This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
File:                     NoqlwYM32LEA43kHcgA1BOIR25U.cer (raw, json)
Hash identifier:          c/1RJMc44BjPmz79Hz9yuYF35vyj6ymWfQ5G8BhhtYY=
Subject key identifier:   36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3F8D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 15 Jan 2026 06:04:04 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328719
                          IP: 102.219.16.0/22
                          IP: 102.222.112.0/22
                          IP: 2c0f:4240::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16269 (0x3f8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan 15 06:04:04 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3664815AF, serialNumber=368AA5C18337D8B100E3790772003504E211DB95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:6d:24:4a:d1:43:d8:f3:5e:e9:51:1c:e4:
                    5f:f2:76:04:97:92:79:da:94:bf:ec:2a:9e:c1:a8:
                    d3:87:2e:f1:5c:79:3f:50:07:ce:c0:39:68:b1:9c:
                    2e:01:ce:7e:96:25:9f:f7:33:cb:ed:72:1a:4f:ad:
                    fa:9e:79:42:69:d2:b6:01:05:6f:71:77:4f:ce:df:
                    7f:79:af:08:45:9f:bc:d3:35:92:df:23:61:73:06:
                    5f:ad:32:17:d9:1c:3d:4d:79:64:6e:bc:6a:0d:b6:
                    47:6e:60:63:87:b5:8c:e0:7d:b9:d7:f6:8a:49:af:
                    41:8c:a8:56:e6:9f:74:64:5b:89:3c:4d:11:8c:2b:
                    67:41:5a:15:8c:0b:27:66:e2:9f:77:97:77:6e:af:
                    4c:a0:fd:3a:7b:c8:51:2a:86:f4:cb:04:e1:e4:9d:
                    dd:22:41:54:1d:03:0c:1f:32:02:9d:47:b6:8d:77:
                    8f:79:cf:96:d1:ea:7a:1a:d8:61:b0:36:b0:e0:8d:
                    2c:11:6e:08:b9:0a:e6:3e:c2:4e:91:6d:40:7c:39:
                    29:56:47:7c:31:fd:ac:04:c1:08:a0:65:b4:55:9f:
                    ef:93:31:92:fc:9d:3d:db:4d:45:3a:37:3d:64:66:
                    bb:fa:fd:be:9a:a1:d9:26:fe:e4:96:56:95:2c:c7:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328719

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.16.0/22
                  102.222.112.0/22
                IPv6:
                  2c0f:4240::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:40:dc:ef:41:a9:90:4d:fa:33:be:d2:a9:06:02:0f:6d:47:
         34:40:bf:23:b3:18:49:f0:e0:75:ec:e2:24:37:56:2e:85:01:
         17:3d:6a:cb:b2:26:ae:b3:93:ba:a4:43:2b:9d:05:a4:23:9a:
         53:a9:de:34:fe:f5:66:56:f0:f5:26:b0:93:c3:22:fc:09:f0:
         ae:b0:50:33:3f:63:61:08:1b:5d:06:ea:05:fe:97:2d:52:cf:
         75:21:dc:65:7a:42:38:cb:4a:dd:ac:b8:fb:ea:be:18:24:84:
         d8:f4:eb:96:1c:cd:97:f8:59:7b:cb:d7:31:07:14:ee:ce:0a:
         5c:b4:2a:fa:bb:01:56:83:ee:56:ee:67:50:0e:a5:a2:16:39:
         39:72:24:e6:4f:ea:de:74:d0:e4:94:a5:32:06:62:af:7e:41:
         ec:2b:45:ea:2c:28:fa:1d:f9:d4:e4:68:00:82:33:56:59:27:
         23:5a:26:10:78:9b:77:35:db:89:83:19:96:80:c1:46:e8:0c:
         ad:32:af:c1:c8:5f:5b:53:96:bf:b8:98:63:e2:08:df:13:d4:
         18:0f:eb:27:8c:b4:02:e7:15:8c:f5:35:1c:e1:18:5e:11:39:
         53:b9:8e:68:50:04:ac:b8:60:b3:a9:e5:cd:5e:18:3a:ca:b1:
         fc:9b:bf:73
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICP40wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMTUwNjA0MDRaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjY0ODE1QUYxMTAvBgNVBAUTKDM2OEFBNUMxODMzN0Q4QjEwMEUzNzkw
NzcyMDAzNTA0RTIxMURCOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLqW0kStFD2PNe6VEc5F/ydgSXknnalL/sKp7BqNOHLvFceT9QB87AOWixnC4B
zn6WJZ/3M8vtchpPrfqeeUJp0rYBBW9xd0/O3395rwhFn7zTNZLfI2FzBl+tMhfZ
HD1NeWRuvGoNtkduYGOHtYzgfbnX9opJr0GMqFbmn3RkW4k8TRGMK2dBWhWMCydm
4p93l3dur0yg/Tp7yFEqhvTLBOHknd0iQVQdAwwfMgKdR7aNd495z5bR6noa2GGw
NrDgjSwRbgi5CuY+wk6RbUB8OSlWR3wx/awEwQigZbRVn++TMZL8nT3bTUU6Nz1k
Zrv6/b6aodkm/uSWVpUsx2GnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUNoqlwYM3
2LEA43kHcgA1BOIR25UwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2NDgxNS9GNjc1QjZEMEYxRDcx
MUYwQjAyNjVDQjFEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjQ4MTUvRjY3NUI2RDBGMUQ3MTFGMEIwMjY1Q0IxREFFNEVDOUMvTm9xbHdZ
TTMyTEVBNDNrSGNnQTFCT0lSMjVVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBA8wNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm2xADBAJm3nAwDQQC
AAIwBwMFACwPQkAwDQYJKoZIhvcNAQELBQADggEBAAtA3O9BqZBN+jO+0qkGAg9t
RzRAvyOzGEnw4HXs4iQ3Vi6FARc9asuyJq6zk7qkQyudBaQjmlOp3jT+9WZW8PUm
sJPDIvwJ8K6wUDM/Y2EIG10G6gX+ly1Sz3Uh3GV6QjjLSt2suPvqvhgkhNj065Yc
zZf4WXvL1zEHFO7OCly0Kvq7AVaD7lbuZ1AOpaIWOTlyJOZP6t500OSUpTIGYq9+
QewrReosKPod+dTkaACCM1ZZJyNaJhB4m3c124mDGZaAwUboDK0yr8HIX1tTlr+4
mGPiCN8T1BgP6yeMtALnFYz1NRzhGF4ROVO5jmhQBKy4YLOp5c1eGDrKsfybv3M=
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:54:33 2026 by rpki-client