This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer
File:                     w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer (raw, json)
Hash identifier:          7xuMssqpRua5O5fkiJ2kYEhg4v0fhWuVRdOUP22p37k=
Subject key identifier:   C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3BB4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:56:21 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328133
                          IP: 196.251.152.0/22
                          IP: 2c0f:f018::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15284 (0x3bb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:56:21 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36897F5AF, serialNumber=C39A32407B4BD96E283760C7155726E6D0D7199C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:a6:ee:d5:ef:16:cb:a0:8b:ee:ce:9f:50:
                    41:d6:5e:73:01:e4:2b:1a:4f:1d:58:49:69:77:05:
                    b6:76:bb:6e:06:2c:9f:3e:d9:a8:49:5d:06:7d:58:
                    c7:82:0d:ab:87:b0:44:f6:5a:4c:46:81:17:fc:85:
                    c7:13:b7:79:63:5f:b1:5e:38:33:ae:fe:25:76:3a:
                    f5:2e:d2:f2:3a:b6:a0:e6:33:6e:0c:e7:77:69:40:
                    df:66:22:90:53:da:d7:8e:3f:45:ed:92:6a:d8:b1:
                    22:ff:70:d7:25:08:06:b2:42:67:e8:f0:03:fa:ab:
                    9f:d9:52:99:ea:3c:79:9c:96:d1:9b:ab:11:19:b0:
                    1e:c6:99:cb:2b:ab:ad:92:52:0c:a9:aa:eb:3b:58:
                    72:24:4a:94:15:d2:8d:2d:1a:de:c4:e7:fb:7d:fe:
                    22:03:66:3b:86:1f:49:dd:75:ae:f3:f5:56:af:a3:
                    c7:d1:8d:91:5d:22:68:58:8d:c4:1d:bd:02:b8:1b:
                    53:0c:ad:b6:55:20:35:ce:74:5e:2a:6c:31:bd:dc:
                    b7:b2:fe:f5:fd:0d:8b:86:c5:99:66:32:5e:f1:7d:
                    0c:fa:f1:cc:48:67:8e:18:e3:51:ab:e6:bc:eb:66:
                    c7:d2:64:da:05:cc:e9:6b:a5:c5:ff:93:63:f5:84:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328133

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.152.0/22
                IPv6:
                  2c0f:f018::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:42:1d:9a:fb:06:a6:18:32:fa:6b:0c:9c:31:d2:73:c2:
         69:01:bb:a5:0a:10:18:45:54:4a:66:dc:b7:67:67:08:11:ee:
         e0:24:be:4e:f0:70:38:56:a1:ea:66:e4:4e:5a:b0:97:29:4d:
         39:e9:ed:af:5a:54:d5:2b:b0:61:14:b3:75:5e:34:91:1e:46:
         9a:fb:06:a7:03:40:99:d4:84:be:86:70:a3:6a:e6:8b:9c:61:
         f6:33:c9:b7:1c:4f:ae:72:16:ce:49:0e:4b:04:dc:0c:a9:80:
         56:25:7b:a9:32:8d:34:de:c5:91:5e:6e:c1:4f:b1:01:cf:c0:
         54:e9:e7:cd:c3:bc:50:78:82:aa:37:ae:53:bb:69:30:a0:ad:
         55:5b:8a:ba:67:ea:74:6b:a1:2f:1a:87:7a:ee:7b:25:40:ba:
         b5:27:9a:6b:ba:39:bd:58:b6:ff:bb:da:75:a4:13:74:23:ea:
         98:1a:bc:85:a5:cd:44:75:7a:89:ec:95:35:ad:63:36:f9:04:
         e3:34:31:e3:5d:ba:75:1b:da:7a:db:c8:5b:d4:fa:00:3a:80:
         22:51:ae:c9:ba:c6:85:d2:e8:a7:15:69:f2:b5:2e:f1:06:eb:
         e3:ab:3c:65:30:e6:41:e3:a0:9e:a8:17:1f:f6:43:0b:5a:8e:
         cb:4b:98:52
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICO7QwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMjU2MjFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjg5N0Y1QUYxMTAvBgNVBAUTKEMzOUEzMjQwN0I0QkQ5NkUyODM3NjBD
NzE1NTcyNkU2RDBENzE5OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgaabu1e8Wy6CL7s6fUEHWXnMB5CsaTx1YSWl3BbZ2u24GLJ8+2ahJXQZ9WMeC
DauHsET2WkxGgRf8hccTt3ljX7FeODOu/iV2OvUu0vI6tqDmM24M53dpQN9mIpBT
2teOP0XtkmrYsSL/cNclCAayQmfo8AP6q5/ZUpnqPHmcltGbqxEZsB7Gmcsrq62S
Ugypqus7WHIkSpQV0o0tGt7E5/t9/iIDZjuGH0ndda7z9Vavo8fRjZFdImhYjcQd
vQK4G1MMrbZVIDXOdF4qbDG93Ley/vX9DYuGxZlmMl7xfQz68cxIZ44Y41Gr5rzr
ZsfSZNoFzOlrpcX/k2P1hEf3AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUw5oyQHtL
2W4oN2DHFVcm5tDXGZwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4OTdGNS9BNTJGNTY2NDlCQjAx
MUVCQThBM0NDMzVGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODk3RjUvQTUyRjU2NjQ5QkIwMTFFQkE4QTNDQzM1RjhBRUEyMjgvdzVveVFI
dEwyVzRvTjJESEZWY201dERYR1p3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAcUwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALE+5gwDQQCAAIwBwMF
ACwP8BgwDQYJKoZIhvcNAQELBQADggEBAJ3EQh2a+wamGDL6awycMdJzwmkBu6UK
EBhFVEpm3LdnZwgR7uAkvk7wcDhWoepm5E5asJcpTTnp7a9aVNUrsGEUs3VeNJEe
Rpr7BqcDQJnUhL6GcKNq5oucYfYzybccT65yFs5JDksE3AypgFYle6kyjTTexZFe
bsFPsQHPwFTp583DvFB4gqo3rlO7aTCgrVVbirpn6nRroS8ah3rueyVAurUnmmu6
Ob1Ytv+72nWkE3Qj6pgavIWlzUR1eonslTWtYzb5BOM0MeNdunUb2nrbyFvU+gA6
gCJRrsm6xoXS6KcVafK1LvEG6+OrPGUw5kHjoJ6oFx/2QwtajstLmFI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:09:30 2026 by rpki-client