This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
File:                     LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer (raw, json)
Hash identifier:          yDWPcl7Ny5EhPBF/q5HslmmjcQbc/U1MV5Q9+C41Aeo=
Subject key identifier:   2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3AF3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:29:05 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37228
                          AS: 327755
                          IP: 105.178.0.0/17
                          IP: 105.179.0.0/19
                          IP: 2c0f:3880::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15091 (0x3af3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:29:05 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:05:3c:52:d7:af:c0:38:1b:0f:82:80:16:
                    da:ee:11:65:4d:b3:d7:0f:04:27:41:6c:d4:65:d7:
                    4a:43:fe:25:74:90:f0:c0:2b:27:99:3c:e4:35:65:
                    ab:b3:8d:c1:39:fe:1f:6c:49:72:eb:2b:0e:ce:b5:
                    0f:ef:bd:0a:2c:4b:73:97:09:4e:36:bc:c8:8d:74:
                    47:05:76:73:a5:3d:a1:20:8a:78:1e:52:09:1b:02:
                    93:32:4a:80:c9:60:ab:59:45:36:18:29:a5:6a:a4:
                    fa:9d:08:0f:12:ba:30:7f:b7:0a:b9:bb:25:fc:2a:
                    f6:ec:fa:14:7e:60:29:ae:1e:6e:d1:90:05:13:98:
                    55:a0:30:bb:c3:dc:5c:6b:2c:46:13:1f:2b:c0:e4:
                    39:b5:47:0a:f9:59:53:c1:aa:cc:15:d7:ac:2a:11:
                    92:b4:a7:51:b9:2f:3f:0f:66:c1:9f:01:ea:b4:ef:
                    46:22:fd:bc:40:9f:92:3d:a5:2b:02:e1:6a:28:a9:
                    3f:ec:4b:10:72:f9:03:99:36:4e:5a:ed:e9:9c:d0:
                    93:12:b8:fa:72:e7:2e:b0:1f:4e:35:d4:6c:72:1b:
                    b1:5e:c0:2b:5d:6f:9b:6f:6b:68:0f:2a:84:23:d9:
                    b0:68:f6:15:fc:50:a3:1c:7b:0d:d9:e7:a6:ea:85:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37228
                  327755

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.178.0.0/17
                  105.179.0.0/19
                IPv6:
                  2c0f:3880::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:40:ac:b6:37:e7:cf:73:10:2a:09:f6:b8:fe:1a:81:15:45:
         bf:96:55:15:a3:c7:ae:b8:f2:dc:82:67:d4:fc:4f:28:15:1d:
         47:c7:dd:c3:2f:08:31:8e:54:f3:34:cd:8a:12:b5:b5:3d:bf:
         30:fb:44:a0:e4:63:66:c4:39:ac:60:30:8e:0a:b7:b2:a0:5f:
         be:4a:b3:e5:e5:36:98:56:54:2d:27:97:20:38:97:01:bc:2f:
         6d:b0:f4:3d:3b:22:0d:d3:ba:e3:2c:fa:c1:5f:dc:02:9f:da:
         60:84:50:1c:67:ee:50:8c:db:27:d5:9e:65:09:66:e1:bd:ab:
         05:22:90:02:8a:4a:cb:9b:2e:c9:7f:6f:26:08:73:e8:17:ea:
         a3:41:49:d0:8c:1b:cc:b4:57:10:5e:8f:bf:a9:aa:d2:31:96:
         ad:88:09:da:65:1f:3e:86:57:ed:d3:93:b0:0c:2e:56:b1:9b:
         10:d6:72:dd:9b:8e:06:8e:b0:80:ff:3e:5e:20:2b:67:ae:0a:
         61:e6:51:8e:de:87:cb:e3:ce:98:77:cd:1f:c6:b8:13:49:16:
         20:fc:68:6b:b3:ad:d1:67:dd:e9:1f:f9:14:ac:2d:17:f4:28:
         84:11:6e:38:dd:12:55:45:b7:90:01:ed:8b:ec:11:45:3c:b2:
         03:2a:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:06:43 2026 by rpki-client