This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
File:                     ePCj07rEmhSIR2PZN9PKGSCVOxU.cer (raw, json)
Hash identifier:          bevmbBD4TgUS9Cjv9ysWfcjZ/xQyE6Y+Hh6QKbeEmPo=
Subject key identifier:   78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3F5E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 05:24:17 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328503
                          IP: 102.67.32.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Jan 2026 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16222 (0x3f5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 05:24:17 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36FF74CAF, serialNumber=78F0A3D3BAC49A14884763D937D3CA1920953B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:db:c4:59:da:9a:1b:31:6b:c0:7e:a7:b9:
                    e3:f8:c1:d0:eb:e3:cc:b3:63:b5:2c:4d:e3:38:87:
                    61:4d:4f:84:8b:96:66:a8:f1:dc:19:11:d2:d3:16:
                    01:ff:01:4b:03:8c:b5:03:9e:24:cb:fe:28:a0:4f:
                    4c:9c:50:3c:cd:61:21:a3:22:fe:d4:f8:6d:d0:98:
                    aa:ed:9c:eb:50:6b:db:4a:98:4c:e1:99:da:96:94:
                    0b:13:a6:57:56:7f:23:50:79:ba:86:c4:9e:f7:86:
                    a0:1f:8e:06:f2:b3:2c:f5:1b:ae:89:34:8c:3a:f8:
                    23:3b:67:37:b9:fa:95:f3:0c:ab:b1:5c:af:e1:b3:
                    a6:d5:56:4d:31:1d:80:18:c2:c0:84:c2:ef:64:ad:
                    40:a4:bc:a3:ca:2a:1b:98:99:46:21:ef:e3:84:0a:
                    94:d7:47:69:84:fb:07:b5:40:41:93:8c:f2:c0:76:
                    e6:22:06:ad:25:81:e5:c4:fc:ab:6a:ea:0a:c2:63:
                    c4:19:5f:d4:53:c5:00:54:e0:6c:9f:71:86:f1:18:
                    37:4c:49:45:33:8d:d5:7b:fc:f5:69:2d:31:2c:e7:
                    7d:18:90:30:8a:5d:35:c2:b9:4d:e6:54:35:1b:ad:
                    d5:a1:c6:4d:29:bd:fb:68:55:f5:96:80:c3:cc:fa:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328503

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.67.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:a6:dd:8b:fb:8f:a4:a0:e1:6b:7f:64:47:f5:f1:33:42:ed:
         72:92:6e:74:6f:ef:b8:10:2c:3c:59:df:75:58:11:cb:ce:c4:
         e4:cb:74:14:1d:8d:65:31:31:03:46:47:68:2f:e8:a4:69:68:
         3c:25:c9:4d:b5:30:91:21:5e:5a:e6:7d:5b:70:34:e3:a9:42:
         d6:86:41:52:c3:6f:66:9a:8b:93:16:a7:17:3b:6f:e0:18:99:
         d0:94:f6:2d:96:72:72:b1:5a:4b:89:85:20:1e:7d:33:66:b1:
         18:b1:31:5c:60:12:5e:f4:cd:05:ef:03:5f:40:1e:69:03:a0:
         68:7c:d5:8d:ca:88:cb:97:45:6a:59:74:90:78:cb:5d:71:97:
         bf:09:5b:d7:e8:12:37:13:71:21:ad:f6:fb:a0:99:5f:ff:3a:
         72:e6:3a:2e:1e:e1:21:b0:9d:e7:ea:1d:1d:aa:0e:dd:f3:c1:
         2b:18:7a:21:c3:ec:b6:75:b6:62:78:94:73:5c:db:0b:aa:cf:
         a9:21:2d:d1:c8:57:e1:3b:e6:ce:e2:3e:ee:20:88:57:a7:52:
         30:7e:04:74:82:38:71:cf:e8:c7:6d:b7:b7:46:e5:c5:47:a2:
         c4:a4:3b:19:03:9b:d7:5e:f1:b7:29:53:42:f7:09:b5:7f:6b:
         60:bf:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:22:41 2026 by rpki-client