This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/u2qTYF7QXN2ypNl62Gzmg68jfZk.cer
File:                     u2qTYF7QXN2ypNl62Gzmg68jfZk.cer (raw, json)
Hash identifier:          ypmjI9/sJyUhlUpOdCEBvtvuS3wEvfwGyBfW8sgUkGQ=
Subject key identifier:   BB:6A:93:60:5E:D0:5C:DD:B2:A4:D9:7A:D8:6C:E6:83:AF:23:7D:99
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3AA2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:18:07 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329660
                          IP: 102.206.140.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15010 (0x3aa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:18:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F366E949AF, serialNumber=BB6A93605ED05CDDB2A4D97AD86CE683AF237D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:c4:be:30:b3:d8:29:e1:47:75:6a:15:18:
                    77:42:af:46:51:a8:6a:18:10:1a:12:b6:f2:af:5a:
                    51:13:e6:e7:e5:7a:43:15:91:32:19:a0:49:90:62:
                    3b:b0:13:49:69:8c:a2:a7:a9:c5:3d:48:21:d3:81:
                    6a:e6:b0:4c:c7:cd:ba:0a:a8:f0:32:6b:bc:c2:a9:
                    99:50:79:f2:8a:a4:d8:57:f0:13:10:4e:d4:8a:06:
                    75:5e:00:0a:b0:8c:b8:34:55:52:18:a1:63:66:16:
                    33:c3:24:00:c9:f6:a6:eb:ba:cb:88:fe:63:54:05:
                    58:3e:90:14:3f:20:59:4d:97:71:5b:88:1c:f7:ec:
                    75:7a:44:3c:ef:cd:d1:4b:8b:f6:0f:ee:aa:d9:b2:
                    9f:7d:b1:62:48:61:bb:ef:da:66:65:af:13:35:f4:
                    a1:82:59:0f:f9:8a:40:bb:68:d1:97:52:76:3c:1a:
                    3d:8b:68:ea:38:d6:6e:c8:ac:08:8f:e5:e7:ca:b6:
                    2d:9f:79:3d:87:bb:4e:32:c2:c2:8f:f6:53:43:6a:
                    cf:71:85:44:44:a4:1a:06:30:37:55:1b:da:d4:bf:
                    4f:39:b8:c8:2b:ed:30:0b:06:50:dc:6b:0a:fa:0c:
                    e3:91:38:ba:83:d7:47:7e:b1:c9:a9:66:1d:d4:1c:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6A:93:60:5E:D0:5C:DD:B2:A4:D9:7A:D8:6C:E6:83:AF:23:7D:99
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329660

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:24:1f:e7:61:bb:52:f0:09:3d:8c:4c:7d:f7:14:7f:ee:91:
         c9:d6:2a:36:0f:3a:93:db:c8:32:58:be:a8:82:68:4c:7d:6b:
         c6:7c:6b:8c:f0:6f:91:4e:44:9d:be:89:2a:17:0c:ee:b6:e3:
         28:62:9b:03:43:11:cb:2a:9a:ed:62:a1:59:a6:d7:28:f8:02:
         88:b6:f0:bc:0a:e1:f6:27:4a:6c:99:37:e2:b0:a8:c3:99:24:
         6b:ff:c8:78:5a:a6:2d:11:57:9d:87:55:1b:df:f9:f9:87:b5:
         f3:d1:5b:59:bb:18:0a:41:19:a6:11:5f:69:b6:2a:58:83:42:
         e7:00:4a:25:78:6a:a7:9f:56:84:25:b3:69:ac:a4:25:bf:97:
         23:04:2b:42:6a:3b:d5:15:5c:33:46:98:1b:53:79:f0:50:89:
         15:0c:8c:d5:60:42:bd:94:c8:67:20:de:65:cd:e5:7c:67:84:
         a4:ab:f9:d8:e3:46:5a:6e:8d:c8:53:9d:ea:3a:90:dd:e0:e8:
         f5:a9:cf:cc:5e:e7:fc:21:de:8f:01:a0:11:77:9e:e4:5c:9a:
         ae:20:97:cf:bd:6a:93:9b:a9:98:98:16:62:df:8e:c2:7d:5d:
         14:94:d7:72:25:fb:94:6d:f6:47:c7:6b:5f:a3:fc:ed:62:3d:
         10:a5:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:54:27 2026 by rpki-client