This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/R_q-_UMssfRwr6XHG8o9VUZ_GgA.cer
File:                     R_q-_UMssfRwr6XHG8o9VUZ_GgA.cer (raw, json)
Hash identifier:          L/4jR6b/sVGJT4DIsjpMaiG8wZ/zau5/MJioC3AbrnM=
Subject key identifier:   47:FA:BE:FD:43:2C:B1:F4:70:AF:A5:C7:1B:CA:3D:55:46:7F:1A:00
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3B05
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/R_q-_UMssfRwr6XHG8o9VUZ_GgA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:31:24 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328739
                          IP: 154.115.160.0/19
                          IP: 2001:43f8:1000::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15109 (0x3b05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:31:24 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36772B4AF, serialNumber=47FABEFD432CB1F470AFA5C71BCA3D55467F1A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:15:f0:e5:40:ba:d6:57:3f:8c:46:b0:4e:
                    01:f8:f1:32:7a:6b:dd:c3:8b:9f:75:88:17:12:93:
                    ab:b2:c9:74:be:bf:51:e0:6e:7b:ee:ac:e6:fe:95:
                    27:42:bb:32:0f:6c:45:a6:1c:58:c5:9c:65:6a:8e:
                    e2:a0:00:5a:b5:a2:c7:1f:20:89:5a:19:81:0d:d5:
                    44:8d:ee:19:c3:ee:67:77:d9:d6:87:a2:ba:ac:4a:
                    5b:3b:05:23:aa:38:1c:e5:58:61:81:64:2f:40:37:
                    42:77:bd:ab:e7:3e:9e:61:3f:db:fc:04:ca:06:c1:
                    d3:22:e3:c9:1c:49:2c:d4:1a:73:62:31:95:54:ee:
                    8d:54:36:2c:b5:b4:9f:b9:10:86:f8:19:55:0a:5e:
                    ec:35:e0:26:74:42:be:a9:6a:b8:98:a4:35:ac:9a:
                    2b:27:e9:67:77:58:87:af:9e:fb:44:88:4c:08:15:
                    68:24:cf:67:62:9c:39:de:cc:a4:0b:43:4f:d0:35:
                    4e:7e:64:aa:9f:2c:b9:b8:21:37:39:38:08:aa:c4:
                    8d:89:eb:d1:f3:d2:c4:e2:96:a0:9c:17:0c:55:8c:
                    d2:3a:fb:f2:c8:a1:7d:85:0e:10:18:5b:ea:db:27:
                    44:67:d0:0b:a1:da:c2:60:d7:fd:50:53:6e:8f:f0:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FA:BE:FD:43:2C:B1:F4:70:AF:A5:C7:1B:CA:3D:55:46:7F:1A:00
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/R_q-_UMssfRwr6XHG8o9VUZ_GgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328739

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.115.160.0/19
                IPv6:
                  2001:43f8:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:f5:f6:ec:09:f3:77:3b:87:37:7d:4c:c5:07:86:d7:37:04:
         c8:e6:e6:fb:6d:6e:48:bf:df:c1:6f:7c:ae:93:61:2d:31:b0:
         ec:23:f1:45:b9:46:44:44:90:73:51:b1:70:3a:b9:b2:93:9e:
         e7:12:95:1d:ee:70:54:0c:18:ba:d1:43:a4:32:b1:62:dc:48:
         71:bc:22:a7:8f:f7:79:40:5b:de:22:66:a3:4a:35:37:ad:56:
         16:3f:a3:fa:3e:98:b4:2f:c6:05:1b:14:8c:40:85:78:0d:63:
         19:2d:9d:65:ff:a5:28:40:4f:fa:b4:5b:43:38:56:3c:74:00:
         83:9a:b4:4c:f0:20:e2:30:8b:6b:2b:7e:42:e6:7a:51:bf:e7:
         d1:21:42:f3:c7:ad:69:2a:75:5a:76:28:3c:df:ad:f0:ee:08:
         32:69:64:02:cf:09:4f:a5:e6:54:57:f4:72:27:4a:ed:bb:91:
         59:85:78:07:41:b9:79:f1:97:00:24:ea:32:ba:26:79:21:20:
         58:fa:d6:6c:d3:fd:41:15:0b:69:75:f7:27:33:3b:22:88:39:
         05:b2:a7:dd:d1:d6:52:52:c7:18:2f:a0:25:d6:0b:8b:75:aa:
         5e:4c:99:65:8b:65:67:a1:d6:43:f9:8a:23:e5:5c:3a:63:ea:
         9f:6e:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:02:17 2026 by rpki-client