This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer
File:                     pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer (raw, json)
Hash identifier:          JBy/vyhFtScmvk3VPSByz1bav985eKl+d4HhSOl5XEo=
Subject key identifier:   A4:5B:BB:DD:D6:E3:F4:6B:BF:30:98:10:88:CB:08:30:C8:27:ED:78
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3D53
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:59:08 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329225
                          IP: 102.212.88.0/22
                          IP: 2c0f:3f80::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15699 (0x3d53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:59:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36B9E66AF, serialNumber=A45BBBDDD6E3F46BBF30981088CB0830C827ED78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:90:c2:af:68:77:d9:64:f1:15:cb:cc:92:
                    96:bd:4a:4a:12:b8:fa:e7:a3:9e:d3:b8:75:9f:7f:
                    a9:5f:c0:15:cb:ec:b6:6f:80:17:8e:d9:30:9f:84:
                    07:48:33:af:9b:86:ca:f5:d3:6e:be:00:ce:eb:ac:
                    8c:d2:63:35:83:90:56:35:90:5a:ab:6e:01:59:55:
                    d9:44:e2:0d:36:ce:1d:b1:b5:df:4a:04:40:96:ae:
                    d1:67:8b:23:b4:38:57:dd:92:e0:43:04:f7:22:e6:
                    20:32:4b:a8:f2:44:7d:57:9d:8f:57:34:75:ac:bb:
                    a2:3f:48:f6:4e:ea:eb:e4:b8:6e:3b:18:b1:fa:68:
                    a2:77:41:01:8a:cb:9c:79:21:c1:e5:58:df:2b:61:
                    2d:69:27:b4:28:80:c0:77:43:48:1b:b5:8f:89:29:
                    19:fd:81:f0:5d:92:b8:a5:93:77:40:03:37:eb:e6:
                    c1:29:90:5b:4f:5d:54:90:77:f9:60:43:70:33:ab:
                    14:27:04:35:09:14:ac:a0:2d:7c:f6:3c:d8:e0:fe:
                    9c:1b:75:d2:86:83:0d:a3:2f:d8:72:63:23:eb:ba:
                    9d:06:85:06:42:4b:61:73:b0:8f:8c:2b:c7:e8:4a:
                    8a:93:4f:e1:a6:bc:2f:cb:38:bd:df:57:7b:4b:14:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5B:BB:DD:D6:E3:F4:6B:BF:30:98:10:88:CB:08:30:C8:27:ED:78
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329225

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.88.0/22
                IPv6:
                  2c0f:3f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:b7:e5:bc:95:17:c7:80:e1:b2:f4:31:3f:de:5d:32:89:
         1d:19:96:e0:d1:89:a9:78:f5:6e:8e:98:61:ae:77:8d:ca:c8:
         8d:23:91:e5:f8:84:57:e5:27:4a:90:c7:b3:eb:4d:d3:49:9d:
         32:38:d0:a3:08:24:4c:1d:a6:33:c3:91:5f:10:1c:f7:fd:6f:
         32:af:1c:7e:c0:61:7a:28:8e:48:de:59:b0:20:e4:ef:3b:c7:
         17:42:30:76:6f:d8:2c:51:6c:3b:ea:2c:97:d0:e8:02:0f:57:
         4d:be:7f:32:00:aa:8e:c2:56:5e:86:4a:19:6e:10:9a:62:5b:
         2a:76:5d:08:41:e7:a1:6a:5a:42:6c:c6:dd:f2:bf:f8:34:33:
         04:dc:b8:60:da:42:d7:cc:05:3b:3d:08:36:60:22:ef:bd:73:
         56:aa:8a:71:61:28:27:91:45:44:87:19:e2:fc:ee:b8:b1:3b:
         e1:ea:fa:37:84:05:29:df:c3:e5:c4:be:49:94:ab:5c:80:de:
         8d:07:74:b2:7d:08:cf:8a:db:4a:99:7c:1a:c2:22:9d:b8:a6:
         4e:20:4e:f1:96:2e:34:77:4b:3a:d4:71:eb:63:21:5c:41:1a:
         b6:ba:b9:fa:09:32:bd:2d:6e:db:b6:3f:0c:31:26:28:a6:fd:
         0d:73:a4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:18:05 2026 by rpki-client