This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer
File:                     V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer (raw, json)
Hash identifier:          lQs83nJTc/0JSLB7R/U30hALytAdAHB0QE25Q0FlTjc=
Subject key identifier:   57:50:8C:DF:49:52:3A:38:13:3E:97:BC:0C:1B:F4:A7:A3:5F:67:A4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3AA5
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:18:29 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329247
                          IP: 102.212.24.0/22
                          IP: 2c0f:4340::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15013 (0x3aa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:18:29 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F366E94BAF, serialNumber=57508CDF49523A38133E97BC0C1BF4A7A35F67A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:5f:d3:69:bd:e1:33:ec:b6:7c:ce:48:b9:
                    f2:11:c9:8b:06:21:0d:9a:ac:7b:2a:fd:d8:19:85:
                    c6:78:21:1b:b4:71:85:05:f9:8c:bf:d7:7a:51:fb:
                    71:49:ea:98:a0:d6:20:fd:c1:04:6e:9b:5b:dd:70:
                    00:7c:91:d1:61:ad:26:eb:02:66:c3:88:4d:74:b5:
                    dc:b5:b7:5d:4c:ac:a8:93:f5:f9:17:e1:0b:88:a0:
                    f3:6a:cc:0b:66:11:77:d8:96:e1:40:49:aa:02:16:
                    89:9c:25:ad:93:d9:6c:43:70:72:5d:23:2d:54:e1:
                    c0:41:7b:68:8a:6c:bc:46:90:05:fa:0c:36:9f:9e:
                    57:ac:16:cc:69:71:21:03:16:a5:44:1f:91:ec:fe:
                    11:b4:6a:db:19:52:21:ba:c1:62:ae:2b:ec:92:08:
                    15:46:10:c9:74:85:33:85:70:7c:5a:05:8b:54:e4:
                    35:ca:c4:98:5f:46:65:a5:32:2a:c9:a7:f0:e1:96:
                    25:05:ce:5b:6a:e6:de:e0:e8:54:76:0b:5e:94:cd:
                    db:2d:1c:0e:8e:a1:3b:39:b1:54:db:2f:6c:fb:ee:
                    32:93:f8:ea:c5:f5:01:f7:70:77:07:90:46:63:9e:
                    6e:99:74:18:49:9f:a3:61:fe:09:1d:96:5e:8e:b0:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:50:8C:DF:49:52:3A:38:13:3E:97:BC:0C:1B:F4:A7:A3:5F:67:A4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329247

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.24.0/22
                IPv6:
                  2c0f:4340::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:44:6a:4f:ea:1d:5e:27:31:cd:4e:c7:6f:4e:10:0b:3e:3b:
         a6:58:a4:91:e7:f7:18:65:ff:ac:85:e9:c1:bf:2f:6d:67:9d:
         c0:36:42:08:6c:ff:a5:f5:c8:c4:75:df:32:31:cc:e2:13:ac:
         38:ba:81:f2:4f:65:e8:ef:65:f4:d8:3c:1c:53:85:ca:1d:a3:
         c6:01:4f:d1:02:f5:c3:77:7f:d8:67:f2:6f:d0:78:1e:1a:a4:
         6c:0c:d1:51:eb:e0:cb:8e:d5:63:d9:17:85:30:b2:2c:45:32:
         22:7f:1b:c1:a6:07:83:d1:67:23:18:21:e1:ba:d2:7b:3d:8a:
         1a:46:d7:12:a4:1c:1a:8d:ca:4d:57:d5:59:0a:66:00:96:11:
         93:45:52:ed:ae:cc:5e:78:f8:a3:95:af:1e:03:58:e7:56:76:
         de:77:b3:d1:f1:18:9c:4e:a7:1b:7b:86:e0:99:8a:88:7e:c7:
         c5:51:77:76:78:dd:60:10:e8:a7:06:83:26:52:96:a0:b0:ca:
         b0:31:47:8f:73:a0:04:52:07:3c:a8:63:7e:dc:cb:e1:6d:94:
         59:e6:a6:25:91:c0:36:22:df:05:27:44:23:f0:f0:55:7d:24:
         66:25:b5:cb:f7:1b:08:ed:c6:26:a1:bb:ff:73:32:2b:88:fc:
         8b:43:67:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:27:10 2026 by rpki-client