This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
File:                     ksorQe7D4BoZOJ4iIIisP8OhSO0.cer (raw, json)
Hash identifier:          TLmaUfQ9tStylJUoeXgjsKmNc+OD0H8g4jGHtrwjCZk=
Subject key identifier:   92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3800
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:30:21 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329254
                          IP: 102.212.11.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14336 (0x3800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:30:21 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:c2:31:cf:3d:bb:de:ef:9d:00:f9:9a:2c:
                    a6:44:7f:a1:3c:10:84:f6:d9:f7:a2:58:65:ff:8c:
                    55:31:27:bd:d1:01:0f:45:c3:39:d6:74:c4:3c:4d:
                    8b:52:8c:f8:3a:fa:7b:85:56:f6:59:14:ac:ad:08:
                    01:56:38:71:2e:1e:9b:68:2a:8e:fb:e9:dd:3e:70:
                    24:c4:91:88:83:2c:f7:79:aa:5d:71:32:34:83:0b:
                    5f:b5:bb:f4:ba:3b:ba:5a:4b:e4:dd:b9:45:2f:72:
                    8e:40:ee:50:0c:94:80:ea:58:2b:d7:32:b3:c4:65:
                    1e:35:a7:7b:ae:b5:ad:14:d7:6e:72:14:a6:4e:9a:
                    6c:f2:59:25:6c:88:74:3f:f5:93:4c:04:a0:a9:c6:
                    e8:2f:5b:84:6d:a4:ce:3b:a3:d3:25:ee:ba:bc:f7:
                    41:8a:ae:b4:e1:9e:57:93:91:2c:14:c3:e8:01:ab:
                    75:52:59:cb:9a:1f:9e:26:16:55:e9:6f:e0:db:3e:
                    22:b7:19:7b:24:26:d0:d9:64:ef:b8:3a:8c:e1:e9:
                    05:e4:ff:80:ce:8e:7d:61:8a:9d:9a:f0:f3:11:db:
                    8d:48:f7:8f:8e:2f:25:3e:be:4b:f2:bc:06:20:72:
                    c2:49:06:63:80:e6:10:8c:b2:91:2a:c8:e6:eb:a5:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329254

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:84:62:02:df:55:c4:7f:45:9d:0c:91:d9:59:ef:d5:cc:26:
         77:f8:f1:b2:6a:45:1b:a5:d4:ed:dc:d5:06:d3:8d:28:07:34:
         a0:ff:db:28:6e:5c:68:dc:1f:62:4b:09:d5:92:2e:78:56:10:
         da:29:29:8c:62:1b:e0:d9:cb:c7:37:5f:84:46:c6:68:1e:dc:
         3a:44:dc:81:af:21:2e:62:68:c8:8f:bb:94:03:e3:18:40:eb:
         0d:bc:59:44:1a:79:9a:ee:c2:2d:69:f8:41:fb:49:94:f4:2a:
         22:ed:21:71:68:9c:e4:97:0e:dd:5d:59:87:80:ac:10:ff:eb:
         dc:06:2b:4b:5a:4c:74:11:42:b8:d1:c8:3d:47:2a:0c:b8:0a:
         c7:7b:40:88:a0:f9:b5:d3:c4:ca:81:1a:84:b9:a4:f5:1b:0d:
         da:6c:e2:98:67:64:da:f6:c5:4f:33:44:45:63:58:fb:81:2e:
         d2:59:50:64:c7:9c:67:82:11:ed:25:03:91:52:99:e6:41:ed:
         40:41:57:c0:55:ec:5f:5c:8c:bb:0a:72:10:79:6e:b8:22:4d:
         43:56:6f:cb:71:9c:f5:dc:d6:f3:af:a2:c8:a9:ad:d8:59:96:
         c5:5e:6e:7a:d9:8b:ee:dd:48:b6:57:e4:b5:1c:8b:23:38:f9:
         bb:6d:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:17:50 2026 by rpki-client