This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.cer
File:                     mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.cer (raw, json)
Hash identifier:          NwAJHUm58VejyNEZd4QHgLEeHEck8meGakuSjHzGxdI=
Subject key identifier:   9A:E8:27:D4:B9:34:C1:48:70:17:97:1C:27:67:73:22:6F:48:8F:C2
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       38B6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:03:03 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327716
                          IP: 154.70.144.0/21
                          IP: 2c0f:f678::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Jan 2026 05:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14518 (0x38b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:03:03 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F363A17BAF, serialNumber=9AE827D4B934C1487017971C276773226F488FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:dc:ba:70:ab:ee:80:d3:9b:6a:74:bc:a9:
                    b1:90:73:61:e0:ba:af:16:61:5b:fe:55:0f:1a:4f:
                    b9:3b:d5:39:36:85:38:1a:e2:a1:b0:30:91:5d:01:
                    ae:01:0f:82:27:94:03:d9:05:33:13:91:e8:42:48:
                    cb:73:7e:87:69:09:6a:0e:c7:82:20:0c:3f:3c:ed:
                    88:4d:5e:b8:91:fa:2d:87:b8:05:61:d7:2c:2e:e0:
                    85:19:5c:9a:11:e7:d6:b6:05:42:4f:ee:1c:a8:41:
                    0d:c8:67:2d:b0:6d:25:8c:bc:e4:47:10:8a:32:7c:
                    5a:d8:97:ae:98:b1:dc:92:f2:87:cb:f1:8f:d9:36:
                    36:dd:f9:f1:1d:ee:4c:47:d3:af:e5:7d:23:21:27:
                    41:8c:a6:a9:57:d6:81:20:23:dd:fd:bf:28:80:dc:
                    a9:c6:70:39:ff:fc:87:4d:db:60:a1:8f:04:8c:9e:
                    5a:26:a0:21:82:09:9b:b2:d0:d7:bf:37:34:1b:80:
                    f0:83:28:37:56:e5:85:d3:db:05:47:b0:ea:bf:39:
                    ae:eb:54:b6:82:9a:08:26:17:1f:2e:0f:53:98:9f:
                    a9:ad:9d:1e:1b:6c:1f:7d:20:ac:b1:09:0e:9b:95:
                    7e:3f:6e:9c:42:7d:8d:c0:ba:4d:0a:d5:63:82:62:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E8:27:D4:B9:34:C1:48:70:17:97:1C:27:67:73:22:6F:48:8F:C2
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327716

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.70.144.0/21
                IPv6:
                  2c0f:f678::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:71:da:5a:7d:7a:3a:df:b6:06:c6:05:29:76:ce:bf:26:a8:
         27:cf:9e:41:24:de:95:d9:b1:ef:f6:1d:dd:36:5e:f2:12:90:
         f0:57:c6:e7:fa:d4:17:71:da:6d:7d:07:3b:c6:82:7c:e6:f9:
         97:46:25:57:e0:b8:50:81:8f:c1:bd:e7:e3:66:db:10:00:f0:
         be:36:b3:09:6e:f3:8e:3c:56:d6:15:03:c0:c5:47:56:fb:8d:
         dc:ee:5b:1e:9d:d2:a7:61:dd:40:4b:55:b3:b6:65:3c:79:a6:
         d2:e6:ee:46:d1:ce:4a:ee:f3:0b:e2:c7:db:f1:23:9f:fc:a2:
         c9:d5:be:65:6d:1a:28:cf:87:3f:e0:0f:0d:e1:f2:0b:cf:2a:
         a3:f7:4b:d8:31:ab:c3:33:fe:c1:df:6f:d3:d5:d6:f9:07:5f:
         8b:f7:5f:ad:61:84:33:6a:ef:0f:19:ee:3f:f3:1b:3f:a5:61:
         38:05:9d:fd:a6:c3:2a:82:95:31:bd:51:89:2d:98:8d:90:b0:
         3a:72:b8:da:62:0f:39:bb:66:0a:8c:6d:c0:c4:36:8a:dc:b9:
         3a:f8:4d:4f:ad:50:76:cb:e0:2e:6b:9b:85:d7:3a:6a:6f:0e:
         3e:17:79:0c:ba:ff:b4:7b:7d:9d:5a:a3:fe:c1:f8:83:1b:dc:
         4b:0f:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 19:12:40 2026 by rpki-client