This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
File:                     jslBzFrhaLO7xSJOt19628St-As.cer (raw, json)
Hash identifier:          sU6Md/0XE9kG+J6CdwB8i+3B3bfhfiw+dJfIf4xncMk=
Subject key identifier:   8E:C9:41:CC:5A:E1:68:B3:BB:C5:22:4E:B7:5F:7A:DB:C4:AD:F8:0B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3892
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:57:12 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327915
                          IP: 41.76.72.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14482 (0x3892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:57:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3640700AF, serialNumber=8EC941CC5AE168B3BBC5224EB75F7ADBC4ADF80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:06:86:c0:d1:30:92:59:8d:a7:a9:22:4a:
                    e1:0e:82:ef:4a:49:b3:a4:cb:ff:e1:7e:df:23:30:
                    66:69:13:8d:ac:b8:d3:5b:d4:26:66:22:eb:4c:65:
                    ff:02:02:2c:24:09:e5:0d:8f:e5:6a:cc:eb:79:cb:
                    03:c9:55:ed:08:62:16:6c:6c:05:55:9e:f8:be:48:
                    25:34:18:fc:ae:ef:80:b9:db:e8:b5:dc:6a:ed:36:
                    e4:d0:78:12:92:c7:87:8b:b2:d7:0a:09:60:91:91:
                    15:36:50:d1:1e:4d:58:6b:fe:ad:3c:f4:41:6a:a6:
                    e9:dc:fd:3b:a3:b7:b9:06:3d:47:f4:fc:e2:42:32:
                    32:8a:34:69:b7:ec:b3:2b:25:96:07:8c:22:9b:3b:
                    7c:b3:1a:b0:e1:b9:2e:df:5e:2b:d1:1b:36:49:84:
                    40:6e:f3:67:6b:40:86:00:b5:99:0b:24:36:96:9f:
                    1e:f2:63:4c:ef:95:a1:10:21:1b:85:75:a3:05:c5:
                    9f:49:80:8a:22:5c:68:0a:32:64:7e:a2:6f:a3:0a:
                    3d:64:b5:f5:f9:18:45:ba:31:f8:70:46:af:b6:dd:
                    0b:16:bd:7b:66:20:88:82:52:19:0d:a9:5e:63:85:
                    a3:52:a1:bf:c9:ae:2e:f4:23:7b:d4:bc:b2:87:39:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C9:41:CC:5A:E1:68:B3:BB:C5:22:4E:B7:5F:7A:DB:C4:AD:F8:0B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327915

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:09:c6:9d:4c:0a:33:3b:4c:47:23:b5:dd:36:5e:d9:c3:
         49:2d:9e:78:31:b7:03:37:41:c9:74:df:05:73:c2:65:b5:79:
         69:52:f9:13:59:45:a7:47:e2:ac:ab:32:14:85:4b:57:45:df:
         45:22:d9:7e:c3:4a:46:37:86:16:86:fe:59:06:69:ba:6f:55:
         89:56:e5:26:13:23:0e:f6:2b:bf:df:0f:2c:92:bb:94:3a:69:
         b7:c4:96:70:c2:58:28:86:69:7c:f7:e6:d6:d0:81:2c:63:35:
         80:8d:35:bd:46:9b:9a:ae:a9:f2:db:a6:3f:d7:61:1d:95:6d:
         0e:3e:93:d5:c1:a4:32:5b:ea:b9:0e:19:f2:8d:a5:f5:ab:61:
         4a:a4:be:5b:2e:a0:e5:6e:24:bf:d8:b7:ff:eb:e8:df:72:79:
         49:be:35:6f:3d:34:38:2b:53:04:a5:2d:fe:9b:41:63:ec:7e:
         1a:6c:1c:9a:81:f1:cd:d5:71:e0:80:bc:a6:a7:04:89:71:e6:
         9e:f2:f6:6e:6b:4a:b5:8d:f8:6b:d7:c0:6c:b2:37:fa:4e:5b:
         8c:bb:03:46:d3:2e:46:18:63:b9:c1:43:a7:67:63:8b:cb:cb:
         a9:6c:25:60:fd:65:e2:3a:9a:eb:99:1e:f3:ae:f8:56:66:0e:
         c4:64:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:08:51 2026 by rpki-client