This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
File:                     tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer (raw, json)
Hash identifier:          w/fda2Pmp2QOdrHEuctosGpx07BaTOqTITepoQoOJUs=
Subject key identifier:   B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3EA6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:52:52 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329378
                          IP: 102.210.104.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16038 (0x3ea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:52:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36E75A9AF, serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:bc:67:32:4b:d1:24:1f:80:49:bb:e9:23:
                    d7:28:49:09:a9:0a:61:3d:7d:99:ea:8f:ad:49:0b:
                    e7:b1:91:34:87:41:d4:12:a1:4a:16:56:1f:82:4d:
                    41:d2:64:77:8b:72:a3:a8:03:0a:36:d8:9c:6d:99:
                    28:02:c3:1b:b7:aa:7c:17:a0:41:2e:d0:6d:5d:7f:
                    fd:17:9a:81:bb:1b:7e:4b:7b:63:27:e1:1e:e3:a8:
                    bf:64:fc:0e:74:3d:e4:e1:35:13:be:ea:cf:6f:92:
                    4d:ae:de:1f:4c:50:64:de:f7:8e:60:64:d9:f2:36:
                    df:49:fb:82:a5:1a:ce:4f:e8:c1:e6:db:97:58:54:
                    60:a0:55:9f:bb:86:fe:b8:2a:e9:c1:99:6d:3d:15:
                    c1:63:67:6d:87:6e:1d:8c:1c:8c:4b:67:45:6a:e0:
                    1b:f1:f2:a8:43:5f:9c:f7:fc:d0:e4:46:fc:0c:d3:
                    e2:b9:16:0b:70:03:ea:3c:25:fc:c5:b7:1a:79:e3:
                    83:03:27:c0:ce:53:d6:0f:05:9c:75:5e:18:08:f3:
                    f0:c5:09:81:30:09:4f:7f:48:0e:61:ac:f0:9b:a3:
                    58:b1:c4:04:74:55:aa:63:d7:5f:87:96:b4:32:a9:
                    29:6e:f9:ad:f1:dc:dc:72:2b:b7:0b:a0:c8:02:1f:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329378

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:91:8b:fb:e9:69:8a:91:43:aa:eb:40:91:77:52:a4:cf:26:
         59:9f:97:a3:c7:d9:b9:59:6c:e8:8d:8e:8d:0b:11:58:04:d5:
         3e:e1:10:54:84:cb:c2:a2:c0:96:97:24:d1:38:6e:7f:b0:df:
         89:64:9b:7b:6e:2c:65:01:1c:64:a0:8f:e7:dc:8c:b1:99:0d:
         a3:eb:5f:c0:f3:80:69:fd:dc:b9:29:70:dc:8d:35:1d:47:60:
         08:44:fa:29:e0:fc:f3:80:4e:a8:b7:eb:76:74:ae:46:b3:d3:
         e6:af:08:8e:70:bd:44:55:f9:e6:bd:a6:e9:bc:db:83:1a:60:
         61:77:4b:a1:a5:c8:c7:0b:72:bf:c0:37:58:60:8a:6b:d1:83:
         a7:55:c6:a6:4d:8c:88:35:f3:43:8d:c6:fc:9d:a6:8c:04:4c:
         2c:ff:5f:51:58:eb:d9:69:58:79:b8:61:35:3b:40:3f:2a:71:
         a4:6e:b9:ff:bd:56:8f:2a:92:ee:62:02:d8:db:a4:3c:35:b3:
         9a:71:60:b8:fe:94:a0:81:32:c6:c0:c0:83:8f:01:76:b1:09:
         50:5d:6e:e2:0c:94:ed:db:f5:b2:e9:6b:79:bd:b0:a7:54:ea:
         3e:19:49:a0:8b:60:5c:72:35:94:f0:ee:fd:93:3b:73:6c:8e:
         5f:47:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:59:29 2026 by rpki-client