This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
File:                     _47Skrq7L4ZA7kbxs1kWS4BTj1U.cer (raw, json)
Hash identifier:          QbciLiyV0iJXHAMEkKk7vQOl6p22XjuSGpVp8wlHez8=
Subject key identifier:   FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       37F0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:27:38 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328808
                          IP: 102.217.244.0/22
                          IP: 102.220.228.0/22
                          IP: 2c0f:4500::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14320 (0x37f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:27:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3621C8AAF, serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:84:b2:ee:a2:86:42:89:a9:d6:0e:98:4e:
                    9a:5a:98:6b:b0:21:2e:1a:0e:b0:b4:05:52:26:32:
                    0e:58:06:de:7a:da:f8:7f:35:0f:2f:a1:7a:9a:89:
                    a9:5c:3f:67:33:46:10:27:42:cf:7c:c3:13:20:e1:
                    61:79:fd:a8:ea:3c:d4:cc:ec:d8:1e:c6:56:6e:28:
                    ac:6e:43:b2:06:42:50:f5:4c:7d:89:ae:dd:df:33:
                    fd:3c:02:17:36:43:84:f3:58:46:9e:45:53:50:c8:
                    b4:0a:98:9b:43:31:33:47:42:96:ce:4e:b3:0c:13:
                    58:62:6c:26:4f:87:a2:e5:ec:fe:0b:88:d3:47:8f:
                    ea:cd:3a:3a:d7:7e:5b:a1:b8:58:e6:9b:14:a8:dc:
                    83:2a:7a:6d:da:48:62:53:d6:3b:ed:a2:50:e3:35:
                    77:0b:af:83:29:7d:07:56:c0:f2:a7:af:7c:8c:4e:
                    0b:ea:5b:ba:06:3f:a9:ed:4e:a5:ef:40:25:7f:4c:
                    a0:d1:90:18:c0:79:31:2e:59:22:13:c8:35:47:1a:
                    01:04:76:31:26:4f:14:a0:02:8d:f5:da:26:7e:73:
                    74:ec:20:ae:3e:5b:0e:77:fc:51:e3:43:1f:4f:44:
                    f0:75:6d:b8:e3:5a:73:ff:7f:85:45:d2:5d:3c:26:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328808

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.244.0/22
                  102.220.228.0/22
                IPv6:
                  2c0f:4500::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:f0:a6:55:ff:30:16:38:69:ca:bb:f8:22:f1:f5:89:f6:
         c5:bf:40:dc:3f:3d:61:1b:cb:8f:c6:32:3b:7d:18:91:48:8b:
         e3:46:8b:d8:da:e4:28:90:fd:af:8e:cd:e7:f3:11:eb:dc:e1:
         c0:27:f7:df:14:46:b5:d5:2e:9f:a2:80:be:af:19:7d:3d:81:
         2d:5b:1b:3b:a2:1f:7c:0f:31:6b:52:48:7f:80:5c:8e:90:88:
         25:54:c4:e7:8d:c0:9e:5e:19:23:b5:bd:40:52:f0:93:9e:41:
         63:37:76:3f:a0:0d:69:04:0f:87:7d:99:ec:d2:af:91:47:70:
         49:0b:2b:6d:02:37:04:75:35:3e:c2:39:1d:95:77:81:0e:9d:
         95:d0:b0:a2:f2:99:05:18:fe:70:80:53:a5:e9:f3:c7:e3:4f:
         94:b6:a8:5f:81:0e:ad:1e:ec:8b:e4:72:5a:4f:76:90:7a:17:
         2c:6d:44:a8:0a:18:fa:9f:6b:35:87:cd:39:78:00:bb:62:88:
         39:4b:e5:ab:55:e1:82:8b:83:9f:d8:f4:fa:b2:a0:b7:87:c3:
         c8:3e:c8:22:af:ec:3e:b6:07:f1:f0:9b:62:4c:9e:2e:e5:bb:
         0e:86:2a:57:ab:b4:55:61:71:ee:5d:1e:26:17:eb:7a:ab:ef:
         33:3c:1b:28
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICN/AwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMDI3MzhaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjIxQzhBQUYxMTAvBgNVBAUTKEZGOEVEMjkyQkFCQjJGODY0MEVFNDZG
MUIzNTkxNjRCODA1MzhGNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJFISy7qKGQomp1g6YTppamGuwIS4aDrC0BVImMg5YBt562vh/NQ8voXqaialc
P2czRhAnQs98wxMg4WF5/ajqPNTM7NgexlZuKKxuQ7IGQlD1TH2Jrt3fM/08Ahc2
Q4TzWEaeRVNQyLQKmJtDMTNHQpbOTrMME1hibCZPh6Ll7P4LiNNHj+rNOjrXfluh
uFjmmxSo3IMqem3aSGJT1jvtolDjNXcLr4MpfQdWwPKnr3yMTgvqW7oGP6ntTqXv
QCV/TKDRkBjAeTEuWSITyDVHGgEEdjEmTxSgAo312iZ+c3TsIK4+Ww53/FHjQx9P
RPB1bbjjWnP/f4VF0l08Jm1LAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU/47Skrq7
L4ZA7kbxs1kWS4BTj1UwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyMUM4QS8wRTRFNjgzOEQzRjEx
MUVCQjBGMTJFMThGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjFDOEEvMEU0RTY4MzhEM0YxMTFFQkIwRjEyRTE4RjhBRUEyMjgvXzQ3U2ty
cTdMNFpBN2tieHMxa1dTNEJUajFVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBGgwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm2fQDBAJm3OQwDQQC
AAIwBwMFACwPRQAwDQYJKoZIhvcNAQELBQADggEBAGx28KZV/zAWOGnKu/gi8fWJ
9sW/QNw/PWEby4/GMjt9GJFIi+NGi9ja5CiQ/a+OzefzEevc4cAn998URrXVLp+i
gL6vGX09gS1bGzuiH3wPMWtSSH+AXI6QiCVUxOeNwJ5eGSO1vUBS8JOeQWM3dj+g
DWkED4d9mezSr5FHcEkLK20CNwR1NT7COR2Vd4EOnZXQsKLymQUY/nCAU6Xp88fj
T5S2qF+BDq0e7IvkclpPdpB6FyxtRKgKGPqfazWHzTl4ALtiiDlL5atV4YKLg5/Y
9PqyoLeHw8g+yCKv7D62B/Hwm2JMni7luw6GKlertFVhce5dHiYX63qr7zM8Gyg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:08:24 2026 by rpki-client