This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WF4wfCBwCWQDd_LGenl7YYBYcwU.cer
File:                     WF4wfCBwCWQDd_LGenl7YYBYcwU.cer (raw, json)
Hash identifier:          HK1soUdIGuZmoUWO9qRJXZpbURtfzIZboThVXk4VGqg=
Subject key identifier:   58:5E:30:7C:20:70:09:64:03:77:F2:C6:7A:79:7B:61:80:58:73:05
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       39F8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:53:14 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328406
                          IP: 102.130.224.0/21
                          IP: 2c0f:ec60::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14840 (0x39f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:53:14 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F365C439AF, serialNumber=585E307C207009640377F2C67A797B6180587305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:ee:11:e0:99:2c:65:62:67:cc:29:4f:2e:
                    13:95:3b:03:49:72:fd:74:06:f8:0f:39:69:6b:db:
                    56:ac:dd:e9:28:e7:d3:6e:71:dc:ad:b4:b4:84:b9:
                    ed:69:b4:a1:8b:8c:18:ac:c5:68:19:f6:26:66:07:
                    82:22:e9:7a:cb:a3:56:0e:00:0b:55:e3:14:a6:7a:
                    af:86:aa:0d:41:1f:32:36:8d:57:aa:49:2c:59:11:
                    d4:3c:f9:6a:20:4a:91:58:3e:39:d4:4f:7e:c5:8b:
                    03:3d:c6:b7:bc:56:4d:d1:ea:93:4f:70:88:5e:b2:
                    9b:37:0d:8d:89:58:cf:10:21:22:56:6e:3a:8c:18:
                    71:a4:87:5a:ec:fe:d9:d4:3f:e3:4a:f7:fe:f9:38:
                    c0:db:ab:3b:f7:f3:99:37:1f:d2:8c:62:f8:9c:ef:
                    7f:80:9b:f9:10:03:cc:4b:da:db:76:b6:60:89:0a:
                    83:0e:64:3c:c6:1d:fe:d2:ec:76:15:69:b5:4e:5e:
                    f0:4b:04:6c:9c:6f:5e:ad:65:ac:6a:5b:da:c2:1d:
                    35:7c:d4:2b:03:1b:a7:5f:ab:0f:4e:b4:1b:59:6c:
                    71:5d:99:90:f9:32:ea:6a:29:05:a9:57:0a:e7:e7:
                    35:b1:c3:25:de:97:2d:1f:97:38:d7:df:69:41:16:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5E:30:7C:20:70:09:64:03:77:F2:C6:7A:79:7B:61:80:58:73:05
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C439/D1F340D819C111EFB2C7384F017001B1/WF4wfCBwCWQDd_LGenl7YYBYcwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328406

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.130.224.0/21
                IPv6:
                  2c0f:ec60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:f3:9d:d5:b3:cb:d7:42:1a:19:51:d3:0d:5f:c4:0d:4f:b3:
         5f:01:5e:54:17:e7:b7:aa:ff:10:d8:a6:2a:7a:42:d7:03:ad:
         7e:94:88:a8:9e:50:29:85:82:30:54:ab:f0:56:a5:fc:01:29:
         46:19:3a:51:6e:fa:74:60:8c:a1:c7:36:6d:c6:a8:c6:70:07:
         fa:9a:bc:35:df:0d:d9:d7:55:bd:49:45:78:ba:45:6d:08:21:
         9d:07:22:0d:12:29:8d:8a:3d:ea:e3:4e:7f:f7:cb:19:39:4f:
         0f:62:30:3d:4f:79:63:f2:0e:e7:e7:f5:73:4b:33:6d:24:34:
         d3:4a:fa:ae:53:a2:00:c7:1a:fd:e6:ae:d0:75:c9:bd:bb:d3:
         f9:5b:ce:14:17:9e:fd:08:64:c3:c5:44:31:8c:5c:02:22:25:
         a5:50:dd:96:e6:22:4e:6d:c6:7d:4d:f4:30:af:f0:50:83:34:
         54:e6:71:04:2c:54:35:ef:8b:20:67:b9:58:9a:bf:5c:7e:dc:
         59:64:b1:3d:a6:b2:d6:f6:29:7c:a6:c3:1d:47:d4:9e:94:3e:
         02:05:ed:03:5d:42:14:e4:03:66:e7:c9:2a:73:3b:bf:73:42:
         60:27:74:fc:f9:54:75:10:2d:23:a5:35:08:e7:da:63:54:f2:
         93:b8:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:17:53 2026 by rpki-client