This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
File:                     eJra0zjCDXJE3Hvm0PRKklP8jxM.cer (raw, json)
Hash identifier:          Byw/Er2zwuB/JsodMhmRxPcgibTO6hxst4Rud10O8FY=
Subject key identifier:   78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3ED2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 05:00:20 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328980
                          IP: 102.218.144.0/22
                          IP: 2001:43ff:2000::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16082 (0x3ed2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 05:00:20 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36EE687AF, serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:76:74:af:84:a7:07:4f:de:bc:0d:61:f9:
                    ac:4f:c4:83:f3:f7:5d:f8:e6:9d:53:c0:80:ee:69:
                    68:40:28:de:34:09:99:19:50:c0:02:36:3e:50:5f:
                    a1:98:90:2a:3a:01:3d:30:0c:9a:d6:b2:88:2b:3f:
                    e6:fd:0e:5e:83:fc:0d:dd:48:0e:97:7b:2b:23:c1:
                    02:ac:c9:1c:5f:f7:fa:11:3e:6f:fe:d8:26:96:4e:
                    fc:a9:48:c7:16:81:d2:8d:85:ae:71:92:7d:53:40:
                    61:ee:c7:5d:cb:51:3b:51:6f:bd:23:73:1f:68:2a:
                    77:07:63:1f:49:cc:64:ff:a8:4f:3e:4b:de:4f:f6:
                    e2:84:a5:18:6b:fc:24:cb:4b:ca:6b:4a:fd:fe:f8:
                    1f:82:b3:b7:8e:71:69:cc:f7:b8:dd:b9:fa:ef:37:
                    dc:97:59:9c:93:f6:aa:36:53:53:e6:81:11:f8:58:
                    9f:fa:68:9d:ba:a6:bc:00:fc:7d:e5:85:48:20:4f:
                    c3:ef:e9:86:d1:28:d7:2f:9d:61:c7:24:b0:4a:d1:
                    71:8d:ef:5a:9b:e4:a5:5d:c2:f1:0c:3a:20:d0:9d:
                    b7:c2:08:7e:f1:c9:f6:e3:78:09:6a:0b:bf:2d:f1:
                    ac:f8:ef:b6:9b:b9:ef:6d:b1:8c:8a:4f:4a:b7:85:
                    68:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328980

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.144.0/22
                IPv6:
                  2001:43ff:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:76:3e:ed:6c:5b:54:a1:3b:10:a5:ae:d4:c5:66:15:46:ad:
         44:e9:73:1b:43:94:11:9b:13:62:e5:5d:15:64:c5:79:ab:a7:
         01:5d:6d:cd:93:63:d9:3f:dc:68:cc:8b:d7:44:a0:80:f5:52:
         5d:77:b4:21:0f:68:47:c5:b4:ca:a2:31:a3:a0:fb:98:17:0d:
         5c:61:6c:0f:7f:2b:1c:83:2c:21:e9:3d:8a:09:2f:ff:55:c3:
         6f:ba:b7:72:42:37:19:79:b4:35:65:9c:41:ae:92:c3:28:0c:
         66:a3:12:76:ac:9b:f8:7c:ac:9c:b3:0f:c0:2a:5a:46:8a:b7:
         cd:7e:e6:eb:38:a5:2f:02:29:d7:c2:c4:25:1b:5d:da:9d:f8:
         e1:32:a9:a8:3f:b9:31:c6:88:7d:c6:fd:87:8d:e0:32:07:ab:
         0a:b5:66:9e:8f:a3:6f:1b:77:fa:d8:82:01:1b:c8:1c:91:eb:
         7c:a9:bc:d6:84:8c:fe:72:34:ba:e4:f2:1a:d1:b2:38:67:df:
         1f:0b:53:1b:db:7e:a0:7e:51:9f:23:5a:b0:f5:41:77:8e:ab:
         b3:03:7e:89:38:f8:bf:1b:d2:73:d3:2c:26:63:28:3d:a5:63:
         06:f7:fb:d2:94:41:81:d1:42:ed:8d:76:1c:fa:c9:e0:e3:87:
         30:bf:e1:a6
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgICPtIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwNTAwMjBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkVFNjg3QUYxMTAvBgNVBAUTKDc4OUFEQUQzMzhDMjBENzI0NERDN0JF
NkQwRjQ0QTkyNTNGQzhGMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSynZ0r4SnB0/evA1h+axPxIPz91345p1TwIDuaWhAKN40CZkZUMACNj5QX6GY
kCo6AT0wDJrWsogrP+b9Dl6D/A3dSA6XeysjwQKsyRxf9/oRPm/+2CaWTvypSMcW
gdKNha5xkn1TQGHux13LUTtRb70jcx9oKncHYx9JzGT/qE8+S95P9uKEpRhr/CTL
S8prSv3++B+Cs7eOcWnM97jdufrvN9yXWZyT9qo2U1PmgRH4WJ/6aJ26prwA/H3l
hUggT8Pv6YbRKNcvnWHHJLBK0XGN71qb5KVdwvEMOiDQnbfCCH7xyfbjeAlqC78t
8az477abue9tsYyKT0q3hWhJAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQUeJra0zjC
DXJE3Hvm0PRKklP8jxMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFRTY4Ny8xNkZCNkQ5QUZBNTQx
MUVGQTVDNjVDQkU3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUU2ODcvMTZGQjZEOUFGQTU0MTFFRkE1QzY1Q0JFNzYyRTk1MUEvZUpyYTB6
akNEWEpFM0h2bTBQUktrbFA4anhNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBRQwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAJm2pAwDwQCAAIwCQMH
ACABQ/8gADANBgkqhkiG9w0BAQsFAAOCAQEAFnY+7WxbVKE7EKWu1MVmFUatROlz
G0OUEZsTYuVdFWTFeaunAV1tzZNj2T/caMyL10SggPVSXXe0IQ9oR8W0yqIxo6D7
mBcNXGFsD38rHIMsIek9igkv/1XDb7q3ckI3GXm0NWWcQa6SwygMZqMSdqyb+Hys
nLMPwCpaRoq3zX7m6zilLwIp18LEJRtd2p344TKpqD+5McaIfcb9h43gMgerCrVm
no+jbxt3+tiCARvIHJHrfKm81oSM/nI0uuTyGtGyOGffHwtTG9t+oH5RnyNasPVB
d46rswN+iTj4vxvSc9MsJmMoPaVjBvf70pRBgdFC7Y12HPrJ4OOHML/hpg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:48:53 2026 by rpki-client