This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/u2qTYF7QXN2ypNl62Gzmg68jfZk.cer
File:                     u2qTYF7QXN2ypNl62Gzmg68jfZk.cer (raw, json)
Hash identifier:          GCbDoJrkUutc81DYrGIEKUAMF8Jy8c9jD1/a3dNiYps=
Subject key identifier:   BB:6A:93:60:5E:D0:5C:DD:B2:A4:D9:7A:D8:6C:E6:83:AF:23:7D:99
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3727
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 10 Dec 2025 14:17:42 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329660
                          IP: 102.206.140.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14119 (0x3727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Dec 10 14:17:42 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F366E949AF, serialNumber=BB6A93605ED05CDDB2A4D97AD86CE683AF237D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:c4:be:30:b3:d8:29:e1:47:75:6a:15:18:
                    77:42:af:46:51:a8:6a:18:10:1a:12:b6:f2:af:5a:
                    51:13:e6:e7:e5:7a:43:15:91:32:19:a0:49:90:62:
                    3b:b0:13:49:69:8c:a2:a7:a9:c5:3d:48:21:d3:81:
                    6a:e6:b0:4c:c7:cd:ba:0a:a8:f0:32:6b:bc:c2:a9:
                    99:50:79:f2:8a:a4:d8:57:f0:13:10:4e:d4:8a:06:
                    75:5e:00:0a:b0:8c:b8:34:55:52:18:a1:63:66:16:
                    33:c3:24:00:c9:f6:a6:eb:ba:cb:88:fe:63:54:05:
                    58:3e:90:14:3f:20:59:4d:97:71:5b:88:1c:f7:ec:
                    75:7a:44:3c:ef:cd:d1:4b:8b:f6:0f:ee:aa:d9:b2:
                    9f:7d:b1:62:48:61:bb:ef:da:66:65:af:13:35:f4:
                    a1:82:59:0f:f9:8a:40:bb:68:d1:97:52:76:3c:1a:
                    3d:8b:68:ea:38:d6:6e:c8:ac:08:8f:e5:e7:ca:b6:
                    2d:9f:79:3d:87:bb:4e:32:c2:c2:8f:f6:53:43:6a:
                    cf:71:85:44:44:a4:1a:06:30:37:55:1b:da:d4:bf:
                    4f:39:b8:c8:2b:ed:30:0b:06:50:dc:6b:0a:fa:0c:
                    e3:91:38:ba:83:d7:47:7e:b1:c9:a9:66:1d:d4:1c:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6A:93:60:5E:D0:5C:DD:B2:A4:D9:7A:D8:6C:E6:83:AF:23:7D:99
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E949/F90391E0D5D211F08FED0880DAE4EC9C/u2qTYF7QXN2ypNl62Gzmg68jfZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329660

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:18:e4:f6:ef:aa:e3:d2:30:f8:60:03:49:fd:5d:70:7c:
         99:05:7b:73:16:61:8c:83:79:cd:dc:3e:0b:15:54:1b:e2:42:
         90:b2:53:4e:75:f0:ad:12:9a:74:91:c2:63:5a:50:b3:53:84:
         8d:30:b4:17:02:d9:d1:5c:a0:e8:40:22:86:be:7b:28:f1:af:
         4f:f3:21:47:e6:8b:0e:5a:22:53:f0:d5:1d:a0:e8:ea:75:15:
         7b:b8:ed:74:4c:5f:08:87:a2:4b:ce:e5:96:91:5c:c8:20:cc:
         20:c9:27:60:0d:ac:fd:80:cd:a9:30:0c:26:ad:f8:16:d3:dd:
         99:46:8e:bf:8f:f1:dd:f9:ee:4e:44:aa:15:87:de:b0:f4:42:
         a5:0a:91:6e:98:b0:aa:77:2f:4b:ac:80:3b:d2:95:08:c2:92:
         b4:61:21:db:37:fd:04:a4:7d:5d:4d:31:49:1e:c8:1a:af:b6:
         f7:de:fd:03:bf:f9:9b:a5:87:5e:34:92:16:3f:54:98:f8:70:
         b2:bb:97:9e:18:9a:87:79:ea:db:60:42:bc:c2:c0:83:a4:fd:
         33:43:4d:43:81:0e:d8:1f:77:80:18:e1:20:75:22:5f:3f:fa:
         b8:33:50:7e:a2:8e:f1:8a:f3:8c:ae:3e:ef:e0:ff:ed:e6:b0:
         41:c8:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:21:57 2025 by rpki-client