This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WVlvdhVYQOfUJnWNllJakxzZR40.cer
File:                     WVlvdhVYQOfUJnWNllJakxzZR40.cer (raw, json)
Hash identifier:          U4fAuptDeqn+zLR9hyFDxx2twHpEk/5b7e5PonaESM0=
Subject key identifier:   59:59:6F:76:15:58:40:E7:D4:26:75:8D:96:52:5A:93:1C:D9:47:8D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3B08
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:31:47 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328092
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Jan 2026 09:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15112 (0x3b08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:31:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36776F1AF, serialNumber=59596F76155840E7D426758D96525A931CD9478D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:5d:d4:8d:80:95:69:67:06:c2:21:ae:a4:
                    d5:48:2a:eb:f7:f3:cb:2c:32:05:d6:77:40:84:df:
                    99:91:1a:53:3c:05:61:34:de:c9:86:24:e9:5e:a7:
                    e7:22:b1:03:d6:47:8f:13:a0:ef:a3:66:f3:03:a2:
                    bd:50:1b:ce:3e:94:b6:bf:99:9d:88:32:0c:95:d4:
                    8d:e9:5c:2d:b6:04:f9:94:69:05:ef:c4:a2:51:cb:
                    97:e5:db:ee:bb:51:23:75:43:35:51:e5:5c:85:93:
                    17:32:09:50:e0:70:e9:da:6e:f8:78:b9:e8:61:8a:
                    1a:7f:21:38:2a:3e:bb:88:ca:f2:7c:de:9e:57:48:
                    36:0c:56:27:87:56:bf:5b:ee:e2:8d:b0:61:8b:24:
                    31:e5:28:73:c9:2e:db:27:e8:06:6f:37:1b:fa:0e:
                    d6:ad:51:c8:8d:cb:d0:f7:13:c4:c3:e0:df:99:26:
                    56:cd:09:7d:a8:16:1f:87:ad:5b:35:21:38:27:cb:
                    cf:f5:00:50:ac:44:1f:30:36:f4:a0:ea:8c:4e:cb:
                    e8:18:e3:2f:cb:7a:78:b0:aa:cf:18:74:96:83:c7:
                    69:89:fd:e3:cc:8e:9d:f7:04:a9:f9:f5:5d:02:18:
                    33:80:05:71:9f:f4:dc:a0:8f:d8:bf:0f:a2:81:cc:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:59:6F:76:15:58:40:E7:D4:26:75:8D:96:52:5A:93:1C:D9:47:8D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328092

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:20:68:fd:9c:a7:c1:c3:d9:7a:68:2a:dd:65:a1:a4:f6:
         0a:16:5d:8d:95:86:22:5b:44:bb:b6:f3:c5:01:db:20:bf:22:
         c2:bc:2c:d2:d5:fd:03:b9:91:d8:a7:8b:8d:e1:bb:7a:fe:02:
         31:32:ab:3a:1f:e1:c1:cf:ae:49:6e:fc:90:a8:8e:29:fe:d1:
         c2:81:0a:4a:e5:de:64:1f:9a:1b:52:f3:2b:01:51:7f:54:08:
         3f:71:7a:64:20:63:f4:b0:98:c0:65:32:20:7e:8d:67:74:57:
         c0:32:1c:68:fe:54:da:b7:86:6c:24:4b:1b:8f:05:76:76:c3:
         c6:ac:33:cb:37:e3:fe:0d:a3:a3:ce:6f:3d:6a:fa:a2:17:38:
         79:07:f9:f3:73:af:0b:6e:43:eb:01:fd:6d:ce:8a:d3:33:9c:
         a8:32:b8:64:12:7d:fe:cd:34:12:f1:15:b3:42:13:8c:fd:a1:
         00:d1:f4:ec:b5:fe:15:03:1d:8b:95:98:cb:0e:80:6a:1c:e1:
         8d:11:ba:64:6b:a9:e5:10:e5:71:23:fe:08:fb:52:67:e0:51:
         31:d8:95:76:9a:0e:b9:90:92:52:e6:ac:7a:68:96:99:63:3c:
         44:8d:99:0f:0c:a9:94:ef:52:79:76:fe:39:5d:02:26:1c:3a:
         fb:97:e0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:29:11 2026 by rpki-client