This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
File:                     wDEb4pGTolThzVxYy7dlalArlVo.cer (raw, json)
Hash identifier:          BszIC0Ll2kXKbWYGp4I+bKZnhXZpIRw/4hxFreBKGwY=
Subject key identifier:   C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3D9E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:10:54 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329410
                          IP: 102.209.148.0/22
                          IP: 2001:43f8:1740::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15774 (0x3d9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:10:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36C2FCAAF, serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:15:f1:ed:a8:a4:c5:81:43:83:f6:ca:e4:
                    5b:92:12:a8:a8:f2:62:60:f9:9c:c0:a5:86:e2:61:
                    99:2c:df:81:f0:c8:6f:72:43:5c:05:75:61:91:f6:
                    c6:a3:5a:6b:53:2c:d8:7e:99:ef:f9:1f:de:ee:93:
                    ba:57:60:c7:6d:89:3f:05:af:cd:ea:6e:11:ac:b9:
                    aa:46:87:a0:89:ad:0b:ab:77:f1:52:cd:29:fb:33:
                    11:41:c9:c6:57:21:06:f7:30:12:2e:17:3e:2c:f3:
                    7a:0c:c8:50:18:0f:46:59:00:d7:ef:b2:be:ff:93:
                    ef:42:77:bf:87:75:a3:d0:34:30:46:48:6b:07:2c:
                    52:fb:a0:33:23:09:59:b8:e8:dc:1d:cb:a4:1f:a0:
                    e2:2f:5e:01:aa:1c:d2:1a:6b:9e:6c:86:84:ef:3e:
                    3b:1a:da:a0:cb:e5:bd:8f:a2:39:0e:01:af:2a:a1:
                    bf:ea:2d:e5:76:49:2e:23:a8:df:a4:46:75:08:7c:
                    ff:06:7b:67:35:ab:1c:67:15:72:0b:da:ce:fe:8b:
                    17:a9:22:3c:3f:96:ee:40:02:7f:79:41:57:50:97:
                    3a:03:d7:0b:38:39:50:a2:db:3d:9c:8b:7b:3f:8e:
                    e8:5f:4c:28:47:7b:10:cc:88:bb:f4:a8:d4:85:4e:
                    fd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329410

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.148.0/22
                IPv6:
                  2001:43f8:1740::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:8f:3f:7c:12:61:fd:1f:7a:8e:7e:90:e9:84:f1:fc:6b:0f:
         fd:a0:1b:2c:37:5d:b1:61:00:75:02:ff:ec:95:d9:4d:6f:3d:
         ae:6a:07:7e:a6:a1:e3:01:40:9b:9e:6a:00:05:1e:dc:27:1e:
         b3:22:f0:bf:63:a4:3e:ef:cf:c5:1e:98:ed:9e:b7:a1:0c:29:
         c1:a6:bc:bd:cd:0d:da:8c:7e:af:2c:8f:6b:ad:fa:6d:5d:ba:
         93:b0:67:0d:f1:c2:9c:05:c8:73:95:64:c0:43:7a:a0:9c:59:
         a8:24:ec:90:d6:fd:18:ab:5f:90:4c:05:9f:4a:73:51:c9:bb:
         01:2e:14:77:01:53:bf:d7:86:3d:ea:8e:87:cc:fc:68:6b:d5:
         b8:b9:a1:8c:66:d8:cb:2e:48:6f:c0:f1:e2:0e:00:79:e6:92:
         73:d2:57:7e:8d:1a:6a:9d:81:62:a2:bb:d8:0f:ea:a6:b3:84:
         a1:29:95:28:b6:a2:3f:38:be:7a:cc:dd:d7:55:98:b5:0b:e7:
         9b:55:b8:cc:e5:2c:45:31:de:0b:85:8b:ea:c2:4f:44:79:63:
         d9:42:23:01:e5:b6:87:e2:ac:66:2e:1d:d9:8b:6d:8e:e5:8e:
         46:29:37:04:46:1f:4c:2c:73:f3:4f:0d:1a:8a:86:00:aa:8c:
         86:b6:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:49:02 2026 by rpki-client