This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
File:                     _fBwBNUH4xafjwTMLtjgu_Sq38Y.cer (raw, json)
Hash identifier:          Q6FUmgfexOLwj3J662Z0h0SgR4B1xdjQfE1SRidI9V4=
Subject key identifier:   FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3D0B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:47:41 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329314
                          IP: 102.211.100.0/22
                          IP: 2c0f:1740::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15627 (0x3d0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:47:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36B1BD7AF, serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:cf:49:5f:cd:23:ef:57:d3:ed:c1:89:b4:
                    13:5e:15:cb:ad:aa:8a:97:18:e2:c8:b9:f6:25:22:
                    49:f1:88:6b:95:84:25:01:57:60:66:ac:ab:af:b8:
                    c3:fc:03:88:88:9a:6a:22:39:53:3a:82:13:54:13:
                    11:7e:6a:cd:3e:43:a6:6d:aa:cb:e8:dc:e6:65:97:
                    ac:db:b0:ae:0b:67:52:74:af:3f:2b:65:2a:44:0c:
                    31:8b:1f:78:88:1d:3f:43:a6:8d:dc:dd:1f:92:68:
                    3f:91:62:61:49:af:bc:7d:33:a2:f2:3b:98:23:ca:
                    71:63:95:89:e8:42:0c:f7:81:0e:06:27:53:c1:03:
                    bd:18:e7:d2:b7:03:5b:4f:e2:bc:20:6a:45:f9:ce:
                    f1:ff:66:66:f7:b3:57:cd:29:4c:c5:e0:75:ec:29:
                    c3:01:fa:2a:ee:ea:9c:fe:89:88:7d:94:32:93:21:
                    3c:83:fd:ad:70:17:7a:3b:82:c2:e7:b1:32:da:63:
                    8a:e2:70:38:03:a8:1d:3e:71:9f:00:29:43:f1:06:
                    3e:be:c8:73:ca:be:89:30:d8:b5:4f:7e:d0:e5:8b:
                    59:40:3b:3d:3a:bb:11:7b:c2:b6:42:ef:f4:25:d1:
                    36:f1:e0:9d:9a:9f:a1:31:e7:56:ae:66:05:82:57:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329314

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.100.0/22
                IPv6:
                  2c0f:1740::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:fe:a8:6f:00:a4:a2:e7:ef:a8:81:c2:b5:b8:fb:b5:c4:
         0d:b7:e8:f8:f1:dc:c0:d2:f2:43:69:6d:63:da:49:95:c3:f1:
         d2:08:6e:57:03:03:ec:35:50:77:fd:ad:81:d6:18:31:76:ed:
         f5:e4:2f:b8:51:e5:37:ba:66:af:01:55:9a:83:bb:fd:f0:41:
         eb:f5:ff:03:cf:02:af:cf:d3:0f:12:87:8a:b0:59:f9:47:33:
         12:60:85:4e:20:18:df:2d:bb:2f:6c:94:6f:29:4e:50:6b:5b:
         de:6d:f9:b2:bc:ef:fc:cf:33:ea:a6:d2:9a:1a:ba:32:50:7d:
         bf:3c:13:6e:ed:20:6f:18:31:b6:df:8d:89:d6:79:ef:17:7f:
         22:cc:6e:e6:f7:f4:75:f3:d6:be:4c:1c:3d:ae:92:fb:a9:50:
         df:12:a5:61:f9:1f:0a:92:e3:9a:f7:7b:7d:13:61:2c:62:df:
         b5:8d:6c:cd:cb:36:2f:d0:18:c5:fd:13:fa:dc:8b:14:7b:d6:
         7c:c8:f9:78:a5:a3:aa:d2:bb:2c:16:33:38:17:2a:c4:61:dd:
         26:40:4d:64:c3:3b:da:3e:82:18:16:60:81:5c:36:e8:35:b2:
         2e:0f:f2:83:e0:97:e9:52:cf:d8:57:a2:21:ee:51:48:74:8b:
         9b:c7:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:28:51 2026 by rpki-client