This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
File:                     yFh1TID6yDlgC6mAc_zwo3zMrOs.cer (raw, json)
Hash identifier:          d4k/ZykPFa9YvaKJrosyHRVj82Q3Hzu57EAhmbSMtXI=
Subject key identifier:   C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3E93
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:49:45 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327802
                          IP: 154.73.160.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16019 (0x3e93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:49:45 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36E567DAF, serialNumber=C858754C80FAC839600BA98073FCF0A37CCCACEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:f5:61:f0:58:b7:49:5d:7a:51:30:b0:4a:
                    65:dc:3e:19:84:b3:c3:96:16:22:3f:d6:40:64:97:
                    87:4f:60:5a:81:12:eb:14:8c:2e:d5:cf:09:82:3e:
                    e4:c3:fe:88:dd:58:65:e3:cc:a2:d4:70:8c:fb:4c:
                    81:b2:0e:5a:e9:1e:53:05:42:9a:38:82:49:39:70:
                    0e:9f:c7:7a:62:c6:56:ca:26:31:80:62:0b:12:45:
                    1b:43:2c:8f:a1:d2:af:e6:7e:2e:8b:34:6d:bd:8f:
                    da:ca:74:70:4a:d5:9a:d4:ff:d7:16:b9:cf:0d:80:
                    5d:1f:b7:df:92:47:73:16:ba:28:de:a1:e2:cc:cc:
                    a3:72:dc:26:7a:e8:d7:02:04:7d:23:58:df:1e:25:
                    01:e0:9f:74:70:f8:bd:46:c1:81:8c:71:2b:65:f2:
                    12:eb:87:08:f0:e2:d6:9b:86:b8:e8:b5:2b:d8:5e:
                    f4:98:24:b4:e2:4f:02:8d:b3:19:7a:26:65:39:74:
                    fe:58:c1:dc:a8:e7:7a:1a:6d:45:a9:f1:75:8a:73:
                    94:14:7f:72:75:88:01:70:88:35:bf:c7:85:8f:e1:
                    03:fc:d0:3d:5e:50:ba:d0:67:5e:7e:b3:81:bb:18:
                    b2:3e:b8:b1:1f:89:01:c7:f3:87:53:15:cf:39:5e:
                    7a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327802

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:63:49:15:f8:2c:ba:10:69:ef:fb:fc:fd:b5:60:f9:e5:4b:
         ad:6b:e8:d8:d4:52:86:f9:ea:78:09:10:6c:e6:aa:ae:60:2f:
         8e:7a:ed:9e:ae:9f:40:80:99:8b:5c:90:a7:a0:71:b8:3a:d8:
         5b:88:2a:13:59:59:34:ee:3d:d5:36:1b:a5:63:c3:12:18:d6:
         67:1a:13:21:ec:55:7c:26:2d:84:60:97:ac:ab:c4:93:84:d0:
         fd:c8:4a:27:eb:92:23:ca:67:98:34:44:bc:fb:8c:e8:50:38:
         7f:e7:45:68:81:3a:8c:c5:99:da:be:b9:55:7c:cc:92:c9:61:
         bb:1f:c8:a0:8b:45:2d:14:3d:6c:90:07:34:53:be:76:9b:c8:
         59:ae:df:2b:3c:ec:b5:41:d6:f5:2d:4a:cd:48:a9:b0:5c:ca:
         16:42:a0:73:89:42:7c:46:7d:95:7f:f1:74:a2:ba:27:a1:96:
         c4:9f:e1:ba:9b:8a:84:d6:7c:8e:4a:f8:1e:e0:0f:80:a8:12:
         60:6d:3f:5b:bd:80:88:44:68:d2:49:57:7e:a5:ba:8e:35:af:
         8d:a5:94:d3:94:32:66:97:fa:3e:5f:7a:8d:a4:ba:95:67:7b:
         6d:1a:88:96:30:a9:45:f1:2a:ea:c6:2b:c3:e2:96:7a:84:33:
         6d:d7:4e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:00:44 2026 by rpki-client