This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
File:                     3qpe4dcNYY7NkB2u26jIYjuvyv4.cer (raw, json)
Hash identifier:          FBVhmowaG1q//el2sY17sJa/V7RXcT+byWukYq9mBsI=
Subject key identifier:   DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3D25
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:51:52 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328957
                          IP: 102.212.176.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Jan 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15653 (0x3d25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:51:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36B506BAF, serialNumber=DEAA5EE1D70D618ECD901DAEDBA8C8623BAFCAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:f8:ac:9a:da:15:64:d4:40:01:77:17:50:
                    ba:cf:8c:eb:c5:55:3d:4b:ff:4c:ee:e5:3c:9a:57:
                    9f:ef:ea:74:a3:7f:f7:7c:8e:4f:35:b8:16:e0:2e:
                    87:66:43:a8:e6:7c:aa:8c:d8:68:a4:aa:93:4d:71:
                    34:e2:9e:96:84:e2:08:f7:0d:76:e9:03:79:42:e6:
                    a9:34:1f:ad:41:6c:ef:dd:61:17:7a:5d:74:d2:02:
                    de:44:b9:e8:3a:9d:71:88:48:c7:d8:de:fb:63:9e:
                    c9:c4:24:9d:cb:80:a2:4c:a9:9b:4a:87:80:f9:fa:
                    4b:9f:2a:7c:17:6b:f0:f4:c8:e3:8d:de:ca:53:93:
                    ba:7c:97:45:6c:0b:2a:3b:cd:e7:e9:2a:02:65:10:
                    85:d4:9f:63:be:45:78:83:fd:16:ff:06:ae:88:0c:
                    18:79:44:54:e1:47:6e:1c:38:a8:61:cc:c3:6f:15:
                    a9:cc:7b:bf:f8:4b:de:c1:61:5d:eb:5f:aa:49:7a:
                    84:6a:f1:95:4e:f1:af:3c:52:32:9e:75:22:d1:9a:
                    c9:8d:81:12:93:05:db:0e:5e:2e:a0:35:d8:a4:11:
                    da:a4:01:6f:86:88:8b:d3:2f:73:97:5a:c9:67:72:
                    4f:33:0d:cc:26:be:6a:9b:e1:63:b0:25:14:98:f9:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328957

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:f1:2b:64:93:44:2e:72:60:7a:70:1b:13:90:e7:43:ed:63:
         3b:fe:3e:45:d9:52:f6:06:a2:25:ce:16:08:08:84:1f:4b:e0:
         ac:34:be:b3:1b:87:1f:d5:19:a3:10:2c:f8:93:39:b2:80:7a:
         20:68:f6:95:61:66:ac:21:1d:90:44:2c:5c:17:23:f2:3a:23:
         10:9f:62:8b:c5:63:b3:cf:d4:31:de:5b:a2:30:24:dd:e5:2f:
         83:d1:8a:33:7d:6d:64:49:99:59:70:3d:e6:57:93:38:b8:2b:
         89:8e:ec:ba:8c:3f:60:29:23:2c:80:97:9d:8e:fd:f6:56:70:
         f9:01:b1:26:fa:a2:8f:16:f7:f6:4c:04:dc:3a:13:48:43:c4:
         12:8a:bd:8e:4f:2c:f6:0e:94:71:ea:c7:b1:8f:84:52:8f:cd:
         78:0e:5d:61:08:fe:b7:01:17:c1:1f:54:6e:09:3d:5f:aa:aa:
         01:5c:fe:22:0d:2c:b2:71:5b:72:29:08:13:df:0a:51:ca:c1:
         8d:13:7a:32:1e:d9:26:eb:c2:79:2d:56:5c:26:0b:e7:50:d7:
         30:cf:f6:75:46:df:75:f3:ce:53:fb:b2:67:0e:de:ea:6a:c6:
         7c:60:35:d8:03:4a:31:fb:49:5b:f2:3f:69:4d:f8:b0:8c:26:
         90:7d:9e:07
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICPSUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMzUxNTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkI1MDZCQUYxMTAvBgNVBAUTKERFQUE1RUUxRDcwRDYxOEVDRDkwMURB
RURCQThDODYyM0JBRkNBRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9kfismtoVZNRAAXcXULrPjOvFVT1L/0zu5TyaV5/v6nSjf/d8jk81uBbgLodm
Q6jmfKqM2GikqpNNcTTinpaE4gj3DXbpA3lC5qk0H61BbO/dYRd6XXTSAt5Eueg6
nXGISMfY3vtjnsnEJJ3LgKJMqZtKh4D5+kufKnwXa/D0yOON3spTk7p8l0VsCyo7
zefpKgJlEIXUn2O+RXiD/Rb/Bq6IDBh5RFThR24cOKhhzMNvFanMe7/4S97BYV3r
X6pJeoRq8ZVO8a88UjKedSLRmsmNgRKTBdsOXi6gNdikEdqkAW+GiIvTL3OXWsln
ck8zDcwmvmqb4WOwJRSY+b+bAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQU3qpe4dcN
YY7NkB2u26jIYjuvyv4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCNTA2Qi9GRkVGNEY4MkNBMkYx
MUVEODQwMkI0QUJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjUwNkIvRkZFRjRGODJDQTJGMTFFRDg0MDJCNEFCRjEyMjI0NjgvM3FwZTRk
Y05ZWTdOa0IydTI2aklZanV2eXY0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBP0wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm1LAwDQYJKoZIhvcN
AQELBQADggEBAD/xK2STRC5yYHpwGxOQ50PtYzv+PkXZUvYGoiXOFggIhB9L4Kw0
vrMbhx/VGaMQLPiTObKAeiBo9pVhZqwhHZBELFwXI/I6IxCfYovFY7PP1DHeW6Iw
JN3lL4PRijN9bWRJmVlwPeZXkzi4K4mO7LqMP2ApIyyAl52O/fZWcPkBsSb6oo8W
9/ZMBNw6E0hDxBKKvY5PLPYOlHHqx7GPhFKPzXgOXWEI/rcBF8EfVG4JPV+qqgFc
/iINLLJxW3IpCBPfClHKwY0TejIe2SbrwnktVlwmC+dQ1zDP9nVG33XzzlP7smcO
3upqxnxgNdgDSjH7SVvyP2lN+LCMJpB9ngc=
-----END CERTIFICATE-----
Generated at Fri Jan 9 08:01:32 2026 by rpki-client