This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer
File:                     eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer (raw, json)
Hash identifier:          DC9d4rxN1d11snHpp7vBD+lpxmpAmLa+2mQuQq+X908=
Subject key identifier:   79:7B:59:39:58:74:D2:EE:6E:C8:CB:FD:07:6B:2A:BC:61:3D:89:B4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3993
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:36:48 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 33774
                          AS: 36947
                          AS: 327712
                          IP: 41.96.0.0/12
                          IP: 41.200.0.0/15
                          IP: 41.221.16.0/20
                          IP: 105.96.0.0/12
                          IP: 154.240.0.0/12
                          IP: 196.20.64.0/18
                          IP: 197.112.0.0/13
                          IP: 197.200.0.0/13
                          IP: 2c0f:f858::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14739 (0x3993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:36:48 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3651B12AF, serialNumber=797B59395874D2EE6EC8CBFD076B2ABC613D89B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:f3:44:19:99:e3:38:29:76:4c:28:bc:eb:
                    9d:51:ce:50:7a:7e:b6:67:83:36:5f:ee:b1:ed:2c:
                    96:38:a7:85:9b:cd:48:51:2d:92:8b:81:0c:8d:ba:
                    0f:73:33:06:ae:f9:e4:1e:f2:b4:11:6f:59:3e:68:
                    79:6d:02:00:52:e8:1d:b6:75:1b:8b:b3:41:ed:e5:
                    bd:32:cf:81:58:52:05:65:30:27:a2:43:39:95:0d:
                    01:3e:fb:b1:55:54:12:37:68:8d:ea:b6:dc:ae:3f:
                    92:0e:6c:14:05:8d:7c:52:62:dc:f3:da:a3:ed:d7:
                    2e:c2:d4:87:41:d1:84:34:62:19:25:a7:2c:3d:01:
                    eb:b1:82:6c:fc:7c:39:27:91:f5:6e:62:30:25:b3:
                    48:00:22:63:cb:02:b1:2d:d6:42:37:82:d1:73:45:
                    89:c5:5c:4d:2a:54:2c:a7:2e:b5:8f:a2:68:48:fb:
                    24:8c:ed:00:24:d2:85:d9:b6:33:6b:3a:7f:c6:5b:
                    3e:4a:0f:30:82:ec:d8:41:94:6e:1c:08:01:24:97:
                    0d:80:41:36:f6:22:5f:14:ce:8b:6a:84:1e:c4:61:
                    f0:e5:63:7a:17:3e:7c:bd:f4:90:80:89:08:01:76:
                    e9:eb:5d:6d:d9:e0:97:fc:dc:23:f3:f2:7a:47:cb:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7B:59:39:58:74:D2:EE:6E:C8:CB:FD:07:6B:2A:BC:61:3D:89:B4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33774
                  36947
                  327712

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.96.0.0/12
                  41.200.0.0/15
                  41.221.16.0/20
                  105.96.0.0/12
                  154.240.0.0/12
                  196.20.64.0/18
                  197.112.0.0/13
                  197.200.0.0/13
                IPv6:
                  2c0f:f858::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:59:c6:c4:84:f5:06:25:db:7d:e3:b4:1e:10:1a:f4:a5:17:
         a0:d6:b5:ef:23:c8:1a:f7:82:cb:21:2d:b5:b6:b2:12:1a:a4:
         45:d4:ef:5a:a1:e9:56:da:d9:cc:2b:74:aa:42:79:95:3c:bb:
         e6:dc:5b:dc:d7:ec:9f:2d:44:b4:bc:c9:2b:79:b0:b2:f2:e7:
         fd:f4:08:e1:76:a3:1f:e8:d6:e2:26:4b:1f:66:de:c7:e3:f2:
         48:44:7d:85:0c:34:08:4d:61:e7:ce:8e:07:cb:8c:0c:9e:16:
         1f:f0:a1:c1:4d:7e:88:bc:b7:d1:9d:da:83:05:cd:ee:0a:f0:
         c0:fd:ab:88:b9:6a:62:14:e6:54:04:e7:6f:c3:ac:3b:d1:e6:
         05:e1:01:42:41:14:68:23:3c:82:20:67:c5:f7:ad:e9:1e:36:
         a7:da:a8:24:f2:29:20:3c:99:a3:5f:78:c1:85:c1:69:99:f5:
         4b:86:4e:77:a2:49:d5:6c:61:fe:de:a6:27:c0:bb:b4:05:99:
         7b:91:6b:45:05:94:6d:2d:7f:65:84:3f:6d:6b:8c:fc:b5:b9:
         f6:18:e0:ae:6a:9c:79:9a:e8:11:63:4b:50:de:1b:85:f4:26:
         81:d5:14:87:db:77:3f:63:65:dc:68:b2:a4:22:45:e5:c4:ae:
         c4:dc:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:00:48 2026 by rpki-client