This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.cer (raw, json)
Hash identifier:          SpJGvnJTnmtdGPZ7qqRD2PMFmkdzm4T7D/3FYBMM3ek=
Subject key identifier:   C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       38AE
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:01:58 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 20180
                          IP: 154.73.48.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14510 (0x38ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:01:58 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3639A71AF, serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:00:dc:f2:66:69:92:e3:53:80:7c:94:73:
                    6f:9f:bf:ac:67:af:80:bd:9d:56:dd:8e:6a:fb:70:
                    28:28:cf:a5:b0:76:b1:8b:96:da:71:9b:51:35:18:
                    32:85:49:ad:bd:b1:dc:3a:e7:1a:a6:b8:4c:81:2e:
                    d6:d0:c0:95:c7:5b:11:ec:64:2f:e5:b2:bc:3a:99:
                    06:3b:d3:5f:be:e8:a8:d5:95:db:8f:b8:86:f2:09:
                    d0:8d:e0:c2:9b:fd:30:dd:b2:91:56:f5:8c:c4:95:
                    6a:5f:68:3f:b5:85:c1:7d:24:56:3d:ac:21:76:6e:
                    4c:b3:11:a8:ad:81:89:ba:99:78:3c:06:3d:d9:45:
                    ee:68:c8:c8:58:cf:a5:5c:94:8e:d0:dd:bb:64:49:
                    51:0a:3b:67:67:e6:0a:4e:c2:28:aa:5d:8e:19:dc:
                    c2:d1:a9:46:59:19:fb:d7:c2:e2:9d:f0:2c:57:1c:
                    fe:43:29:85:6a:cc:65:30:a0:88:0b:5a:18:50:13:
                    c9:5d:a7:34:82:b0:a2:8e:55:69:f3:cb:ac:5e:9c:
                    c8:d4:64:c2:e6:e0:0a:5d:65:01:4a:0b:53:e3:83:
                    a3:7b:4a:75:f8:7d:98:e5:a9:31:f8:4e:21:cc:5d:
                    11:63:48:61:2f:3c:d0:7a:65:f8:43:34:d3:27:4f:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20180

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:f5:7d:17:eb:ec:28:e3:1e:2a:35:bc:e0:57:d2:59:bd:5b:
         38:5f:38:51:c2:55:41:5c:b3:f2:63:cb:40:18:e0:ad:18:e7:
         17:1c:48:b3:58:3d:13:60:a0:bd:f1:8b:cc:10:c7:5a:9c:c5:
         5a:a1:c9:f3:a4:31:d4:39:af:10:15:b3:a6:a9:8f:66:1b:d3:
         0a:73:a1:bf:52:f1:5c:30:d6:24:d9:b9:be:f7:e2:88:76:f1:
         38:1c:6c:2a:8d:7f:25:8d:97:f6:31:60:f8:a6:c1:7b:6a:33:
         70:f7:70:9b:f5:81:fa:a8:db:34:49:53:54:fc:db:6a:79:47:
         df:9b:45:2a:f3:ef:c2:6b:c5:7e:b2:99:d6:57:22:59:e8:62:
         74:2c:0a:d4:49:4e:00:a7:66:58:0f:ed:e0:10:e3:3d:e4:b4:
         e5:24:c0:21:fa:8f:ef:4a:8d:a5:0d:25:c3:c5:dc:e2:f8:72:
         24:7b:63:d2:f6:c0:7d:22:f5:03:1e:50:c3:90:6d:ac:e7:62:
         90:88:d5:73:4a:43:3f:39:87:a5:31:92:d8:c1:0a:18:f6:f1:
         0a:3e:da:b9:d7:2f:3e:c5:a2:3d:8d:e4:f5:25:a1:4a:2a:9b:
         40:73:5e:58:24:ee:36:d3:58:11:b4:ee:43:15:22:28:e8:a5:
         7b:01:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:28 2026 by rpki-client