This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer
File:                     ZG_N-PSieKCOqzR7xbK6-a9r8GQ.cer (raw, json)
Hash identifier:          bBCopY66aAQBw7q8BRSZCLeQr9/CnbH2WER1eGIstFo=
Subject key identifier:   64:6F:CD:F8:F4:A2:78:A0:8E:AB:34:7B:C5:B2:BA:F9:AF:6B:F0:64
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3B27
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:36:13 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328563
                          IP: 196.2.8.0/21
                          IP: 2c0f:f908::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 11:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15143 (0x3b27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:36:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367B560AF, serialNumber=646FCDF8F4A278A08EAB347BC5B2BAF9AF6BF064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:57:21:0e:90:45:43:ce:7f:c1:e4:b9:48:
                    83:07:fe:ad:5c:32:86:f2:80:f3:62:80:70:bb:4b:
                    67:d0:91:82:ec:5c:03:9c:78:9d:9d:dc:66:51:6a:
                    7a:20:0f:98:11:c3:03:23:9a:80:ec:77:b3:b2:62:
                    ae:6d:2b:6f:d0:45:b5:40:01:f1:80:85:0b:87:2e:
                    1d:21:e8:6b:2f:40:be:ba:49:6f:40:29:da:3b:cc:
                    77:77:cd:5f:7a:d3:4c:a8:1d:6a:05:f1:ed:29:64:
                    c6:53:ed:1d:47:04:08:41:4c:8c:7c:95:55:ab:57:
                    cc:a5:31:90:db:b0:ca:5c:99:89:fe:3c:d0:b5:02:
                    3e:c3:36:03:27:79:11:cc:6f:bd:4b:2c:78:3e:ee:
                    66:a1:69:f0:79:7b:fc:07:36:28:72:4a:3f:b3:41:
                    32:f3:10:92:6a:4b:00:a2:c7:f8:90:4e:86:53:3e:
                    38:fb:09:39:d4:5e:6c:37:a3:e8:11:94:1a:45:8d:
                    ec:1c:20:72:56:be:56:53:bc:59:93:fd:95:f3:15:
                    00:bd:cd:0a:ea:95:b3:e3:a8:78:7b:da:fd:2f:5b:
                    2b:b0:f5:5f:6b:6d:ad:3e:69:ef:97:cc:49:3b:fa:
                    23:54:13:e3:de:ad:65:96:fd:fc:8d:2e:21:68:0f:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6F:CD:F8:F4:A2:78:A0:8E:AB:34:7B:C5:B2:BA:F9:AF:6B:F0:64
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B560/EEF897B2934111ED8045848DF1222468/ZG_N-PSieKCOqzR7xbK6-a9r8GQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328563

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.2.8.0/21
                IPv6:
                  2c0f:f908::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:61:90:6c:71:37:64:2d:d3:3e:13:8a:8f:96:1c:9d:d0:4d:
         fc:ce:86:90:f4:e7:5c:a5:f8:05:e7:f8:37:4a:b6:83:27:4f:
         01:cb:16:39:e8:60:19:cd:c6:75:cf:b5:d3:0c:d6:84:f6:f0:
         c1:b2:f4:6b:3c:c1:59:61:13:43:3f:7f:96:8d:9a:f7:16:9d:
         dc:4a:7d:8c:d0:93:42:2a:41:e0:2a:cb:fb:13:82:ce:15:2a:
         2c:e1:9f:2e:21:cc:2a:cd:90:80:a3:39:37:b5:ce:12:f4:0b:
         10:17:e0:ff:0d:5e:a0:27:87:d2:25:73:dc:09:25:b2:41:8e:
         88:1b:b7:5b:09:29:09:26:09:e3:86:03:7b:9b:21:c8:bc:bc:
         2a:a2:b4:60:59:ac:0b:a3:d2:c0:0a:1e:22:83:80:13:72:ef:
         d4:11:57:e2:71:db:a1:e6:24:83:1a:66:2b:f6:68:aa:7d:ed:
         cb:dd:7c:38:dd:cd:97:c0:b8:20:9a:b6:32:96:cd:01:77:57:
         83:82:e6:1a:77:8a:fc:f2:90:4f:d3:5b:35:a4:a7:1e:52:30:
         61:cb:30:b7:9a:46:cc:fa:69:d7:5b:16:a5:41:84:37:9d:62:
         53:28:3f:3d:8d:a1:ec:b1:45:f6:32:c5:ee:79:5d:dc:d5:d9:
         22:bb:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:58:22 2026 by rpki-client