This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer
File:                     eekHF2z7dQa9kWBW83X6OM5BzaM.cer (raw, json)
Hash identifier:          O5vLyZt10ROiiNgkqNpPdJhHiC7kY06WdOUmk3DT1ig=
Subject key identifier:   79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3CEF
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:42:57 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328652
                          IP: 102.210.172.0/22
                          IP: 102.223.32.0/22
                          IP: 2c0f:e880::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15599 (0x3cef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:42:57 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36AB5C3AF, serialNumber=79E907176CFB7506BD916056F375FA38CE41CDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:b1:f6:2e:3d:9f:d5:82:73:74:6a:a4:71:
                    41:8a:17:9b:83:3b:c0:86:3e:2a:7c:57:3a:6d:06:
                    32:78:f3:08:87:57:0e:d9:6c:b9:3f:a6:27:b9:76:
                    62:d3:31:c4:93:6d:0e:07:87:4f:b3:c8:d7:b5:25:
                    44:5e:62:6f:2f:17:71:a3:4b:56:ed:c5:8c:ce:db:
                    59:65:4a:5e:93:87:43:8c:fb:c9:87:f2:33:2a:29:
                    29:bb:8b:74:cb:fe:23:59:be:62:db:1d:4a:b5:56:
                    cc:3d:da:17:c8:8f:2e:0e:cd:ca:fd:50:d2:fd:e5:
                    1c:08:7c:f1:24:aa:41:01:95:4d:98:7a:e0:84:f1:
                    de:d3:e6:b5:dd:52:33:07:08:1d:a2:f7:c2:2f:71:
                    81:22:56:59:5f:c2:7e:b3:be:c3:e2:53:70:e0:93:
                    84:5e:1a:2a:d6:2e:a4:4a:23:30:70:7a:cf:5d:20:
                    33:c9:78:19:03:67:a0:2d:f6:4c:70:83:91:99:18:
                    3b:9e:45:6f:22:6b:a2:49:94:20:0a:8f:cb:95:6a:
                    38:22:26:e9:cc:46:f7:51:47:62:bd:7f:f4:9f:c7:
                    9d:c0:b4:3f:93:4b:3c:d1:58:00:7c:4a:0c:58:60:
                    99:4d:f9:5b:7c:df:3a:62:bf:07:04:15:e3:29:42:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328652

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.172.0/22
                  102.223.32.0/22
                IPv6:
                  2c0f:e880::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:2f:3b:b1:da:7f:90:3f:02:46:22:b3:47:85:22:a3:14:
         8c:1a:15:90:9f:22:0a:76:3f:30:90:af:91:17:c8:4a:77:d1:
         90:34:6f:1d:da:50:91:bf:2e:b6:07:80:df:ce:11:2d:1c:80:
         50:9d:40:f4:94:bf:b3:93:5e:94:fb:d6:53:1e:99:d8:31:9d:
         d3:80:02:f2:ad:d8:8b:b4:07:27:de:d9:15:e2:4b:5f:e8:d7:
         0c:17:14:27:23:48:70:91:5d:e8:6c:c9:47:f9:2d:a5:99:5f:
         5e:87:44:e7:ac:d0:5c:36:33:23:37:b3:c6:ff:7a:ed:aa:36:
         3f:df:a7:1f:11:2f:d1:a6:e8:53:80:31:76:6e:7c:88:dc:ff:
         80:1e:41:20:e0:da:6e:ec:f5:a4:2a:10:6c:92:49:18:1e:c1:
         f2:d6:79:65:1a:07:11:1d:83:96:6e:f1:88:3c:fe:6d:79:e8:
         fa:ad:77:f9:fa:03:3d:f1:d1:0a:dc:a5:69:bc:85:d5:a7:00:
         96:9b:51:9e:f9:60:7e:d6:2f:cd:0c:d3:d2:2a:09:5a:05:d5:
         78:47:a9:f1:f8:9f:40:94:34:fe:56:ec:f7:16:11:fe:6a:6c:
         a2:8d:98:e0:f3:2d:46:b5:3a:d5:e8:9c:9d:91:d7:8a:7e:c8:
         0b:04:1e:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:41:41 2026 by rpki-client