This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
File:                     PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer (raw, json)
Hash identifier:          Sf6JkGxu0vcmy1iL5ksNoFvgy/7/e1xwYzAMa/L+dH8=
Subject key identifier:   3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       392C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:20:51 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328596
                          IP: 2c0f:eba0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Jan 2026 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14636 (0x392c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:20:51 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:33:f4:10:79:26:fa:a9:1b:c7:dc:a4:94:
                    70:f3:14:5e:09:bf:bd:48:ac:0e:2b:7d:e8:a1:09:
                    d2:b7:52:59:8b:1e:0f:23:39:e9:00:70:cb:64:49:
                    2d:8a:e3:84:a9:62:6b:19:ce:58:62:1e:d6:d1:ea:
                    55:f7:a0:90:c5:b3:18:91:ff:90:d1:78:0b:51:8a:
                    ac:a2:85:c2:04:ba:cc:36:7a:11:d1:57:c1:e6:5f:
                    01:47:88:9e:95:8a:7b:48:dc:ad:10:47:b8:b9:ab:
                    86:1a:02:8d:91:91:3d:82:69:24:e2:7a:e2:ee:fe:
                    5f:69:cd:49:6a:c5:10:42:a7:96:aa:9d:2e:e4:9f:
                    c2:51:9b:1a:a6:6c:87:5c:e2:cc:48:96:69:bb:41:
                    bd:83:cc:66:1a:74:1d:f3:e3:c5:7a:7c:dd:27:28:
                    75:8d:03:ac:e4:9f:4e:21:58:8c:32:5c:07:62:26:
                    4b:08:71:48:da:55:4d:d7:03:41:69:8b:73:a5:d8:
                    9a:88:1e:b3:ec:b9:4d:b4:e6:16:a8:21:e3:d3:f5:
                    60:c8:c0:17:81:22:d7:57:f1:b8:13:a1:84:ff:5a:
                    36:6b:e7:23:89:5b:bc:bf:20:65:3c:6b:d1:3b:9d:
                    e2:39:fd:32:2a:09:d0:51:8e:8a:bb:61:ab:3a:b5:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328596

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:eba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:25:54:1d:e1:a7:e6:8a:25:19:b3:36:5e:31:c3:f6:d1:74:
         bc:af:de:fb:d5:6f:05:13:81:29:a5:a0:45:1b:aa:3f:22:6b:
         e2:92:6a:9b:ca:b3:2b:cc:d2:7d:fc:9e:c7:ac:6c:1d:03:7a:
         53:a1:b4:ca:42:7d:4b:12:83:c4:13:2f:2a:72:68:31:6d:1d:
         f1:94:13:59:29:e6:2e:10:83:7c:85:48:9b:c8:ee:92:22:df:
         89:e7:92:ce:9b:ab:fa:35:a9:d7:c8:db:33:37:d0:e5:21:40:
         5a:20:7d:5f:b9:69:c0:25:8e:2f:8e:f2:39:af:c7:8b:6c:b9:
         85:f6:61:0e:11:0f:0c:3a:6a:28:14:2e:f2:4b:3b:aa:74:31:
         0d:a8:41:b7:a2:23:df:e4:e3:4e:b6:54:89:f2:43:a3:76:92:
         32:da:54:5c:44:75:f7:ee:7d:7f:4f:f9:10:1f:18:54:62:70:
         ad:85:c7:c2:9a:cf:74:41:c7:76:cb:b7:67:04:4e:0a:f4:fe:
         0f:51:38:71:19:42:21:ff:9c:66:88:31:07:5f:f0:27:4f:e7:
         88:d6:0d:f6:57:aa:64:b6:5e:cc:b0:dd:db:ce:e8:08:af:76:
         e8:f0:71:4b:64:9d:59:b8:0d:6a:21:d9:12:c4:9a:88:1f:3c:
         51:cb:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 03:02:48 2026 by rpki-client