This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer
File:                     UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer (raw, json)
Hash identifier:          AvFWB/2HXH82rZ5hfWkWb+cRxBW0zemenGlpCZkohx8=
Subject key identifier:   50:AE:14:B6:7E:0A:9A:FF:28:A0:2F:45:6C:7E:2F:3A:3D:6C:D2:82
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       397F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:33:49 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329597
                          IP: 102.205.28.0/22
                          IP: 2c0f:6ec0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14719 (0x397f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:33:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F364EFD6AF, serialNumber=50AE14B67E0A9AFF28A02F456C7E2F3A3D6CD282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:c3:11:27:75:fa:7a:ea:43:d5:7b:d6:db:
                    12:a3:16:0f:91:ba:d7:31:cd:74:94:3e:04:12:ab:
                    7e:f5:9d:16:c9:c2:d8:c4:91:1f:c1:8e:cb:fb:87:
                    23:bb:42:68:bb:62:eb:90:17:eb:52:aa:79:37:e6:
                    8b:73:2b:55:2c:02:e6:b6:47:94:ba:4f:86:68:e1:
                    b5:e4:a8:c4:09:0b:23:de:23:30:0c:20:1e:5b:d6:
                    d2:f8:89:cd:91:89:a6:da:4f:7f:b4:63:5e:c2:67:
                    fc:fe:18:12:bc:45:f0:bd:94:4d:0f:d5:83:4f:78:
                    ca:5e:fe:40:4a:ac:15:d8:43:a3:8e:e7:95:3d:a1:
                    39:da:e5:ea:f9:f3:c0:0f:e5:8b:4f:a3:21:74:5f:
                    d8:73:13:4b:60:7e:d6:f1:94:19:ce:5a:20:6d:9a:
                    3d:5d:56:9d:b2:62:1e:a2:80:ae:ce:d8:ea:16:1b:
                    34:c4:5e:2a:0f:a3:4c:35:32:50:46:1b:47:47:24:
                    de:95:35:77:7d:83:88:a8:72:cd:af:29:eb:3a:30:
                    52:fb:7c:c5:8b:65:8e:87:0a:26:55:14:ac:fd:ae:
                    6c:fa:14:c1:a7:0c:00:19:89:eb:97:bb:7c:3b:57:
                    78:ba:4b:f7:88:7a:74:b0:6a:91:54:8f:7a:2d:98:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AE:14:B6:7E:0A:9A:FF:28:A0:2F:45:6C:7E:2F:3A:3D:6C:D2:82
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329597

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.28.0/22
                IPv6:
                  2c0f:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:f9:de:43:64:a1:7b:36:f3:a2:7b:56:e5:81:0a:ce:5f:14:
         8b:ec:20:f7:11:2d:de:f5:9e:e0:28:d3:d0:87:a4:82:71:37:
         9f:76:70:08:38:5b:c5:41:84:a7:56:83:b6:2d:ad:2a:7e:b8:
         97:06:ff:f8:78:cd:c7:89:fb:48:44:3a:46:9d:e5:13:30:7e:
         53:ad:cc:42:52:fb:06:2e:dc:67:dd:be:ab:39:77:1f:b1:a3:
         0d:32:69:f1:72:cc:47:fc:09:1f:93:5e:e1:c5:08:58:c6:0c:
         ac:51:51:52:e9:de:b8:2a:b3:65:64:ff:34:e9:d2:ce:0c:09:
         71:fb:63:90:db:0d:9e:b6:87:4f:83:f8:39:6e:1e:de:ee:09:
         53:99:a2:0c:98:3d:ea:1e:fa:5e:fe:f3:6f:75:29:9b:3e:8d:
         a0:1e:89:f1:bf:c5:94:3f:36:a8:cc:58:28:8c:af:69:f6:91:
         13:55:a3:ac:65:87:f5:4f:b2:e6:97:c8:b1:a1:7c:33:0e:f1:
         bf:d9:7a:d2:18:ed:d5:06:69:82:27:bc:23:90:9a:73:bb:a7:
         8b:ed:71:57:b3:71:2d:a7:75:57:e9:c5:61:c5:5c:7e:43:8d:
         22:8a:0c:9a:7e:00:5e:b2:94:e1:b5:44:66:20:ba:0b:11:d4:
         5e:5c:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:58:57 2026 by rpki-client