This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer
File:                     wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer (raw, json)
Hash identifier:          XLTwLIb53uoEyqdxXqRtKMyHd7JUYfjsFif/1kXxFq8=
Subject key identifier:   C0:70:79:E5:17:56:05:88:8D:9B:E4:76:7F:7C:2B:FD:97:14:E0:27
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3A01
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:54:37 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328441
                          IP: 102.68.24.0/21
                          IP: 2c0f:ecf8::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14849 (0x3a01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:54:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F366553AAF, serialNumber=C07079E5175605888D9BE4767F7C2BFD9714E027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:b8:db:d7:43:8d:4e:ff:c7:42:1f:84:f8:
                    36:34:28:61:63:b3:c1:54:b1:00:7f:00:a8:a4:83:
                    2c:5a:8c:19:c4:3f:27:33:69:a1:da:28:cf:47:db:
                    00:72:1a:14:34:b3:37:d4:be:48:34:32:c8:71:81:
                    91:0f:95:71:c3:b7:95:30:7b:92:6b:a1:4e:45:db:
                    f1:58:30:85:99:9f:95:29:bd:2e:6f:55:e6:ff:ea:
                    25:21:4e:b8:98:68:8e:43:d3:03:68:06:76:1c:69:
                    a7:de:95:f4:ee:09:af:25:d9:b0:f0:6b:35:88:c4:
                    70:de:dd:e2:78:0e:6b:0d:45:27:70:1c:ae:59:47:
                    ae:ae:34:73:d4:12:07:be:77:21:46:73:63:f8:90:
                    2b:ad:06:dd:51:d6:12:34:b9:80:fc:cd:f6:09:72:
                    e5:aa:d2:ae:97:92:be:44:ff:6f:b9:6e:96:ef:e4:
                    cc:b3:75:86:66:17:3b:0d:d6:8a:cf:5d:55:b8:c1:
                    d3:cc:fa:61:2f:cc:b5:06:42:ce:cc:4b:51:b7:b6:
                    4e:bc:04:2a:46:bb:c6:16:c7:e2:ab:2f:a9:c0:05:
                    cd:25:b1:30:d1:bb:f7:ac:4d:53:4a:cb:a7:50:16:
                    49:f3:7b:ae:ad:cb:56:24:d6:70:ce:f3:89:c6:63:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:70:79:E5:17:56:05:88:8D:9B:E4:76:7F:7C:2B:FD:97:14:E0:27
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328441

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.24.0/21
                IPv6:
                  2c0f:ecf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:61:6a:65:15:ae:0e:5e:bc:3b:a0:5b:cb:fa:6b:8d:da:c7:
         40:64:11:8c:d2:3c:01:e1:ae:ce:07:33:16:1a:86:d9:81:02:
         e6:ec:58:4e:f7:09:cb:ed:09:0e:fe:8e:3c:bf:8f:44:c0:a7:
         ba:2f:59:70:c3:4e:25:31:76:86:1b:a8:fd:df:55:28:a2:f3:
         ef:8d:fe:3a:e9:5e:52:45:81:f2:ce:dd:ec:be:00:ae:7d:aa:
         86:b7:03:20:b3:22:74:58:e8:5e:40:50:bf:6c:37:34:ef:60:
         c5:8d:c8:b3:69:37:2f:df:ec:9c:fa:1a:34:f9:50:f8:d4:b9:
         8b:8f:99:42:f9:57:39:f1:91:2f:4a:17:ad:a5:ee:24:29:aa:
         dd:e7:06:b8:e6:3f:26:f9:41:1a:aa:58:82:9d:ec:08:9b:ca:
         4b:eb:7f:51:5e:fd:fe:e4:96:75:89:87:12:a9:70:a5:d2:24:
         af:46:55:d7:bf:e7:a4:18:3c:80:cf:53:4d:ac:1c:8a:c8:30:
         59:b7:cd:9d:b7:0b:f8:f7:0a:f0:3b:c6:53:a0:42:6e:8a:3e:
         fe:90:96:ec:72:72:65:57:15:41:2c:2e:5e:27:09:2d:8e:46:
         24:62:df:bd:60:2c:ba:6b:ee:62:0b:da:a6:53:cb:1f:a3:f0:
         21:46:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:16:53 2026 by rpki-client