This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer
File:                     M3RPEtwtkNArK4aFUwjsHAeEk8w.cer (raw, json)
Hash identifier:          nRh6W4YoJ6/SSQm14nDU5TDGbTiBRWked8IV5Ms1a/Y=
Subject key identifier:   33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3A74
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:11:22 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37568
                          IP: 196.220.96.0/19
                          IP: 2001:43f8:10b0::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14964 (0x3a74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:11:22 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36693F7AF, serialNumber=33744F12DC2D90D02B2B86855308EC1C078493CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:ba:a1:03:2e:a0:5a:7a:47:c7:94:ec:4d:
                    8a:d9:f9:67:90:2a:99:d1:bd:91:70:8a:99:b5:10:
                    81:df:36:d0:fb:02:26:2d:33:ea:2a:6a:82:ae:68:
                    bc:b4:e6:1f:67:a4:06:8b:7f:ba:81:a7:dd:e8:23:
                    e8:bc:e8:04:c0:9d:0f:31:68:f5:2a:3c:6d:cb:af:
                    38:c6:d4:e5:1a:0d:81:19:e5:c8:2d:33:1c:a3:01:
                    ba:f9:db:3c:1f:34:3d:7d:71:74:d2:e2:71:14:1d:
                    24:3e:9f:18:34:e3:66:ac:48:50:29:69:79:6d:75:
                    78:4a:0a:79:8b:3c:ad:be:af:ac:3b:2c:40:83:50:
                    0e:ce:3f:67:ac:2c:44:d1:33:65:89:df:d5:16:5c:
                    82:55:eb:e7:16:15:b6:db:7d:c6:15:c8:65:d0:12:
                    63:75:64:f4:30:a7:83:62:5c:52:16:48:1e:49:48:
                    ab:f1:a4:d5:c3:f6:7b:a0:0f:64:da:34:aa:00:89:
                    c9:5f:c1:67:2e:c8:56:d4:c6:37:19:29:c1:1b:d4:
                    7f:a5:c7:e5:e0:01:b4:71:4c:f6:b1:dc:8a:c4:1a:
                    26:6b:80:ae:bc:f0:f3:3f:8d:14:5e:d4:40:8c:f6:
                    48:ba:fd:be:c8:75:01:4b:80:27:68:58:d2:76:26:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37568

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.220.96.0/19
                IPv6:
                  2001:43f8:10b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:ee:1a:ee:15:4c:d4:eb:17:4e:02:f1:8d:80:c4:93:d0:
         fa:b4:65:ce:31:79:0c:e5:b2:b5:40:65:39:f3:42:fa:cf:07:
         aa:b3:49:45:20:ef:95:8d:10:14:3b:94:25:36:94:c7:e3:6d:
         9f:3a:61:8d:0d:11:ab:3f:a3:1a:6e:aa:d6:a3:08:bc:0e:c1:
         52:a8:52:a1:c8:b7:71:91:7a:97:d9:f6:87:ef:20:c4:ff:a0:
         c8:90:30:92:18:7d:6d:ad:c9:69:85:a0:90:37:2a:a9:da:5a:
         4f:e4:4c:7c:40:f5:d3:77:87:b1:22:45:06:90:d9:f1:e5:c9:
         7b:1c:0a:ec:e0:0a:67:1a:35:58:11:78:df:44:e3:fd:70:a7:
         06:77:aa:6b:9e:83:81:37:92:88:d2:6e:eb:7d:53:8d:e7:71:
         e9:bc:4d:58:53:12:9d:44:21:46:24:c9:5c:8c:71:d2:65:dd:
         03:19:0d:3d:40:14:b6:ca:d6:a1:77:1c:ba:2a:0c:9d:a1:9b:
         a5:20:9b:36:df:a5:b5:6c:c5:b5:b4:88:4e:3b:d4:de:ad:63:
         76:02:d1:0b:3a:bc:8b:ed:3c:e4:d1:2c:c7:b4:c1:8f:12:05:
         61:31:d8:a9:66:7d:88:07:d0:7b:93:46:b8:7b:18:44:8e:ab:
         b7:ef:58:e4
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgICOnQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMjExMjJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjY5M0Y3QUYxMTAvBgNVBAUTKDMzNzQ0RjEyREMyRDkwRDAyQjJCODY4
NTUzMDhFQzFDMDc4NDkzQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCeo7qhAy6gWnpHx5TsTYrZ+WeQKpnRvZFwipm1EIHfNtD7AiYtM+oqaoKuaLy0
5h9npAaLf7qBp93oI+i86ATAnQ8xaPUqPG3LrzjG1OUaDYEZ5cgtMxyjAbr52zwf
ND19cXTS4nEUHSQ+nxg042asSFApaXltdXhKCnmLPK2+r6w7LECDUA7OP2esLETR
M2WJ39UWXIJV6+cWFbbbfcYVyGXQEmN1ZPQwp4NiXFIWSB5JSKvxpNXD9nugD2Ta
NKoAiclfwWcuyFbUxjcZKcEb1H+lx+XgAbRxTPax3IrEGiZrgK688PM/jRRe1ECM
9ki6/b7IdQFLgCdoWNJ2Jsq9AgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQUM3RPEtwt
kNArK4aFUwjsHAeEk8wwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2OTNGNy84Q0JGNTU0Q0Y5RTgx
MUU3ODNFMUQxNDNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjkzRjcvOENCRjU1NENGOUU4MTFFNzgzRTFEMTQzRjhBRUEyMjgvTTNSUEV0
d3RrTkFySzRhRlV3anNIQWVFazh3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAksAwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAXE3GAwDwQCAAIwCQMH
ACABQ/gQsDANBgkqhkiG9w0BAQsFAAOCAQEALg7uGu4VTNTrF04C8Y2AxJPQ+rRl
zjF5DOWytUBlOfNC+s8HqrNJRSDvlY0QFDuUJTaUx+NtnzphjQ0Rqz+jGm6q1qMI
vA7BUqhSoci3cZF6l9n2h+8gxP+gyJAwkhh9ba3JaYWgkDcqqdpaT+RMfED103eH
sSJFBpDZ8eXJexwK7OAKZxo1WBF430Tj/XCnBneqa56DgTeSiNJu631Tjedx6bxN
WFMSnUQhRiTJXIxx0mXdAxkNPUAUtsrWoXccuioMnaGbpSCbNt+ltWzFtbSITjvU
3q1jdgLRCzq8i+085NEsx7TBjxIFYTHYqWZ9iAfQe5NGuHsYRI6rt+9Y5A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:27:30 2026 by rpki-client