This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e86nsLinQVZrXm80Yi1Yiw-2f5U.cer
File:                     e86nsLinQVZrXm80Yi1Yiw-2f5U.cer (raw, json)
Hash identifier:          xSaJBGHyyIBsQxeepT3qJjfuuMGMuxDpf2H849NKlSg=
Subject key identifier:   7B:CE:A7:B0:B8:A7:41:56:6B:5E:6F:34:62:2D:58:8B:0F:B6:7F:95
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       396A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:30:41 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328837
                          IP: 102.220.52.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14698 (0x396a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:30:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F364BCB6AF, serialNumber=7BCEA7B0B8A741566B5E6F34622D588B0FB67F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:33:39:d7:5e:3d:87:95:7d:1c:91:0b:22:
                    af:81:84:cb:97:0b:03:17:82:93:c2:27:61:5a:52:
                    a9:58:1a:c4:f6:00:ab:5d:af:9f:b3:59:34:0f:25:
                    07:ec:07:02:ec:b8:77:a9:ee:b8:9a:8b:e0:94:a8:
                    23:26:60:6f:6e:1e:33:cd:43:d4:0b:17:21:cd:2a:
                    d9:2c:eb:7b:b9:10:b2:81:db:77:b6:f9:7a:db:c9:
                    5c:ec:3b:09:3b:dc:aa:3d:95:b7:7e:3f:5f:9f:d1:
                    f0:b4:30:5a:22:0b:ca:09:36:8d:bc:ca:f7:a2:a4:
                    32:97:1e:a8:a1:25:62:7d:95:81:c0:50:e2:41:77:
                    38:85:18:4e:24:d0:bc:ac:21:f8:11:96:0b:e9:ad:
                    7b:cf:8f:38:f5:eb:a0:4c:2f:cd:a0:2f:bb:26:18:
                    ae:ab:1b:e4:66:37:24:08:5c:85:70:9d:5f:40:05:
                    a9:dc:42:34:7b:37:e1:ce:29:01:de:aa:8c:14:60:
                    50:49:09:21:d5:7b:a5:ec:69:08:52:97:db:f9:f5:
                    7c:6b:c7:1b:a1:dd:67:1b:0a:4b:72:c0:80:bf:a6:
                    ae:af:62:71:30:84:37:4d:fd:41:f1:0d:74:72:94:
                    53:80:41:54:46:94:54:70:e6:d7:1d:01:12:02:6c:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CE:A7:B0:B8:A7:41:56:6B:5E:6F:34:62:2D:58:8B:0F:B6:7F:95
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328837

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:27:ba:aa:b7:58:64:d2:9b:dc:d4:df:54:92:7b:d8:51:43:
         74:43:d4:a5:5d:07:4f:35:96:13:da:78:dd:6a:a5:12:e9:42:
         10:d3:59:a2:5f:4c:dc:a4:6c:7d:1a:fc:36:45:a1:ee:a4:4a:
         a7:71:79:40:ce:31:3a:57:d7:7b:db:af:c9:5f:ef:d3:ba:af:
         cd:d7:8a:8b:04:42:f0:cb:11:46:bb:09:ec:d7:22:4b:c6:dd:
         4f:1c:51:e7:44:c3:0f:52:ab:78:d2:fa:a5:c9:3b:5a:ae:86:
         de:c5:c3:44:27:81:87:af:f9:7a:86:81:0d:f2:fd:8a:f2:6e:
         ea:a6:2c:5d:29:9d:2e:11:87:b1:48:c2:e6:03:08:19:08:63:
         a7:72:e8:e2:7b:b8:9e:cd:b9:22:41:95:1b:a7:45:07:10:2f:
         88:13:cb:bd:f6:43:3f:87:00:db:b7:61:69:0d:b6:95:d0:4e:
         57:98:fe:6e:47:4f:6c:3d:5c:8d:06:15:a7:a5:8e:97:95:19:
         0e:35:e0:90:db:50:0f:63:ca:71:07:bd:88:a4:2b:27:40:c6:
         9a:7f:d9:79:dd:ec:db:36:5a:38:d1:f5:09:79:84:0b:84:2f:
         a1:bc:ce:13:63:af:c8:9a:2b:28:b5:00:04:65:0f:30:1b:a2:
         97:d3:e9:44
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICOWowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMTMwNDFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjRCQ0I2QUYxMTAvBgNVBAUTKDdCQ0VBN0IwQjhBNzQxNTY2QjVFNkYz
NDYyMkQ1ODhCMEZCNjdGOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHezM51149h5V9HJELIq+BhMuXCwMXgpPCJ2FaUqlYGsT2AKtdr5+zWTQPJQfs
BwLsuHep7riai+CUqCMmYG9uHjPNQ9QLFyHNKtks63u5ELKB23e2+XrbyVzsOwk7
3Ko9lbd+P1+f0fC0MFoiC8oJNo28yveipDKXHqihJWJ9lYHAUOJBdziFGE4k0Lys
IfgRlgvprXvPjzj166BML82gL7smGK6rG+RmNyQIXIVwnV9ABancQjR7N+HOKQHe
qowUYFBJCSHVe6XsaQhSl9v59Xxrxxuh3WcbCktywIC/pq6vYnEwhDdN/UHxDXRy
lFOAQVRGlFRw5tcdARICbLsfAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUe86nsLin
QVZrXm80Yi1Yiw+2f5UwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0QkNCNi9FNzlBODYwQ0RCMzEx
MUVCQjIxNjc4MkNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NEJDQjYvRTc5QTg2MENEQjMxMTFFQkIyMTY3ODJDRjhBRUEyMjgvZTg2bnNM
aW5RVlpyWG04MFlpMVlpdy0yZjVVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBIUwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3DQwDQYJKoZIhvcN
AQELBQADggEBAFcnuqq3WGTSm9zU31SSe9hRQ3RD1KVdB081lhPaeN1qpRLpQhDT
WaJfTNykbH0a/DZFoe6kSqdxeUDOMTpX13vbr8lf79O6r83XiosEQvDLEUa7CezX
IkvG3U8cUedEww9Sq3jS+qXJO1quht7Fw0QngYev+XqGgQ3y/YrybuqmLF0pnS4R
h7FIwuYDCBkIY6dy6OJ7uJ7NuSJBlRunRQcQL4gTy732Qz+HANu3YWkNtpXQTleY
/m5HT2w9XI0GFaeljpeVGQ414JDbUA9jynEHvYikKydAxpp/2Xnd7Ns2WjjR9Ql5
hAuEL6G8zhNjr8iaKyi1AARlDzAbopfT6UQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:58:52 2026 by rpki-client