This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
File:                     fU328vfdsHN-2q2EhSP4cXbnzoE.cer (raw, json)
Hash identifier:          Z72xd35zC4ezCZhz0nTRcPUzX7fgFm5DMrpiT50G5Y4=
Subject key identifier:   7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       38F8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:12:46 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37676
                          IP: 196.40.160.0/20
                          IP: 196.47.96.0/19
                          IP: 2001:43f8:190::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14584 (0x38f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:12:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3640C3CAF, serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:ee:8e:d1:b3:11:2a:4f:27:81:0e:e3:9c:
                    15:b6:1d:a8:6c:ac:dd:48:b5:88:95:e6:ef:1e:df:
                    5b:68:ef:75:44:ce:69:55:1a:cd:43:e7:8a:b0:9c:
                    bb:22:cd:14:67:5e:79:8a:0a:e8:83:24:d8:67:53:
                    d4:46:d7:4a:3b:9c:66:1a:de:8e:d7:a8:99:fd:cc:
                    78:4e:a4:0d:9b:a7:a8:37:78:4f:d3:53:ef:69:95:
                    d5:2c:2d:e2:f2:b6:06:8b:03:2c:9b:a7:41:e9:cc:
                    88:22:9f:4f:4e:eb:9b:04:cf:37:69:96:57:00:79:
                    0d:bc:37:92:ca:c1:09:bc:28:48:b7:14:10:8d:0a:
                    3c:7f:a6:bd:04:93:60:8d:2c:01:18:69:0d:59:49:
                    cc:de:b2:0b:a1:de:b3:e1:a4:91:3d:b2:32:64:76:
                    1e:2b:90:17:ac:b3:ee:07:21:b8:74:d2:ad:ae:5c:
                    75:b1:b4:d6:7f:76:22:b0:6a:b1:58:d9:ea:62:c8:
                    30:56:74:b8:af:1d:64:2e:69:e4:ac:03:a9:0a:5f:
                    6d:f7:5d:c7:1b:39:05:45:02:63:18:4b:72:89:c4:
                    19:85:e3:52:1c:fc:f1:71:c1:8c:18:31:40:21:2c:
                    95:70:38:41:4e:f8:0d:47:5d:76:3c:51:49:bf:a2:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37676

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.40.160.0/20
                  196.47.96.0/19
                IPv6:
                  2001:43f8:190::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:57:7e:0c:b7:95:20:5c:39:46:81:39:d3:2b:ff:b3:07:5b:
         44:dd:aa:a6:87:d5:cb:79:84:40:e7:1e:1b:ab:22:e8:ad:b0:
         8a:2c:0e:04:6f:ab:77:bf:3e:1d:c7:49:ea:16:44:91:63:08:
         8e:7a:34:63:c7:d8:7e:83:37:df:fb:0e:b1:70:4f:60:cc:7f:
         ee:d9:bb:2d:5f:78:50:85:1d:b4:05:6b:01:fe:de:0b:a2:69:
         ed:c8:4b:cc:60:7f:a3:48:8f:c7:28:bd:f5:e4:c1:f8:45:30:
         c6:69:3d:b0:f4:a5:86:57:2a:4b:5a:7f:61:1b:4c:17:9c:33:
         98:d8:c4:35:a8:e9:8b:3d:66:e9:e8:47:ea:e3:6b:ab:e6:d1:
         72:af:ab:96:2c:8c:bd:3f:97:27:44:fd:2f:bb:f7:62:d7:e9:
         f6:98:bc:20:e9:31:fc:88:be:69:4e:c0:f7:a6:fa:b2:98:c1:
         86:58:bf:9c:37:81:86:da:d0:10:43:c2:94:d1:da:7d:c2:36:
         48:84:c5:bd:16:3d:3e:31:e9:d4:94:84:5d:78:4d:4d:5b:bf:
         44:68:15:d4:3f:8a:b7:ea:cf:d6:23:c6:ef:1a:d0:60:4d:3d:
         66:90:87:12:f7:2b:3c:dc:2a:8e:b4:f9:bf:af:4d:47:1c:0d:
         58:82:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:18:09 2026 by rpki-client