This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer
File:                     _eoOU4nJlJDK7YKxckgBHMMy7tk.cer (raw, json)
Hash identifier:          6MyuJJxT7RtMaSEcDIy9UQYiXbuLW6qbYUug/J4KcCs=
Subject key identifier:   FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       39D6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:47:47 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 102.132.96.0/19
                          IP: 102.221.188.0/22
                          IP: 2c0f:ef78::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14806 (0x39d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:47:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36593EDAF, serialNumber=FDEA0E5389C99490CAED82B17248011CC332EED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:84:2b:ab:9b:5f:6d:3b:74:71:65:3e:af:
                    24:ce:f3:72:e6:7b:68:99:3b:a9:82:ca:52:bd:45:
                    ab:7e:95:4b:1b:07:50:0d:c6:3c:bb:c1:34:97:f2:
                    09:6d:9d:a6:7f:c1:c4:76:ec:e0:21:dd:d6:da:bd:
                    79:96:cd:8a:ac:17:1c:9d:20:4c:43:60:bf:41:40:
                    40:18:b6:63:65:16:23:7e:ee:f8:bd:dc:be:1d:de:
                    3d:05:39:af:71:a4:d4:53:35:6e:6c:99:5a:10:12:
                    2d:05:d1:a9:3e:f6:f6:3a:02:72:c7:c6:85:02:a7:
                    8c:fa:01:2f:87:7d:60:01:13:f7:03:e5:84:98:a5:
                    52:90:e0:9f:ee:09:0e:2b:da:40:f5:0c:46:af:1d:
                    63:19:b3:22:f9:22:3c:e5:c0:b4:a7:ae:63:1d:5a:
                    00:30:0f:97:8c:92:65:da:ec:53:f8:0b:4a:5e:52:
                    24:13:2e:cb:13:7a:e6:94:8e:3d:29:0d:0a:fa:2c:
                    18:d1:81:b0:60:86:d0:5e:b4:0b:6a:9b:02:6f:fc:
                    eb:84:59:c5:e6:9a:f7:c3:2d:50:43:90:6b:5f:83:
                    bd:87:8b:46:65:6e:07:d6:cb:33:e1:6f:70:16:ea:
                    df:2f:62:c1:87:64:48:c6:66:ac:9c:f4:dd:ac:2d:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.132.96.0/19
                  102.221.188.0/22
                IPv6:
                  2c0f:ef78::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:6f:3e:22:e9:c7:9d:02:85:04:2c:8a:8c:e1:19:39:67:bb:
         c4:49:16:03:1c:42:33:30:7e:ad:a2:9b:a6:1d:7d:50:03:d0:
         41:d2:68:9b:f1:98:4d:03:52:97:fe:39:ae:d0:bd:f1:fa:a8:
         b6:ea:e9:f6:43:ac:f4:c7:78:7f:90:5c:7b:f6:bc:10:d5:7f:
         b6:f0:62:d4:a2:c5:86:03:52:34:0c:af:7c:06:02:69:c2:35:
         ca:f2:80:6a:ee:d7:d8:c7:e6:a7:9f:73:64:b8:57:68:86:b6:
         98:9f:88:a5:43:fe:aa:9d:a3:41:d8:31:a4:f0:97:c3:a1:25:
         d5:14:d7:fb:ac:07:80:13:8d:98:cb:5d:49:af:73:35:1d:89:
         44:5b:4f:50:89:18:6f:75:8e:48:9c:d6:c5:37:4b:b4:2c:3a:
         d4:95:8f:9d:4e:ce:60:5a:bb:c8:bf:16:76:01:2f:63:38:36:
         83:64:3f:22:0d:66:c5:fe:22:ec:55:c3:25:24:f8:aa:ee:f8:
         7f:4c:e2:2e:37:d6:c4:b1:5c:f3:96:d0:f8:43:69:21:d5:51:
         d0:16:ac:3c:b5:23:e9:fd:e3:77:6a:49:e8:36:7f:b1:02:e2:
         79:5c:3e:61:26:f0:bb:15:1d:fe:17:85:ca:ae:54:70:30:f3:
         9b:10:86:e9
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgICOdYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMTQ3NDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjU5M0VEQUYxMTAvBgNVBAUTKEZERUEwRTUzODlDOTk0OTBDQUVEODJC
MTcyNDgwMTFDQzMzMkVFRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTi4Qrq5tfbTt0cWU+ryTO83Lme2iZO6mCylK9Rat+lUsbB1ANxjy7wTSX8glt
naZ/wcR27OAh3dbavXmWzYqsFxydIExDYL9BQEAYtmNlFiN+7vi93L4d3j0FOa9x
pNRTNW5smVoQEi0F0ak+9vY6AnLHxoUCp4z6AS+HfWABE/cD5YSYpVKQ4J/uCQ4r
2kD1DEavHWMZsyL5IjzlwLSnrmMdWgAwD5eMkmXa7FP4C0peUiQTLssTeuaUjj0p
DQr6LBjRgbBghtBetAtqmwJv/OuEWcXmmvfDLVBDkGtfg72Hi0ZlbgfWyzPhb3AW
6t8vYsGHZEjGZqyc9N2sLVmHAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQU/eoOU4nJ
lJDK7YKxckgBHMMy7tkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1OTNFRC81MzM3NUZCMkJFNDQx
MUYwODlFQkVGRDBEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTkzRUQvNTMzNzVGQjJCRTQ0MTFGMDg5RUJFRkQwREFFNEVDOUMvX2VvT1U0
bkpsSkRLN1lLeGNrZ0JITU15N3RrLm1mdDA0BggrBgEFBQcBBwEB/wQlMCMwEgQC
AAEwDAMEBWaEYAMEAmbdvDANBAIAAjAHAwUALA/veDANBgkqhkiG9w0BAQsFAAOC
AQEASW8+IunHnQKFBCyKjOEZOWe7xEkWAxxCMzB+raKbph19UAPQQdJom/GYTQNS
l/45rtC98fqoturp9kOs9Md4f5Bce/a8ENV/tvBi1KLFhgNSNAyvfAYCacI1yvKA
au7X2Mfmp59zZLhXaIa2mJ+IpUP+qp2jQdgxpPCXw6El1RTX+6wHgBONmMtdSa9z
NR2JRFtPUIkYb3WOSJzWxTdLtCw61JWPnU7OYFq7yL8WdgEvYzg2g2Q/Ig1mxf4i
7FXDJST4qu74f0ziLjfWxLFc85bQ+ENpIdVR0BasPLUj6f3jd2pJ6DZ/sQLieVw+
YSbwuxUd/heFyq5UcDDzmxCG6Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:17:10 2026 by rpki-client