This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
File:                     VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer (raw, json)
Hash identifier:          0hrjETn7G+eD15VIefg71vxPEWdVs+UForaScV5eGvE=
Subject key identifier:   56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3821
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:36:10 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37721
                          AS: 37734
                          IP: 102.67.96.0/19
                          IP: 102.212.160.0/23
                          IP: 102.214.64.0/22
                          IP: 2c0f:ee00::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14369 (0x3821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:36:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3627A02AF, serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:95:a0:42:61:54:e8:fd:81:8f:1a:db:86:
                    cb:24:76:16:f5:12:e2:99:4c:02:8e:9f:4e:d3:da:
                    52:b2:2e:d1:08:b9:60:8f:b5:e4:e1:f1:05:5d:da:
                    89:0c:a0:bb:c0:6f:e1:78:ae:b9:51:18:86:a5:ca:
                    49:b2:1f:eb:47:e5:bf:a5:77:55:d8:cd:df:4c:27:
                    f0:dd:ff:45:89:f3:dc:10:f4:b1:87:d9:a7:8f:9d:
                    be:ad:c5:04:cd:cc:cb:27:ed:1b:83:8c:2d:58:42:
                    c1:15:f2:cd:04:ef:e1:9b:ca:0a:08:47:a8:bd:1e:
                    15:55:0e:19:07:ab:46:02:45:20:d8:c5:03:3e:ce:
                    01:7d:95:d6:f1:af:c9:da:cd:5f:ab:3c:0a:66:9f:
                    bf:cb:0f:0b:3d:8b:59:a8:32:31:95:55:40:1c:78:
                    45:35:bd:48:28:4a:d3:98:aa:5a:ca:cf:da:03:f9:
                    2c:fb:56:81:83:d8:ca:31:5e:54:2f:eb:6a:82:02:
                    49:15:48:f1:c7:e5:3a:ff:1f:d2:f2:6b:5a:55:b3:
                    a3:49:a7:6a:ea:33:a7:27:19:85:7e:93:e6:7b:40:
                    6d:c0:72:8c:4e:d5:64:f3:ff:87:e8:17:6a:0d:2a:
                    1d:ef:d2:da:52:44:be:49:6c:be:cf:37:ac:79:d7:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37721
                  37734

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.67.96.0/19
                  102.212.160.0/23
                  102.214.64.0/22
                IPv6:
                  2c0f:ee00::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:55:b6:50:2f:8d:17:0a:b6:bd:99:11:13:00:1f:7c:bb:
         bd:59:42:55:2e:a8:da:22:6f:6d:5b:b4:56:66:10:45:ed:d1:
         7d:bb:d3:3c:90:02:e2:66:52:a3:8a:0c:48:de:45:cc:af:3e:
         08:3a:71:7a:4a:e8:76:71:60:6b:ff:3b:c7:37:77:8d:00:4b:
         51:08:9c:72:5a:7d:fa:61:3e:66:ac:8b:74:a9:8b:a5:ab:f7:
         03:58:af:53:a7:da:26:97:f6:77:fd:05:10:3b:68:a6:6d:26:
         8a:ba:87:54:01:48:4a:c2:6f:8d:b1:b2:56:e5:46:00:a2:2a:
         e4:54:7b:6f:a1:43:dc:35:19:cc:2a:3e:f6:3f:b5:32:69:12:
         69:54:b9:2c:4b:45:e0:ba:f2:a5:99:89:c0:52:10:35:96:8f:
         83:6e:4a:07:e7:5b:69:e4:7c:59:e4:2e:3d:6e:97:20:2f:b1:
         92:2e:07:5d:96:90:ae:56:d5:7b:e7:26:a4:3d:22:d5:4c:63:
         0a:f5:ff:a2:c0:47:e0:c6:16:47:0a:aa:84:b9:bb:c3:67:76:
         32:24:17:99:ca:21:4b:44:15:de:08:0e:40:7b:8e:4e:d6:a3:
         a8:52:ad:f7:34:0d:f8:d5:35:a0:35:65:1d:c3:74:32:00:14:
         d0:5e:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:29:16 2026 by rpki-client