This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
File:                     fs54roG_QHKx3E9vt-bLkWYlKzQ.cer (raw, json)
Hash identifier:          TfsjMPMRXqEhdjOs1Ys0qTSzOGDTnLhbfwQkA7+NIXs=
Subject key identifier:   7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3E70
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:44:14 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 196.200.240.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 11:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15984 (0x3e70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 04:44:14 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36E1028AF, serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:56:8c:55:79:0a:a7:34:0e:a1:de:20:e6:
                    07:1a:da:a6:f0:c8:2c:aa:6f:ac:ca:21:56:19:37:
                    ff:ec:12:76:1d:4f:99:07:5c:97:34:98:72:c1:46:
                    b0:de:f5:cf:e9:d8:99:13:1c:ae:43:92:ee:d7:00:
                    35:6c:d1:0a:74:60:0a:c6:16:32:a7:bb:fa:e7:8d:
                    56:68:2d:89:f2:cc:c4:8c:a9:63:50:7b:97:f5:5a:
                    9c:46:e7:9b:1d:4c:a7:83:0f:6c:6a:33:b4:d2:90:
                    f6:f4:62:07:b5:2f:47:d2:15:ee:82:93:33:9c:b8:
                    b3:7f:06:8d:27:88:30:4a:c9:cb:e8:65:a1:5d:eb:
                    a1:98:a1:0a:45:03:8b:24:b2:f9:79:ed:f8:ca:88:
                    e2:eb:c3:d8:4e:ec:95:57:5f:52:bb:6e:60:15:3d:
                    05:92:95:a5:ca:d2:c8:cb:c9:5f:3b:b3:72:39:20:
                    0c:15:9e:3a:7f:03:a8:4b:49:a3:db:d0:fd:64:11:
                    79:94:ba:60:c1:5a:f7:c9:82:3d:61:a9:b2:07:12:
                    39:42:56:75:5e:c8:4c:70:0f:97:34:ca:4d:df:76:
                    d6:60:28:4e:e2:5a:6a:59:fc:c5:0d:b3:34:45:9d:
                    ba:4d:94:b6:79:09:d4:72:59:cb:ed:67:6e:95:3f:
                    95:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.200.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:42:f8:9f:f0:30:ad:a1:4f:36:4d:12:7a:13:06:88:24:e2:
         27:9a:58:a8:c3:c2:27:30:23:bd:6b:e0:da:40:5c:19:e1:0a:
         a1:dd:c6:af:f2:80:37:58:fc:e4:90:0d:29:a2:a1:4a:7f:ed:
         c0:33:aa:1b:7b:47:98:e1:5d:b6:f4:e4:c6:86:f8:ba:70:b2:
         07:4a:6a:90:2a:02:ae:96:bf:3f:0d:93:a6:b2:15:7a:22:9f:
         1b:e5:de:ad:12:02:bf:ba:49:72:53:e5:ab:a1:dd:4d:70:8a:
         90:8e:06:9d:46:d0:7e:bc:05:fc:32:f5:e7:ac:cc:e9:4d:84:
         cd:b9:dc:5f:78:77:6a:bc:12:1a:e5:46:be:6d:ca:73:52:e3:
         b2:12:2b:06:b4:6b:e7:60:4c:92:9a:59:5e:03:ff:e6:6e:68:
         18:fc:43:10:78:6b:d2:ef:d7:53:b1:ed:f9:a9:ae:e0:ab:09:
         63:85:15:35:6a:9b:52:43:d8:6f:80:4d:ad:b9:35:1a:30:e0:
         60:ee:3a:c2:50:21:9d:a3:35:be:60:9e:6a:28:4f:00:15:5f:
         f6:aa:86:b6:74:6e:c0:77:55:c4:23:be:b6:14:47:18:69:95:
         08:fc:cf:36:a8:3b:c5:11:b4:cb:a7:cd:25:15:b0:96:ec:03:
         3a:14:1f:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:58:18 2026 by rpki-client