This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
File:                     dVGa9IvP07pGhRZS31S4t-uI7f8.cer (raw, json)
Hash identifier:          6BurWjZy3vWiP6+IJP5gTV/23zfYr9qTyPeTPk7G22o=
Subject key identifier:   75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3F99
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 19 Jan 2026 13:37:39 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37049
                          IP: 41.222.136.0/21
                          IP: 41.242.160.0/20
                          IP: 196.32.248.0/21
                          IP: 2c0e:7e00::/28
                          IP: 2c0f:fdc8::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16281 (0x3f99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan 19 13:37:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3652210AF, serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:29:43:14:81:2d:9b:62:65:c0:7e:5d:74:
                    fc:e5:05:c4:70:06:05:96:e5:d2:bd:fd:b6:32:ce:
                    b8:73:50:ae:99:40:fb:60:b4:b4:22:84:be:f3:9b:
                    18:04:2a:1e:8f:a2:a4:a9:82:89:f1:09:f8:30:1b:
                    9e:43:d5:bb:07:bd:cf:2f:0a:60:03:62:29:10:d6:
                    ef:b4:66:f0:32:0d:d7:0e:e4:d6:db:43:07:f4:a5:
                    66:ee:f1:17:cc:3a:1a:b0:09:86:7c:02:4e:b0:41:
                    d0:74:4c:61:dc:fe:44:da:22:d4:69:b7:06:6c:20:
                    bc:5c:2e:40:a7:00:06:6d:b6:b6:66:fd:98:5f:04:
                    ce:43:90:f0:bb:d2:8f:0f:05:d3:97:32:8b:6d:c3:
                    e3:7a:4d:a8:fb:d3:f5:38:a3:40:b9:d7:e1:59:75:
                    d0:0c:68:1f:84:b6:c9:21:e8:3e:e9:62:59:ba:cf:
                    8e:d8:39:f7:39:17:e2:cd:4d:35:f8:03:ca:8d:83:
                    44:c3:bb:fe:ea:24:69:21:9d:1c:27:5a:36:8d:cd:
                    68:9a:35:9c:8e:c7:42:cf:e0:45:a2:0d:a4:a3:ac:
                    6e:a8:eb:92:20:89:98:16:1a:16:2f:f1:7f:a7:71:
                    24:7e:7a:68:ad:77:a8:6e:86:8a:ce:ad:21:52:55:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37049

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.222.136.0/21
                  41.242.160.0/20
                  196.32.248.0/21
                IPv6:
                  2c0e:7e00::/28
                  2c0f:fdc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:52:5d:91:3a:f5:2e:a2:75:b4:e4:3c:03:53:2b:6b:96:79:
         42:83:47:36:99:6a:ea:72:68:64:73:e8:9d:b2:93:3c:4b:72:
         eb:ec:27:76:56:b0:7f:1b:21:d6:35:78:de:39:b5:dc:64:8f:
         d2:93:05:4e:e5:d6:c5:5d:36:60:d5:a8:2e:b3:24:4d:92:88:
         36:b3:09:f7:ea:15:c1:f5:d0:83:03:0e:cd:26:0e:33:14:be:
         7d:4a:86:3c:d6:b1:6c:0f:b2:36:de:23:1a:01:78:f4:1b:f7:
         1c:6b:1d:30:6c:0e:c3:79:9b:a3:47:4f:2b:3f:37:0e:13:78:
         1b:bc:94:dd:c0:a3:97:17:0d:e0:12:d2:c4:6d:b3:3e:f8:7e:
         f6:63:8d:6a:40:60:01:dc:07:18:2f:50:19:11:20:6d:6a:3a:
         81:a4:ac:a7:d1:d9:73:14:61:ed:60:39:31:4f:14:9d:64:b2:
         92:03:b5:b7:cf:e7:62:f2:3d:d2:5b:fe:b2:01:8f:b6:23:50:
         e9:75:1e:80:2e:dc:3b:e3:c4:c5:cc:8b:03:96:23:6a:ed:b9:
         a3:67:d5:08:3b:d4:48:ca:6f:5a:e9:a4:73:36:76:f0:27:fe:
         87:ab:93:26:7a:a7:17:33:17:6c:54:6d:bc:22:d0:8e:37:89:
         fd:75:b2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:54:42 2026 by rpki-client