This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
File:                     mSzTGdelFaVjcylM4EkVP4w-AEs.cer (raw, json)
Hash identifier:          vYrEgh3KWULpqp2qmw1oEzyopW1yVpYRpLT0BwIGxX0=
Subject key identifier:   99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3E62
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:41:44 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328723
                          IP: 102.206.116.0/22
                          IP: 102.209.84.0/22
                          IP: 102.222.20.0/22
                          IP: 2c0f:e990::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15970 (0x3e62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:41:44 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36DD92BAF, serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:fe:ee:14:97:e3:b7:f5:ec:bb:f2:11:c4:
                    d6:ee:aa:d3:99:c1:39:50:64:d6:a2:05:e7:a5:be:
                    09:84:de:a1:7a:c3:98:86:f3:bd:24:2b:db:b2:a5:
                    bb:1f:cf:81:f9:c4:0c:d2:9e:09:37:e6:50:3b:e6:
                    4f:02:b5:24:e8:ed:d8:bd:0e:6b:c1:99:a0:a6:b6:
                    b2:fa:b2:43:e0:ba:03:f3:63:f5:a4:71:27:b8:6b:
                    fb:82:0f:67:4d:cc:85:2d:78:5b:60:7a:f2:32:ac:
                    58:5f:09:5f:ce:e8:7a:53:f4:f7:bf:fe:df:7f:0c:
                    5c:51:e7:df:29:d3:52:e2:8f:9d:44:3c:70:a3:f9:
                    ce:dd:95:28:5c:12:e9:20:5c:13:5e:ce:80:60:f9:
                    ea:d0:23:b7:d8:70:f3:29:09:01:05:63:a2:dd:16:
                    7a:18:02:86:74:2f:9d:55:bc:c3:e1:23:08:26:f7:
                    c6:aa:ce:15:7e:52:71:03:7b:72:0a:34:3d:9f:41:
                    f1:15:5f:51:d2:30:c8:b7:c3:be:66:3e:7b:94:97:
                    8a:5f:23:d9:1b:01:f9:e8:aa:b7:55:13:60:77:b0:
                    1f:f7:d7:5a:0d:e8:08:f2:05:3e:83:0c:85:87:37:
                    10:63:ed:d5:30:e8:22:5a:f7:f0:1d:61:f1:58:c9:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328723

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.116.0/22
                  102.209.84.0/22
                  102.222.20.0/22
                IPv6:
                  2c0f:e990::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:6d:e8:86:56:55:3c:d4:89:b2:57:c8:cd:aa:b1:06:62:
         89:b6:f6:1e:3f:54:56:d3:a8:f2:d5:fc:ad:66:a6:a6:6f:a6:
         f5:7e:0c:fa:b5:8f:cb:f8:45:5c:5e:d8:de:d2:b0:55:7a:33:
         e6:25:91:dd:bd:b6:5d:b8:13:26:ac:6b:52:6c:29:fb:84:b8:
         4b:94:45:9e:44:0b:b8:ee:e4:0f:1b:f9:eb:3d:e6:40:9e:9d:
         bf:37:00:e1:ac:9e:60:4b:5c:3d:0e:f7:1c:c8:e9:cc:c1:01:
         b8:06:ff:8a:99:6d:6c:37:f8:8a:37:57:7e:7d:cd:70:4c:d7:
         30:fd:2e:89:cb:fe:23:bc:01:5d:cb:1c:42:2b:97:e3:df:5a:
         d2:a2:71:c6:5c:b4:89:88:d5:2c:5d:bb:8d:4f:25:94:0c:51:
         31:35:af:ba:b7:70:71:2c:61:85:b3:14:ff:f1:f9:36:1b:db:
         b3:a5:c3:1f:e0:ec:ca:5d:05:db:51:3f:41:6b:89:58:35:2a:
         29:61:e4:66:4a:b1:45:98:a6:8e:d2:ef:5b:68:0a:7f:ff:08:
         3c:5d:d1:c2:fa:14:53:9c:aa:f8:b7:14:93:a8:80:c6:30:19:
         3a:6e:28:82:2a:cf:ae:53:c3:56:db:c5:79:6f:01:14:e4:8b:
         79:8c:af:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:09:26 2026 by rpki-client