This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.cer (raw, json)
Hash identifier:          Wymz6+Jru+QekXorQkdVNS0LCFmewWvyBzU65CReuNY=
Subject key identifier:   A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3880
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:54:48 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328218
                          IP: 2c0f:f148::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14464 (0x3880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:54:48 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3632159AF, serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:bb:63:3b:34:83:33:b0:56:e9:30:df:3a:
                    20:dc:8a:e5:31:a9:8c:f5:57:67:a1:70:66:02:d0:
                    74:99:7e:b6:e0:d8:35:3a:17:6d:9d:92:eb:d3:fe:
                    ec:0c:76:dc:20:a3:1e:a3:34:7f:f3:6e:16:5f:5f:
                    65:dc:34:07:36:c0:33:1f:a7:dc:01:55:28:31:6c:
                    3e:11:e0:bf:1f:b9:17:ba:a9:95:5c:21:24:6a:cf:
                    a9:bb:71:00:df:f7:13:c9:64:b4:8b:8c:1f:0a:23:
                    a3:54:2c:35:1a:79:03:68:92:47:f0:63:fe:85:d9:
                    4e:c0:b9:17:14:fa:bb:9a:4a:95:8e:87:34:08:15:
                    94:21:53:d1:5e:6d:92:65:68:75:1c:2a:1f:a4:c6:
                    8c:07:40:d9:f1:a9:73:98:9f:0d:2c:54:3b:67:33:
                    b0:12:0b:36:84:d8:f2:f5:dc:fe:9e:28:d5:22:a3:
                    8b:10:b6:db:9d:6b:7d:d5:c5:19:e1:d5:92:22:9b:
                    dd:24:0f:64:3a:15:ff:77:7f:92:e4:6c:a3:97:42:
                    39:09:d8:e3:d9:66:4f:66:24:9d:5c:8e:84:aa:22:
                    67:f5:ec:b9:55:f9:39:b2:c1:6a:72:1f:97:d4:80:
                    67:fd:82:9b:a4:84:93:c7:fc:65:2a:d1:87:5d:39:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328218

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f148::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:2b:19:83:49:6f:67:b4:ea:82:b8:38:5c:cc:e9:4b:f8:06:
         da:d3:6c:bb:d0:fa:e9:0a:02:f4:41:33:48:ba:9e:ad:d7:19:
         1e:1e:51:cf:8c:7b:c0:8e:b5:0b:f6:bc:d4:29:51:19:8c:fd:
         0f:6b:bf:d8:af:6d:02:8a:88:cb:b5:5f:d8:85:54:87:fc:3b:
         78:90:e7:5d:95:36:c4:25:e6:95:6c:68:e0:a5:b4:ab:3f:89:
         58:4b:19:f2:95:1f:c0:45:12:7a:07:ae:d8:59:ba:8e:88:5b:
         50:aa:ae:92:e9:28:65:3e:05:1c:0c:e9:bd:1b:df:7c:49:df:
         9a:ac:ca:0e:5c:fe:5d:f9:be:52:85:3b:4b:9b:39:83:14:33:
         79:be:d5:96:0d:88:84:a3:0e:05:62:a8:4f:e1:95:12:91:89:
         7c:53:45:f7:f8:91:07:e8:c2:c0:26:a1:8b:8c:e2:d8:a1:fb:
         c0:79:8b:3f:f1:01:a7:7a:cc:59:18:ad:20:83:59:53:48:37:
         60:f4:93:f8:f7:73:d2:e5:65:b9:51:6e:6c:29:34:59:87:4c:
         56:9f:66:99:0d:e9:b2:3d:75:ba:85:a8:c0:89:b8:31:66:1f:
         a5:95:00:cd:8a:82:44:ce:7f:9e:7d:dd:7d:13:12:83:22:59:
         30:ce:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:29:25 2026 by rpki-client