This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
File:                     zVIytjxqgymQyGcHy3Ob3ATbmlk.cer (raw, json)
Hash identifier:          cm3GsxpbqZmT3pLQ6WNRKWTgVzTqnDrdm1z8mN0Wu54=
Subject key identifier:   CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       375C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:01:47 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327752
                          IP: 102.68.128.0/21
                          IP: 102.214.104.0/22
                          IP: 154.73.28.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14172 (0x375c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:01:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36114AAAF, serialNumber=CD5232B63C6A832990C86707CB739BDC04DB9A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:85:a3:7e:a5:6f:93:33:98:d0:96:2d:71:
                    ae:4b:86:0b:75:34:60:50:fd:60:86:e2:2a:1d:db:
                    4e:59:0e:05:80:0c:ee:3b:b6:f1:cd:d6:02:9c:68:
                    02:43:36:2a:ab:9b:d2:b9:d1:21:37:e3:7a:b1:54:
                    13:e0:a1:9a:82:17:14:61:1c:67:87:19:b7:28:b2:
                    4d:33:05:c3:3d:32:9a:70:95:7f:cd:27:b8:06:88:
                    d8:10:82:42:7b:f0:32:48:9d:94:88:49:c2:5f:2a:
                    10:6a:06:0f:62:09:fa:65:b9:90:2a:69:11:56:f6:
                    be:4f:8b:56:26:e4:fd:46:41:05:f3:2a:f4:7c:72:
                    90:4a:6d:9b:a0:69:74:76:7d:81:fd:bb:3f:24:36:
                    a6:39:b3:df:8f:a1:06:d7:23:cd:e2:b0:0a:59:92:
                    51:cd:56:1d:e1:75:32:c2:52:f6:ec:4d:2c:1c:01:
                    5d:2f:64:9b:73:c8:c3:3a:55:54:97:ab:37:5b:f5:
                    d1:e6:17:ff:66:1d:ab:26:44:8c:f0:09:3b:ce:f7:
                    36:86:10:ab:4b:00:bb:e0:1e:0e:68:52:6e:e1:67:
                    44:c0:76:50:8f:57:43:50:cf:0d:98:87:c3:1c:55:
                    3c:ba:81:3b:1f:14:37:5c:3b:c6:c0:c4:40:42:1d:
                    a0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327752

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.128.0/21
                  102.214.104.0/22
                  154.73.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:1b:48:b4:c2:a2:1e:de:d3:b2:f8:28:84:ae:c2:bb:7e:a5:
         46:3d:3d:ad:39:91:c1:a1:da:02:02:94:5c:30:b9:c0:ec:42:
         cd:f4:63:8f:91:14:ea:55:af:cc:72:31:fe:01:83:f4:8d:53:
         31:29:54:53:6c:aa:49:8d:e6:20:af:af:9f:4c:e0:6c:f9:66:
         0b:9e:c8:0f:5e:14:d0:14:25:f3:61:08:1f:af:c8:3c:9d:fd:
         9a:cb:2c:bb:09:41:da:f9:74:90:96:b7:6e:4b:38:d5:d5:99:
         33:02:70:3a:58:ef:39:9f:46:78:49:60:45:24:87:4a:e2:6d:
         81:86:e8:12:37:58:cc:c0:e3:92:8e:a3:fe:45:b2:6e:7d:40:
         9c:ef:b9:5a:ce:02:38:26:14:4f:02:b0:df:d4:98:c7:a5:f7:
         e0:6e:ce:de:b9:20:17:82:54:06:67:a9:fd:ea:7b:c0:72:c6:
         6c:04:76:a6:05:4f:d7:98:19:fe:b8:f0:36:97:91:38:cc:8a:
         b7:bf:53:55:9e:94:61:57:d3:00:11:22:46:85:66:c2:00:c2:
         66:2f:55:ff:08:72:04:90:63:ac:6a:ed:c5:f7:ed:28:5e:0d:
         1a:b0:c9:00:bb:41:50:a4:6c:8a:40:16:d3:79:5d:e4:82:0e:
         bc:8c:ed:ff
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgICN1wwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMDAxNDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjExNEFBQUYxMTAvBgNVBAUTKENENTIzMkI2M0M2QTgzMjk5MEM4Njcw
N0NCNzM5QkRDMDREQjlBNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrB4WjfqVvkzOY0JYtca5Lhgt1NGBQ/WCG4iod205ZDgWADO47tvHN1gKcaAJD
Niqrm9K50SE343qxVBPgoZqCFxRhHGeHGbcosk0zBcM9MppwlX/NJ7gGiNgQgkJ7
8DJInZSIScJfKhBqBg9iCfpluZAqaRFW9r5Pi1Ym5P1GQQXzKvR8cpBKbZugaXR2
fYH9uz8kNqY5s9+PoQbXI83isApZklHNVh3hdTLCUvbsTSwcAV0vZJtzyMM6VVSX
qzdb9dHmF/9mHasmRIzwCTvO9zaGEKtLALvgHg5oUm7hZ0TAdlCPV0NQzw2Yh8Mc
VTy6gTsfFDdcO8bAxEBCHaDFAgMBAAGjggMXMIIDEzAdBgNVHQ4EFgQUzVIytjxq
gymQyGcHy3Ob3ATbmlkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxMTRBQS84NkQ2RTU3RUJFOEYx
MUVFODMyRjQ0OTE3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTE0QUEvODZENkU1N0VCRThGMTFFRTgzMkY0NDkxNzc1NDEyRTYvelZJeXRq
eHFneW1ReUdjSHkzT2IzQVRibWxrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAEgwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBANmRIADBAJm1mgDBAKa
SRwwDQYJKoZIhvcNAQELBQADggEBAKYbSLTCoh7e07L4KISuwrt+pUY9Pa05kcGh
2gIClFwwucDsQs30Y4+RFOpVr8xyMf4Bg/SNUzEpVFNsqkmN5iCvr59M4Gz5Zgue
yA9eFNAUJfNhCB+vyDyd/ZrLLLsJQdr5dJCWt25LONXVmTMCcDpY7zmfRnhJYEUk
h0ribYGG6BI3WMzA45KOo/5Fsm59QJzvuVrOAjgmFE8CsN/UmMel9+Buzt65IBeC
VAZnqf3qe8ByxmwEdqYFT9eYGf648DaXkTjMire/U1WelGFX0wARIkaFZsIAwmYv
Vf8IcgSQY6xq7cX37SheDRqwyQC7QVCkbIpAFtN5XeSCDryM7f8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:07:17 2026 by rpki-client