VgMBsEAgACMBUDBQAgAUMIAwUFLA/8AAMFBiwP/0AwDQYJKoZIhvcNAQEL
BQADggEBAHTM+Z8PuTIcQH2gA9mvKJs9TwmEgNPruQbyaEmXX6JP/dqJkNMKnfMK
tipGbSEqWaGkj9h+jWonrNv5FDUngJR4FJf6l1Fmy+BGpl7tWuhUOL7/9xH7l2+z
85U/+X/yoZbgRQSAKU3LKVRR1O4CT9vzJn3R8Ke1r8rrYBAGDjYOkMJF9vZqarCR
/xPSHgGVf4CAdDySHMQppVmO57OXRJAe5sbNl3Hj/3uIfMWoFzDqOtb1iACW7vOj
K3dpinMz+w3LicrA+Csgk7BstS2mlpuqHOFmjsX9Rx8c7s85poJnzBHjf4NX6me7
aun93oZRIkVVoZIyscXzPZepLlpKKXk=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:20:21 2026 by rpki-client