This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
File:                     gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer (raw, json)
Hash identifier:          ++cBXfmI+aRydbXmqXsvlQXH5blFbKv87w2H2kkIAN4=
Subject key identifier:   80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       39A9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:40:00 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328331
                          IP: 102.135.168.0/21
                          IP: 2c0f:eb78::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14761 (0x39a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:40:00 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3654AD1AF, serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:4c:81:2c:00:5c:04:05:d7:d0:19:e2:9e:
                    25:da:86:f3:8e:70:5f:f6:32:21:2d:2e:ef:ab:7a:
                    d1:97:2c:11:c1:3d:17:2e:8a:eb:83:38:de:29:78:
                    e3:2f:6c:da:fd:42:ff:8b:19:07:59:58:ca:30:90:
                    ec:d9:36:f0:6b:0a:01:92:24:e5:33:ef:9b:f7:d4:
                    99:b4:6e:44:ae:6d:d6:23:e6:31:d2:96:f9:c7:bc:
                    d2:00:b9:6b:e3:20:97:57:3c:35:0a:cd:f8:4a:81:
                    78:e2:ab:47:21:0d:83:da:b8:9f:cc:0e:ed:73:90:
                    ca:71:3b:5e:55:96:6a:66:34:c7:21:97:b9:e2:6c:
                    94:98:d8:ac:ef:97:77:f1:86:28:94:cf:e0:fd:06:
                    53:bf:13:61:e6:c2:32:b3:9f:23:25:12:19:7f:5c:
                    98:ad:d4:85:ef:6f:cc:ae:79:c3:61:6a:7a:75:a1:
                    6f:b7:b7:0b:34:30:ad:fb:8e:1a:5e:a1:ab:4d:1e:
                    d4:72:2c:10:e9:4f:ea:e8:bc:15:77:82:91:ea:39:
                    e1:08:b2:aa:dc:a9:2a:9c:1b:d9:42:ea:0b:44:9f:
                    a4:cf:69:a0:ad:b5:c3:f8:06:19:de:50:38:de:09:
                    5c:a9:19:9e:72:e9:65:74:81:75:37:3b:84:5b:a1:
                    ce:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328331

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.168.0/21
                IPv6:
                  2c0f:eb78::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:39:3b:59:34:55:79:a6:fe:7f:4c:85:5a:37:3c:8f:35:ff:
         0e:bb:f9:a1:0d:23:12:72:ab:bd:c4:8d:4f:73:18:0e:76:e8:
         fa:df:5e:7f:91:74:31:8f:09:70:ba:00:a1:5e:cb:66:41:e1:
         d5:04:68:48:cf:f7:34:36:b3:43:66:e4:44:93:26:b6:8c:ed:
         68:eb:ff:cb:79:16:ef:4a:29:8e:07:a9:fa:cf:38:97:66:09:
         b1:55:ec:09:c8:30:9b:a1:96:7c:17:4a:56:46:47:7b:de:c8:
         30:0b:7b:cb:42:9e:ab:37:e6:b3:1f:8e:f1:ef:29:f1:44:62:
         bf:aa:3a:ad:6d:3a:85:6e:98:ab:dd:50:5b:be:bd:76:67:5f:
         1f:64:75:d8:b4:91:00:b7:bd:5b:95:38:e4:8b:80:bc:ed:eb:
         b2:66:fd:96:87:e6:7e:2c:8f:14:3e:79:2c:6f:e2:d7:ed:bd:
         f1:da:e8:7c:a6:a6:25:cb:8c:03:54:ad:f8:ee:36:cc:87:4c:
         cb:de:05:ef:2a:27:3a:16:63:f3:c4:0f:7d:01:c0:ba:65:9c:
         3c:d2:b0:90:62:c5:f4:06:0e:07:bd:a6:dd:08:3e:eb:71:69:
         d7:6d:2a:f3:1a:6c:ee:45:09:8c:25:5b:95:bd:86:73:fb:d9:
         98:b9:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:19:09 2026 by rpki-client