This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer
File:                     _eoOU4nJlJDK7YKxckgBHMMy7tk.cer (raw, json)
Hash identifier:          PvhU8unAm1Iw04t7aNeoOJ7EHa6wP10UdxKuU+UzKQk=
Subject key identifier:   FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       36C3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 10 Nov 2025 14:48:40 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 102.132.96.0/19
                          IP: 102.221.188.0/22
                          IP: 2c0f:ef78::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14019 (0x36c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov 10 14:48:40 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36593EDAF, serialNumber=FDEA0E5389C99490CAED82B17248011CC332EED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:84:2b:ab:9b:5f:6d:3b:74:71:65:3e:af:
                    24:ce:f3:72:e6:7b:68:99:3b:a9:82:ca:52:bd:45:
                    ab:7e:95:4b:1b:07:50:0d:c6:3c:bb:c1:34:97:f2:
                    09:6d:9d:a6:7f:c1:c4:76:ec:e0:21:dd:d6:da:bd:
                    79:96:cd:8a:ac:17:1c:9d:20:4c:43:60:bf:41:40:
                    40:18:b6:63:65:16:23:7e:ee:f8:bd:dc:be:1d:de:
                    3d:05:39:af:71:a4:d4:53:35:6e:6c:99:5a:10:12:
                    2d:05:d1:a9:3e:f6:f6:3a:02:72:c7:c6:85:02:a7:
                    8c:fa:01:2f:87:7d:60:01:13:f7:03:e5:84:98:a5:
                    52:90:e0:9f:ee:09:0e:2b:da:40:f5:0c:46:af:1d:
                    63:19:b3:22:f9:22:3c:e5:c0:b4:a7:ae:63:1d:5a:
                    00:30:0f:97:8c:92:65:da:ec:53:f8:0b:4a:5e:52:
                    24:13:2e:cb:13:7a:e6:94:8e:3d:29:0d:0a:fa:2c:
                    18:d1:81:b0:60:86:d0:5e:b4:0b:6a:9b:02:6f:fc:
                    eb:84:59:c5:e6:9a:f7:c3:2d:50:43:90:6b:5f:83:
                    bd:87:8b:46:65:6e:07:d6:cb:33:e1:6f:70:16:ea:
                    df:2f:62:c1:87:64:48:c6:66:ac:9c:f4:dd:ac:2d:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.132.96.0/19
                  102.221.188.0/22
                IPv6:
                  2c0f:ef78::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:13:08:ac:b7:95:2b:a2:d1:6c:9a:72:9f:eb:8c:e0:45:9e:
         65:44:16:31:7f:db:cf:71:4c:f4:9d:94:68:24:c1:dc:a8:5d:
         88:f4:32:31:c2:80:c7:80:30:54:48:6a:6f:0b:a6:2c:ca:d9:
         b1:e9:6a:6e:fa:c8:83:c9:1e:54:95:04:c1:eb:7f:89:76:2e:
         9e:41:67:6b:ce:c5:56:dc:f9:45:ae:56:f6:b9:8c:5c:56:d1:
         2f:58:31:64:62:6c:33:d3:fe:63:97:e8:a1:13:ed:73:99:aa:
         b7:ea:1b:12:eb:db:da:17:2c:29:8e:cc:49:ba:76:8e:1e:2e:
         95:80:24:f8:c3:bb:b1:8d:e4:30:af:7e:26:8d:96:f8:c9:70:
         ba:4e:14:29:38:77:19:a5:73:90:b0:89:58:19:7d:c2:71:73:
         5d:d2:ed:08:cb:15:92:e7:e1:39:cd:cb:ce:d2:57:b3:3d:fd:
         91:21:d0:76:b3:1d:ac:68:a4:9e:1b:5e:8c:63:c8:f4:a9:f2:
         6d:ec:d3:07:24:17:a8:8a:4e:9a:48:03:c3:a0:8f:bf:5a:c2:
         1d:8b:73:d0:67:e0:57:6c:74:74:14:04:79:05:52:77:d7:bc:
         c0:57:10:05:07:ca:8e:a8:0d:d9:64:10:8b:7c:ad:d0:4e:64:
         dd:77:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:30:52 2025 by rpki-client