This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.cer (raw, json)
Hash identifier:          sNswDeOyAbb3REf5v3Bm2AF0dUAJ7uyDv5AClGhAc+g=
Subject key identifier:   79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3812
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:33:28 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328590
                          IP: 102.38.48.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14354 (0x3812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:33:28 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3625D4AAF, serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:87:fd:8e:b5:95:d5:8a:1d:3c:e6:08:22:
                    61:8f:75:88:6b:f3:56:68:cd:d4:8e:3d:68:a3:8e:
                    d8:c3:d3:49:a8:39:2f:9b:63:c6:aa:c5:45:05:53:
                    34:29:6c:87:01:2f:f7:9a:00:4b:59:ee:55:09:3f:
                    34:46:b8:59:28:ce:c3:cd:6f:e7:a2:05:37:5e:8e:
                    43:b2:c6:0d:3d:6d:af:08:38:52:a5:56:2a:a3:52:
                    6e:b2:2d:f2:66:c8:ea:b6:20:22:de:32:90:49:65:
                    b6:79:a7:bf:ec:69:f8:e9:c6:07:46:06:17:87:04:
                    fa:10:d3:ef:4b:7c:06:b3:41:d9:5f:8c:6c:ab:39:
                    09:f5:17:8a:87:e4:3d:94:4c:c8:d0:60:d8:18:74:
                    0a:1e:1d:86:34:0c:00:25:9e:b3:b4:99:ff:a4:2d:
                    21:39:79:c3:e1:99:22:92:75:d8:29:ef:8a:73:1d:
                    e7:17:4f:08:53:f6:95:02:84:b5:47:61:81:67:af:
                    fc:10:2a:18:83:10:6a:22:b9:0e:ab:b4:b1:0e:c3:
                    d4:62:ab:26:a2:a1:7a:3c:56:c4:d5:42:b3:28:e7:
                    1a:ab:df:89:72:41:df:17:40:bb:17:a2:a3:d4:da:
                    71:20:77:41:a8:21:10:b9:2f:f4:bc:fe:e0:ad:a2:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328590

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.38.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:8c:f5:22:9c:f1:20:8b:17:0b:7f:27:40:11:9a:e1:eb:
         41:34:84:03:1c:44:07:2a:fa:21:70:8d:28:61:49:51:9d:11:
         85:63:e3:93:79:e2:da:97:5e:58:e7:c2:ad:df:52:98:36:81:
         45:cc:48:f3:e0:94:4b:10:bd:6d:88:30:35:0e:10:9c:6b:71:
         cf:a2:a6:d9:ac:0f:bc:32:0e:6d:f5:7f:4c:f2:d8:78:41:3d:
         8c:d4:d3:06:ce:df:38:b3:b0:d4:06:3f:22:4b:16:45:98:e0:
         a2:44:f9:44:e9:1b:c9:b0:a2:38:30:17:00:40:3c:ff:cf:48:
         41:1a:a0:27:80:f5:4b:7f:27:85:b1:b4:0c:7f:fe:47:8e:b6:
         89:48:3b:19:f0:a2:06:13:da:53:3c:51:1b:a2:ca:a4:fe:11:
         71:7c:d6:78:c1:3d:4f:4f:d3:2a:a2:6c:8a:07:a8:82:33:2a:
         fc:8f:d1:a0:a7:48:35:15:b9:8f:1b:4e:84:68:fd:83:24:19:
         9b:9b:34:fb:4f:16:05:ed:72:9a:93:08:30:30:3b:11:aa:59:
         3c:9e:29:16:74:f4:e0:cc:cd:e3:e2:58:7a:2d:e6:ec:9a:97:
         c7:99:9a:d0:c2:6f:2d:f8:70:6e:b9:dd:c1:48:76:35:67:2e:
         22:f5:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:58:42 2026 by rpki-client