This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pCKYJAT-Aumg8-y5hTV-RG-IID0.cer
File:                     pCKYJAT-Aumg8-y5hTV-RG-IID0.cer (raw, json)
Hash identifier:          QJ5aXLAuNGcjlp264oN1oXd076qtFfmto4u2fM9vUQw=
Subject key identifier:   A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3723
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 10 Dec 2025 12:40:51 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329670
                          IP: 102.203.236.0/22
                          IP: 2c0f:4220::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14115 (0x3723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Dec 10 12:40:51 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F362FA5FAF, serialNumber=A422982404FE02E9A0F3ECB985357E446F88203D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:52:7b:c0:a5:b3:bc:92:0b:de:bd:e8:55:
                    0b:b3:42:c8:a1:c4:9a:35:f2:a9:6e:25:e5:39:64:
                    85:b3:83:da:be:90:e5:ba:58:6e:fb:27:1a:94:be:
                    35:3c:ab:ca:e0:98:7f:7f:90:c6:34:1a:00:1a:d4:
                    73:16:fc:37:f0:41:55:26:e2:32:c2:57:84:c8:3b:
                    4a:a0:16:63:f5:4d:02:19:0e:fa:7d:32:04:82:36:
                    c9:cd:d4:63:ea:9b:03:fd:eb:f9:d4:cf:d8:7c:b9:
                    c7:1a:05:13:b2:90:ed:80:5a:ce:cc:d8:a6:9f:f3:
                    11:3d:50:41:f0:da:20:2b:7d:e1:dd:8e:5c:04:51:
                    97:b4:b6:75:21:6e:ef:1f:11:a3:67:ff:f2:3a:a7:
                    97:f2:e5:75:58:6a:3c:b0:dc:f2:1b:8f:e3:48:f8:
                    32:83:56:16:4b:b2:dd:c4:1f:02:5e:af:bb:83:fc:
                    a3:59:d2:f4:d9:95:e4:0d:19:77:98:98:cf:8d:72:
                    33:fd:9e:4a:88:ab:98:42:8e:52:ae:84:ce:32:67:
                    3a:5a:e1:96:12:b5:04:6b:f7:70:5f:fd:8c:7e:36:
                    76:5b:d3:c6:3c:5f:04:3d:92:79:bc:79:d3:4e:4e:
                    89:49:0e:61:98:d8:da:13:e9:4f:2b:ed:b7:a1:00:
                    a9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:22:98:24:04:FE:02:E9:A0:F3:EC:B9:85:35:7E:44:6F:88:20:3D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FA5F/71124C3ED5C511F0944258ACDAE4EC9C/pCKYJAT-Aumg8-y5hTV-RG-IID0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329670

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.236.0/22
                IPv6:
                  2c0f:4220::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:de:db:0f:0a:02:95:f7:86:8b:c9:1d:85:da:53:65:1c:7a:
         18:c4:a4:63:4f:31:3b:aa:23:62:91:bb:1e:0d:d8:a8:4a:0a:
         8b:16:ba:56:a6:65:7c:29:df:5c:4d:f8:6f:45:b2:91:09:44:
         cf:02:9a:d9:3c:59:e1:3d:84:6f:b5:5b:3d:e6:03:c0:ef:3b:
         5f:4e:78:24:a7:bf:6e:36:fd:0c:4a:db:48:3f:49:6c:36:10:
         4c:3b:58:1c:ce:d9:1c:51:a0:38:b0:ef:95:bb:62:48:6a:c0:
         9b:a2:06:d7:fe:76:ad:67:44:b0:11:ad:e6:54:f5:2a:a0:81:
         bd:12:d8:47:ee:8f:d7:ec:85:e1:98:65:e1:91:f1:bd:7d:fe:
         bd:c3:bc:61:bd:e7:1f:60:ec:85:6b:5e:0b:6e:57:94:ba:80:
         cb:87:3f:a3:c5:cd:d8:53:f0:f2:5b:24:1a:0b:e5:f2:a3:aa:
         ce:f7:3e:6f:c6:83:93:3c:a4:ea:0c:9e:83:2a:77:15:25:d9:
         b2:a2:6f:f2:e3:e5:b4:9f:e5:7d:fc:04:e7:23:67:92:35:7b:
         41:f1:7f:b8:93:5a:a6:0c:a4:2f:98:5c:e7:0a:7b:fa:9c:1f:
         cc:0c:7e:02:6b:fe:82:6c:25:2a:7b:ff:34:68:13:e9:b4:67:
         a5:fd:7e:ab
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICNyMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTEyMTAxMjQwNTFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjJGQTVGQUYxMTAvBgNVBAUTKEE0MjI5ODI0MDRGRTAyRTlBMEYzRUNC
OTg1MzU3RTQ0NkY4ODIwM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw71J7wKWzvJIL3r3oVQuzQsihxJo18qluJeU5ZIWzg9q+kOW6WG77JxqUvjU8
q8rgmH9/kMY0GgAa1HMW/DfwQVUm4jLCV4TIO0qgFmP1TQIZDvp9MgSCNsnN1GPq
mwP96/nUz9h8uccaBROykO2AWs7M2Kaf8xE9UEHw2iArfeHdjlwEUZe0tnUhbu8f
EaNn//I6p5fy5XVYajyw3PIbj+NI+DKDVhZLst3EHwJer7uD/KNZ0vTZleQNGXeY
mM+NcjP9nkqIq5hCjlKuhM4yZzpa4ZYStQRr93Bf/Yx+NnZb08Y8XwQ9knm8edNO
TolJDmGY2NoT6U8r7behAKnnAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUpCKYJAT+
Aumg8+y5hTV+RG+IID0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyRkE1Ri83MTEyNEMzRUQ1QzUx
MUYwOTQ0MjU4QUNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkZBNUYvNzExMjRDM0VENUM1MTFGMDk0NDI1OEFDREFFNEVDOUMvcENLWUpB
VC1BdW1nOC15NWhUVi1SRy1JSUQwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFB8YwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmy+wwDQQCAAIwBwMF
ACwPQiAwDQYJKoZIhvcNAQELBQADggEBAFPe2w8KApX3hovJHYXaU2UcehjEpGNP
MTuqI2KRux4N2KhKCosWulamZXwp31xN+G9FspEJRM8Cmtk8WeE9hG+1Wz3mA8Dv
O19OeCSnv242/QxK20g/SWw2EEw7WBzO2RxRoDiw75W7YkhqwJuiBtf+dq1nRLAR
reZU9Sqggb0S2Efuj9fsheGYZeGR8b19/r3DvGG95x9g7IVrXgtuV5S6gMuHP6PF
zdhT8PJbJBoL5fKjqs73Pm/Gg5M8pOoMnoMqdxUl2bKib/Lj5bSf5X38BOcjZ5I1
e0Hxf7iTWqYMpC+YXOcKe/qcH8wMfgJr/oJsJSp7/zRoE+m0Z6X9fqs=
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:12:11 2025 by rpki-client