This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
File:                     OV0yW2nyp6M_rgog4SIm0pgbsF4.cer (raw, json)
Hash identifier:          Io2RfT+EQoKanomvadOcwryD3qDaCzyC+RkQHD2xJg8=
Subject key identifier:   39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3A83
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:13:39 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328605
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14979 (0x3a83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:13:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F366AE59AF, serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:14:4e:cd:75:08:ac:c1:dc:24:b7:84:93:
                    7e:2d:8d:f4:85:97:5f:0b:7f:19:7d:aa:b0:62:9d:
                    18:59:b3:e9:fc:bd:e7:aa:f6:4e:b9:31:92:f2:cc:
                    7c:b9:df:80:9d:29:f7:60:4f:18:db:9b:2d:92:2a:
                    f9:7c:88:f8:6a:75:29:02:8b:e0:c4:d5:3a:48:ed:
                    7c:cb:6d:7b:48:12:ab:10:f2:bb:89:b8:62:0f:d9:
                    58:51:4b:a6:57:5e:94:79:e3:de:14:87:f8:64:a1:
                    bf:77:a6:d7:54:38:fb:a7:7c:d5:2f:59:21:02:52:
                    4b:57:f7:c4:45:af:34:aa:64:3c:6d:0c:54:70:ab:
                    e3:9b:80:3e:6b:2e:57:eb:dd:ed:c0:1a:8f:bf:e0:
                    a1:f9:81:96:a8:30:2f:f2:81:d5:c3:4c:b1:8a:c0:
                    0b:44:19:e3:4e:15:f3:08:46:9e:6d:9f:ef:04:a8:
                    02:a8:92:a2:fa:5e:36:a7:8d:7b:7a:11:c1:d9:11:
                    85:e8:88:d3:62:80:d5:17:d1:5e:3f:05:f4:af:bf:
                    00:54:09:2d:32:de:d3:2b:8e:2c:f8:01:07:e6:49:
                    ae:65:3b:85:ca:28:2a:b0:a3:97:13:31:b0:0a:ee:
                    c3:8b:8c:db:c6:0a:f3:ce:0c:f4:5b:98:f0:f2:44:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328605

    Signature Algorithm: sha256WithRSAEncryption
         67:a8:b2:e8:d0:46:c2:3a:78:df:90:01:b3:71:39:a3:80:b8:
         88:a5:e1:28:7c:f7:c5:25:2e:ba:ed:a7:7a:f4:90:82:70:63:
         17:fa:82:c6:25:6e:b0:5b:63:aa:f3:f3:d2:1c:10:c4:0c:b9:
         3c:95:9f:6b:de:1d:5f:b6:a1:98:99:db:56:10:c7:9e:8a:cc:
         13:f5:49:14:39:70:cb:df:c8:76:2e:66:74:c4:96:6c:6c:c9:
         4a:37:89:77:9e:75:10:a0:73:21:a8:f0:c2:6a:07:6a:d8:9a:
         d8:e0:b9:24:69:ad:ea:ec:63:16:16:f1:6b:b9:01:64:ff:70:
         5b:02:5e:5e:c1:76:81:03:12:7f:a3:a6:30:49:25:80:95:b9:
         38:69:ea:de:9f:db:74:4a:f5:c7:50:a0:a9:95:86:c1:71:6c:
         7f:04:1f:42:1b:bd:9c:2b:34:c0:c2:86:09:d4:60:2b:ae:3b:
         25:b1:13:c9:bd:14:fb:71:ea:0a:1d:33:f4:3d:c5:11:be:95:
         1f:9d:85:95:4c:93:98:14:66:b3:f8:65:d0:ff:90:49:a6:56:
         20:21:fb:aa:5b:c6:4f:57:a2:4a:bb:bb:57:ae:9c:97:44:36:
         d1:13:9e:eb:d4:1b:06:23:a6:c0:fc:16:de:7b:0b:4a:55:cd:
         54:00:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:18:10 2026 by rpki-client