This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
File:                     Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer (raw, json)
Hash identifier:          gE5CBzoz4w9AnVdl9xruP6IFGnp2M6rUeJCbx6YYjms=
Subject key identifier:   46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3D9A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:10:12 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327947
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15770 (0x3d9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:10:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36C29E6AF, serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:f8:ca:92:24:11:8e:04:1d:22:09:48:cf:
                    12:68:66:e1:98:d4:98:0c:b9:9d:ec:b5:f2:96:6f:
                    d0:6a:7e:71:12:cf:c6:9c:23:b1:b7:27:ef:ba:8f:
                    74:d8:a7:dc:1c:2c:d1:bd:8f:17:15:87:25:0e:d6:
                    59:18:b2:55:a5:2e:40:11:35:0f:8b:d4:19:a1:df:
                    40:ca:73:bb:3a:f7:04:73:a0:32:96:fb:f6:5d:d5:
                    5b:b8:ce:08:78:e2:87:a5:ae:14:16:42:29:2b:ac:
                    1a:e2:60:fd:2e:21:86:bf:29:92:ec:6d:70:57:b5:
                    1f:86:f7:1f:fa:0e:64:03:90:d8:ee:57:8a:62:eb:
                    ee:67:74:4f:44:e8:bd:9d:b8:db:d7:1d:31:e0:68:
                    60:89:61:2d:8b:a4:a7:6d:1c:07:a7:33:93:8e:19:
                    b8:68:2a:00:ae:fc:cf:7a:ee:0f:a3:6c:b8:75:bc:
                    a3:0d:2a:57:7f:3c:8e:9f:18:ed:ac:fc:10:16:d3:
                    e8:8d:88:a7:b2:92:2b:14:dd:8e:58:97:00:4f:40:
                    36:92:2d:7e:f0:62:d6:8e:aa:9f:a7:58:33:f1:c1:
                    b4:29:c6:6e:05:39:01:fa:c1:dc:71:46:38:74:2e:
                    2a:52:4c:1f:0a:d5:34:78:b9:b6:93:46:e5:69:4b:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327947

    Signature Algorithm: sha256WithRSAEncryption
         10:1b:2f:6f:c1:44:d2:2c:67:04:04:e6:65:ca:c6:79:2d:45:
         47:78:00:56:43:20:cc:a8:c2:06:e4:45:61:c5:9f:8a:80:07:
         69:9b:27:17:41:d8:47:ef:39:91:3a:2e:3c:99:b7:26:28:98:
         ed:2f:04:d1:6e:13:89:35:02:8b:e4:0e:26:bf:e0:3a:fe:ea:
         a4:bf:49:13:f6:db:07:16:27:62:8f:78:ec:87:ba:7c:49:ad:
         4e:2f:c4:b7:38:ee:56:56:b0:7d:40:37:8c:31:57:03:19:c2:
         f4:bd:07:0c:0f:b0:40:fb:50:b2:31:73:34:5c:c3:e7:0e:5d:
         9b:6c:41:dd:b9:b3:2f:6b:b5:79:61:d7:ad:e4:3c:99:69:c8:
         f6:f7:bd:74:7e:e1:62:3e:0b:62:58:fe:36:ab:72:c5:2a:05:
         a9:13:68:52:6c:17:ca:02:5d:40:45:73:31:50:24:e0:1f:96:
         d5:95:b0:6d:89:9e:38:12:bc:b5:a3:54:4e:cd:f9:f7:d0:0f:
         2f:40:e1:73:f8:32:b7:36:d4:97:3a:f0:7d:90:84:bc:a6:82:
         e4:62:21:2d:80:14:77:eb:c0:8c:69:db:35:80:74:03:fd:1c:
         9c:80:10:e3:a2:cf:bc:5d:ff:f9:30:01:d9:af:00:6e:8a:d5:
         e2:a4:fb:47
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgICPZowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwNDEwMTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkMyOUU2QUYxMTAvBgNVBAUTKDQ2M0M3QUYzM0JEMkYxNEFGRDREMkEz
NDVEOUMzMTgxN0M3ODczN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCh8vjKkiQRjgQdIglIzxJoZuGY1JgMuZ3stfKWb9BqfnESz8acI7G3J++6j3TY
p9wcLNG9jxcVhyUO1lkYslWlLkARNQ+L1Bmh30DKc7s69wRzoDKW+/Zd1Vu4zgh4
4oelrhQWQikrrBriYP0uIYa/KZLsbXBXtR+G9x/6DmQDkNjuV4pi6+5ndE9E6L2d
uNvXHTHgaGCJYS2LpKdtHAenM5OOGbhoKgCu/M967g+jbLh1vKMNKld/PI6fGO2s
/BAW0+iNiKeykisU3Y5YlwBPQDaSLX7wYtaOqp+nWDPxwbQpxm4FOQH6wdxxRjh0
LipSTB8K1TR4ubaTRuVpS2n3AgMBAAGjggLqMIIC5jAdBgNVHQ4EFgQURjx68zvS
8Ur9TSo0XZwxgXx4c3wwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDMjlFNi9CRDQ1Nzg5RTNENzAx
MUYwOEZCMjkyRDNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzI5RTYvQkQ0NTc4OUUzRDcwMTFGMDhGQjI5MkQzREFFNEVDOUMvUmp4Njh6
dlM4VXI5VFNvMFhad3hnWHg0YzN3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAQswDQYJKoZIhvcNAQELBQADggEBABAbL2/BRNIsZwQE5mXKxnktRUd4AFZD
IMyowgbkRWHFn4qAB2mbJxdB2EfvOZE6LjyZtyYomO0vBNFuE4k1AovkDia/4Dr+
6qS/SRP22wcWJ2KPeOyHunxJrU4vxLc47lZWsH1AN4wxVwMZwvS9BwwPsED7ULIx
czRcw+cOXZtsQd25sy9rtXlh163kPJlpyPb3vXR+4WI+C2JY/jarcsUqBakTaFJs
F8oCXUBFczFQJOAfltWVsG2JnjgSvLWjVE7N+ffQDy9A4XP4Mrc21Jc68H2QhLym
guRiIS2AFHfrwIxp2zWAdAP9HJyAEOOiz7xd//kwAdmvAG6K1eKk+0c=
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:59:52 2026 by rpki-client