This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer
File:                     ll15l05AXZDHV_miXEMFvq3uoG0.cer (raw, json)
Hash identifier:          3btV1iIi0LkvQ6MpDX3NlJC5tLYFU8tV4ThTY0nwbpc=
Subject key identifier:   96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3F38
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 05:17:47 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329052
                          IP: 102.215.176.0/22
                          IP: 2c0f:1080::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16184 (0x3f38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 05:17:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36FB8C3AF, serialNumber=965D79974E405D90C757F9A25C4305BEADEEA06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:21:1f:29:db:33:d2:84:72:0f:f4:e2:2e:
                    1e:97:9d:f7:a5:af:06:e5:25:4b:88:74:da:81:e2:
                    9c:67:1b:c2:1b:af:31:5d:10:68:ea:bc:b8:f9:35:
                    ae:a8:a2:ca:47:8c:95:82:d3:29:3a:7d:06:cb:89:
                    1e:ce:36:8a:bd:d6:d8:d3:09:b9:be:cb:e9:a8:18:
                    b7:8f:ae:c4:8f:b6:77:ca:4c:ee:c5:e6:16:93:21:
                    bf:5c:e5:b4:d8:e5:17:30:ba:e0:42:8c:5d:f8:14:
                    b8:b0:4a:1b:ba:c3:c8:10:6b:77:12:2f:6e:5b:be:
                    a7:37:9e:4f:4e:21:e6:47:06:0f:40:cf:dc:a5:22:
                    51:4b:df:4d:b1:11:c6:10:c0:40:1c:fa:10:00:07:
                    45:9b:3a:4c:2d:dc:fc:fc:47:26:c3:85:fb:c0:a0:
                    73:19:fe:35:90:a9:ec:89:41:40:78:1b:f3:70:13:
                    ce:e8:2d:3f:58:36:4e:a2:d3:6d:31:71:d0:79:6c:
                    ba:c2:e2:03:e9:49:e8:c1:af:99:e8:92:76:d7:48:
                    06:b9:2a:18:4f:02:4b:8b:e9:a8:ff:13:a3:b5:3b:
                    38:4f:ba:8b:f5:a1:a4:e6:b0:1c:09:87:6c:14:5c:
                    95:9a:00:e1:14:71:1b:63:3a:ba:ba:bd:e6:09:8c:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329052

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.176.0/22
                IPv6:
                  2c0f:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:02:7a:6b:b6:ab:a2:f0:a1:89:ec:f8:f0:ed:3c:39:b0:d7:
         cf:a0:e2:82:d1:2e:99:09:5d:a4:f4:2e:71:16:5e:1f:10:45:
         c1:4b:3c:b2:75:a4:8f:81:4c:ca:c7:eb:ba:49:2e:b8:18:be:
         f3:bc:4d:8e:b2:3f:00:34:f8:e0:4e:5d:3a:3d:83:8d:37:36:
         78:3a:fe:5e:8f:d8:8a:80:13:8c:2e:f6:03:f2:72:04:fd:e6:
         c8:fb:1e:84:e4:94:82:1f:a5:e0:cf:5e:3e:66:1f:78:76:5b:
         6e:c5:24:7e:eb:3c:20:05:4e:2c:c2:4e:47:99:7b:74:2b:1f:
         b1:ad:cb:41:15:ee:1c:52:93:f1:7f:0f:5a:2d:7f:ae:49:ff:
         d3:ce:fd:f2:b5:bd:20:e4:03:66:bf:35:2f:07:1d:79:7b:e4:
         04:69:2d:d0:7f:df:61:09:08:36:ed:06:20:e0:73:72:22:45:
         12:95:29:c2:02:3d:9d:2e:9f:c7:3a:ee:48:72:55:d8:48:9c:
         aa:d5:4e:84:f2:42:78:33:44:93:26:9e:7f:40:07:5b:04:1f:
         a1:a0:13:e2:30:97:4b:60:80:11:b1:da:d5:d1:40:4e:c0:9c:
         b0:2b:e7:39:80:21:80:f4:50:bb:35:d3:69:1d:53:86:7e:2e:
         c1:08:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:17:33 2026 by rpki-client