This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
File:                     gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer (raw, json)
Hash identifier:          0fTHncP2NIMKBhm7nM2KSOEK3DdwmSsnhrs21LvokxM=
Subject key identifier:   81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       399E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:38:14 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 25793
                          IP: 196.13.31.0 -- 196.13.80.255
                          IP: 2c0f:f440::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14750 (0x399e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:38:14 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3652E81AF, serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b2:90:11:5f:f1:52:f5:d7:8f:5d:d8:8f:52:
                    f2:93:90:cd:81:8a:76:48:7b:ee:97:a9:f5:9d:88:
                    95:ea:8a:2d:07:c9:3e:0d:ef:6a:fc:b3:b5:45:43:
                    20:fa:95:31:7b:a6:8c:fc:cf:4f:22:57:74:11:f1:
                    6f:bf:b2:04:c2:de:ce:81:5c:5a:f4:b2:5a:bc:21:
                    0b:0b:2c:f4:c8:fa:d1:79:9b:61:4f:3d:a4:17:50:
                    8a:c9:f8:ae:9b:a3:8d:5e:72:da:16:19:fe:88:37:
                    bd:c7:1d:80:2c:05:10:c0:2a:47:f6:e7:90:e2:28:
                    32:c4:d6:ed:e6:28:99:8d:6c:16:bf:93:ee:31:c5:
                    93:8d:2d:40:d3:e1:44:3e:5c:81:10:ec:a0:70:29:
                    d7:33:0d:1d:1a:c0:f2:14:4d:de:4f:e2:09:0d:e0:
                    aa:4d:8d:e8:91:d6:1b:01:b5:2f:1e:a8:eb:b5:55:
                    c2:bd:3f:98:11:b7:ac:63:3f:81:57:ca:1a:01:bc:
                    1e:08:f3:b5:61:60:b7:2a:15:3d:aa:28:05:31:53:
                    c0:61:2c:bc:40:21:ee:1b:38:3c:0f:01:79:c6:ef:
                    3b:be:b1:a8:3f:ac:2d:a1:84:2a:e2:1d:29:b4:70:
                    b3:90:cf:d4:b4:e0:96:af:ee:3a:bf:da:d0:9f:74:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25793

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.13.31.0-196.13.80.255
                IPv6:
                  2c0f:f440::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:3e:b3:08:5e:af:a6:6a:be:19:99:d4:33:c4:a6:13:df:12:
         1d:5c:39:67:50:0f:dc:0e:8d:e3:e9:db:d9:81:07:12:9d:55:
         91:66:84:e1:59:cf:37:36:05:a5:20:b4:c8:fa:d2:90:be:d9:
         3e:f3:01:23:6f:15:17:cd:f7:e7:73:57:33:ef:99:00:70:cc:
         22:f3:cc:e4:78:15:af:bf:40:f2:95:55:6a:e7:99:d8:bf:06:
         37:0b:3b:d6:de:1c:84:0a:af:c0:6b:2e:05:a7:57:d0:64:b2:
         a5:e5:6b:de:ad:72:0b:37:4a:19:cf:b9:18:1e:38:86:e3:09:
         50:82:99:da:84:8d:82:fa:0d:d0:8f:a9:a9:55:7b:42:16:76:
         15:56:79:0a:43:d4:55:22:67:66:b0:fe:a5:17:24:79:db:50:
         73:a5:ff:7e:fd:1f:9d:94:a3:52:e2:d5:0b:24:24:77:e9:3b:
         28:16:16:46:8d:fb:d5:ff:b5:c8:28:53:21:02:cc:a3:a1:67:
         0c:05:c5:7a:32:f9:ad:2c:2f:55:76:5b:f6:b6:68:ae:e3:34:
         ce:fc:b7:54:7f:29:d2:19:5d:c8:5b:9f:88:ca:71:26:1e:3f:
         24:7b:4f:37:d2:45:bc:77:17:22:4c:3b:1b:9b:52:f6:53:4a:
         ac:15:3f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:14 2026 by rpki-client