This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
File:                     u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer (raw, json)
Hash identifier:          IlhzSlCAYJ1+augdEnyA2cFLpMe01JpPsVsSWwuo3P0=
Subject key identifier:   BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3B67
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:45:44 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37578
                          AS: 37704
                          AS: 37770
                          AS: 37786
                          AS: 37789
                          AS: 328100
                          IP: 196.6.220.0/24
                          IP: 196.49.22.0/24
                          IP: 196.60.2.0/24
                          IP: 196.60.36.0/24
                          IP: 196.60.68.0/24
                          IP: 196.60.80.0/24
                          IP: 196.223.21.0/24
                          IP: 2001:43f8:60::/48
                          IP: 2001:43f8:c0::/47
                          IP: 2001:43f8:7b0::/48
                          IP: 2001:43f8:c40::/48
                          IP: 2001:43fc:4000::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15207 (0x3b67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:45:44 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36E084CAF, serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:f3:f8:fc:c0:11:7c:14:a0:53:c5:68:82:
                    60:ee:b5:96:ff:82:27:ff:36:57:e6:45:d3:58:35:
                    12:a9:82:ed:d1:56:dc:bf:97:37:19:69:0e:c3:ff:
                    b0:62:eb:1d:f9:1d:31:44:df:7f:06:33:60:b5:5c:
                    bb:96:dc:8c:44:f4:12:ea:45:af:6a:df:6d:84:56:
                    6f:55:b1:2f:b8:43:e8:1c:52:ec:1c:ce:3d:5b:a8:
                    81:b9:30:2c:4a:8a:56:af:05:e0:ea:cf:48:4d:c1:
                    18:f5:30:e6:7b:8d:71:a5:8c:35:6a:31:bd:7a:bd:
                    99:90:d0:b6:d7:1f:59:59:1b:ed:56:f3:f0:ef:26:
                    7c:8a:80:2f:17:37:77:b7:fa:ba:81:4c:7b:32:ff:
                    a6:08:a5:fb:44:2e:a7:35:e9:8a:2e:59:fe:ee:1d:
                    75:ee:73:5b:63:9e:93:70:5e:67:bb:75:ca:9a:27:
                    dc:2f:87:39:16:28:af:e3:ae:81:37:fe:8a:11:83:
                    8e:84:5c:74:33:a0:9c:db:d7:22:94:e3:10:13:ac:
                    53:16:d5:de:46:0a:db:4f:bc:71:6a:4a:08:48:ae:
                    ca:9c:50:fe:11:30:b7:0e:c6:d7:a2:b8:2e:4b:88:
                    9a:e5:fa:74:57:6d:d7:b3:75:0a:70:77:58:91:cb:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37578
                  37704
                  37770
                  37786
                  37789
                  328100

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.6.220.0/24
                  196.49.22.0/24
                  196.60.2.0/24
                  196.60.36.0/24
                  196.60.68.0/24
                  196.60.80.0/24
                  196.223.21.0/24
                IPv6:
                  2001:43f8:60::/48
                  2001:43f8:c0::/47
                  2001:43f8:7b0::/48
                  2001:43f8:c40::/48
                  2001:43fc:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:82:a5:e9:de:b7:7c:23:03:50:68:bf:88:a3:80:7c:f4:61:
         9a:4d:31:21:2d:f8:a0:f4:7d:df:b9:e9:ec:8e:b0:a7:ed:a8:
         ce:2c:af:cc:0a:14:39:6b:bc:a3:d1:21:a7:e3:7a:76:cb:39:
         e9:df:33:8b:b3:a8:0f:70:1d:79:8b:76:60:b5:4f:9e:23:3a:
         1f:d0:60:fd:58:af:2e:f6:a6:97:a1:d6:d0:9e:ec:bd:96:eb:
         8c:39:6c:1b:48:b8:3a:b4:cb:39:87:7e:11:f2:61:86:0f:57:
         e3:2e:38:47:8d:50:f4:d8:fd:42:00:78:56:16:b5:9f:b6:83:
         a1:45:53:3b:de:8f:ab:18:42:74:58:ae:73:ad:f9:4a:1e:3f:
         ea:c7:66:0e:6e:e9:44:c4:48:86:ab:c2:2e:46:45:87:45:86:
         4c:59:af:da:51:b0:df:f8:e8:13:f1:56:bd:ad:38:da:a4:47:
         b2:08:6f:93:39:03:57:a9:d7:67:b8:f5:35:1e:4d:6f:be:8e:
         e7:0a:a3:d1:08:04:e2:67:3d:ce:e1:dc:bc:e3:ea:d7:13:71:
         df:fc:d2:6d:34:cb:59:e8:37:c2:43:9a:e0:2c:8d:e6:a6:ce:
         71:14:62:a5:f8:a8:87:ba:4a:6d:59:f6:06:6b:86:d9:97:46:
         06:22:04:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:28 2026 by rpki-client