This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pTjdXtaOO2Wy07oa0USnQKUu7iA.cer
File:                     pTjdXtaOO2Wy07oa0USnQKUu7iA.cer (raw, json)
Hash identifier:          Q0kPuT3tOsZ2SWs0RrW//uRg+54xM2xp2WiQlmY/wY4=
Subject key identifier:   A5:38:DD:5E:D6:8E:3B:65:B2:D3:BA:1A:D1:44:A7:40:A5:2E:EE:20
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3F9E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 20 Jan 2026 11:23:01 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328332
                          IP: 102.141.233.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16286 (0x3f9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan 20 11:23:01 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F362DADDAF, serialNumber=A538DD5ED68E3B65B2D3BA1AD144A740A52EEE20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:94:b0:b0:87:18:45:80:b5:36:ee:ed:19:
                    27:4e:57:7d:8b:af:3e:11:b3:06:3e:2f:26:58:3e:
                    16:b8:05:59:cd:19:6b:3a:a4:39:0a:e3:f2:52:61:
                    f1:d6:0b:5a:22:c1:38:67:2f:60:56:5c:e1:fe:d4:
                    c7:56:8b:69:d6:f8:89:b6:4c:2c:f1:8c:0c:ea:1f:
                    46:75:84:9a:88:bb:cc:04:d0:66:47:c7:28:da:27:
                    6d:95:11:d9:3e:ed:ba:ae:ba:5c:03:bb:0d:f2:20:
                    94:d4:68:12:62:da:02:62:94:6e:79:34:a2:3f:f8:
                    6b:07:e5:58:a2:7a:a7:2e:5b:e7:11:46:a3:bc:39:
                    a4:3b:95:d8:d4:d4:63:95:d6:8e:e8:07:94:d2:70:
                    89:a1:84:48:e0:0c:4b:ea:cc:94:62:9a:09:ad:dd:
                    c0:84:eb:c9:5f:51:a8:29:71:82:1f:a9:e9:e4:a4:
                    70:a4:fb:0a:48:3a:00:42:c4:c4:eb:59:ff:6e:88:
                    c4:1d:e1:6b:ea:ff:4b:7e:be:e2:95:a3:7b:25:44:
                    3d:0f:3b:77:2f:52:cd:8b:dd:18:9a:55:34:8a:00:
                    4d:67:fc:12:e0:3c:99:e9:12:f7:b4:35:1d:86:d7:
                    6a:13:46:9f:5c:eb:95:41:80:69:1e:41:b3:15:6d:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:38:DD:5E:D6:8E:3B:65:B2:D3:BA:1A:D1:44:A7:40:A5:2E:EE:20
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328332

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.141.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:1e:b2:d5:a5:2e:f8:a7:ac:f9:00:ee:fb:1f:07:71:36:40:
         45:74:c4:6a:b8:6f:17:07:fb:a4:20:0c:4a:2d:84:84:e8:4b:
         8a:d2:6b:65:8b:fe:29:dc:40:b9:be:bd:3a:50:4b:11:37:9d:
         73:7f:9c:78:cb:7d:fd:da:a6:3b:38:aa:cf:4a:97:b0:0b:cd:
         f5:68:a1:5e:be:c1:12:21:f1:ce:ce:e7:52:d9:27:81:1f:e9:
         48:2f:c9:3c:9e:2a:c5:e2:61:72:88:f0:38:89:8c:c5:d5:09:
         21:87:61:8d:a6:44:66:9c:fc:ba:fa:c7:8f:ae:f9:76:55:68:
         eb:cf:11:00:3e:bb:21:e7:2f:11:44:96:dc:63:e3:46:4c:7a:
         e4:f1:b0:96:dd:0b:35:5c:d6:2c:de:17:97:43:4f:3d:36:3f:
         1a:db:95:5c:17:65:d7:55:1e:5d:a5:ba:46:7f:22:e1:54:24:
         54:a1:35:60:b7:a7:16:38:35:b2:53:fd:e8:64:35:53:db:c1:
         7f:fa:0c:3c:fc:2a:32:5f:2d:5a:74:af:d2:9c:8b:9a:a2:d5:
         b1:3e:2b:9c:4b:eb:d5:93:5b:89:df:74:bc:74:26:b4:98:30:
         49:89:73:79:f2:df:3f:5f:db:10:40:44:cd:ea:0f:bb:63:c1:
         b6:62:dc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:54:30 2026 by rpki-client