This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
File:                     TNw7PW0GCBEg29bsI2NRx172TMw.cer (raw, json)
Hash identifier:          WKXSctapKcB50lTV9n0hG+3NcHD5Xut1Q5qFPoA0h9M=
Subject key identifier:   4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3E4B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:38:16 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329393
                          IP: 102.210.54.0/23
                          IP: 2c0f:17c0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15947 (0x3e4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:38:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36DA6FBAF, serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:e8:ad:32:4c:d7:9c:de:7d:6a:eb:f0:f1:
                    0d:2e:c8:f1:a2:65:58:e1:72:3a:7a:02:2d:ef:eb:
                    d9:ea:79:0b:8b:b5:57:0e:de:91:4e:0a:09:27:75:
                    13:a6:fe:99:60:fd:eb:9a:5d:bf:eb:ec:e1:dc:4a:
                    21:8e:4c:02:5c:77:54:ee:9c:bf:ba:07:e4:b9:1c:
                    34:56:88:7c:20:d0:da:79:eb:c1:6d:d2:75:d4:06:
                    52:96:41:8c:e6:22:18:6a:65:01:f6:ea:ba:55:39:
                    f9:9c:d4:b4:44:bf:a1:bd:35:ad:1e:4d:1f:74:7b:
                    05:e6:7f:5d:69:6f:5e:a8:54:83:27:6d:9c:f9:ce:
                    e5:39:ae:70:e1:52:3d:b0:14:9c:fe:df:29:8d:26:
                    54:66:44:78:d3:bc:1d:91:1f:91:49:a4:86:09:22:
                    d9:44:54:c1:13:55:fc:3d:0c:bd:86:f1:01:05:2a:
                    1f:b1:86:ef:90:fe:1c:0e:fc:f3:ec:1b:b9:0f:c7:
                    00:fc:32:49:80:34:76:24:54:a0:4b:23:bc:85:f2:
                    ea:fe:ac:68:01:68:41:d4:0f:0a:41:57:61:c2:ad:
                    df:5e:ff:b9:aa:b7:97:c5:80:01:f2:f5:22:b0:16:
                    42:08:05:1b:3b:79:52:74:d6:fe:95:9d:8e:b7:2e:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329393

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.54.0/23
                IPv6:
                  2c0f:17c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:62:04:8b:6f:5c:df:a2:27:82:b5:57:4f:94:e2:92:94:78:
         20:a8:7c:c3:ae:35:3c:ad:fa:9b:bd:3f:d7:06:7a:0b:f7:23:
         e1:09:7a:36:4f:1a:54:19:27:98:f3:a1:7c:75:2c:26:e8:cb:
         0b:4f:c1:f9:71:b5:b9:5c:d1:7b:b3:0c:27:11:2f:50:12:1e:
         49:55:0f:f0:ff:b9:28:a5:48:8e:fc:43:df:97:cd:fb:1a:60:
         aa:41:8b:45:67:cf:e1:61:94:b8:97:eb:54:88:dd:6c:b2:8c:
         84:1e:35:7f:2a:c4:26:d6:33:7d:81:72:09:71:21:fb:0f:8d:
         a2:87:fe:e9:93:e5:ca:17:bd:1e:8d:a5:f2:fb:c6:84:88:ac:
         fe:68:16:db:3f:5f:1c:65:8f:d3:7c:66:a3:0e:fe:42:ba:26:
         cf:55:c6:ad:1c:3c:80:44:f2:bb:2f:68:8c:66:19:d8:f9:fe:
         5a:20:6e:fc:9d:ca:c6:97:5f:c0:f8:77:24:6b:31:6b:cb:1c:
         c4:d8:ea:4e:63:ee:e6:06:9c:b7:7c:55:5d:38:c2:51:20:52:
         5c:64:9d:61:4c:11:f6:8f:72:7e:68:57:cd:94:2a:f8:42:b6:
         a5:2d:27:b0:89:10:85:05:06:60:d9:a4:87:94:bc:4b:c8:29:
         aa:3d:0a:00
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICPkswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwNDM4MTZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkRBNkZCQUYxMTAvBgNVBAUTKDRDREMzQjNENkQwNjA4MTEyMERCRDZF
QzIzNjM1MUM3NUVGNjRDQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVJOitMkzXnN59auvw8Q0uyPGiZVjhcjp6Ai3v69nqeQuLtVcO3pFOCgkndROm
/plg/euaXb/r7OHcSiGOTAJcd1TunL+6B+S5HDRWiHwg0Np568Ft0nXUBlKWQYzm
IhhqZQH26rpVOfmc1LREv6G9Na0eTR90ewXmf11pb16oVIMnbZz5zuU5rnDhUj2w
FJz+3ymNJlRmRHjTvB2RH5FJpIYJItlEVMETVfw9DL2G8QEFKh+xhu+Q/hwO/PPs
G7kPxwD8MkmANHYkVKBLI7yF8ur+rGgBaEHUDwpBV2HCrd9e/7mqt5fFgAHy9SKw
FkIIBRs7eVJ01v6VnY63LgNhAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUTNw7PW0G
CBEg29bsI2NRx172TMwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZEQTZGQi80MkFFQUVEOEZFNjAx
MUVGODQyNDgxN0U3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2REE2RkIvNDJBRUFFRDhGRTYwMTFFRjg0MjQ4MTdFNzYyRTk1MUEvVE53N1BX
MEdDQkVnMjlic0kyTlJ4MTcyVE13Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBrEwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFm0jYwDQQCAAIwBwMF
ACwPF8AwDQYJKoZIhvcNAQELBQADggEBAAliBItvXN+iJ4K1V0+U4pKUeCCofMOu
NTyt+pu9P9cGegv3I+EJejZPGlQZJ5jzoXx1LCboywtPwflxtblc0XuzDCcRL1AS
HklVD/D/uSilSI78Q9+XzfsaYKpBi0Vnz+FhlLiX61SI3WyyjIQeNX8qxCbWM32B
cglxIfsPjaKH/umT5coXvR6NpfL7xoSIrP5oFts/Xxxlj9N8ZqMO/kK6Js9Vxq0c
PIBE8rsvaIxmGdj5/logbvydysaXX8D4dyRrMWvLHMTY6k5j7uYGnLd8VV04wlEg
UlxknWFMEfaPcn5oV82UKvhCtqUtJ7CJEIUFBmDZpIeUvEvIKao9CgA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:19:16 2026 by rpki-client