This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
File:                     x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer (raw, json)
Hash identifier:          8+bu1+NqsR57xcB/63Xzj7DTzLivreA4OcuAWXYid/U=
Subject key identifier:   C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       38A8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:00:52 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328233
                          IP: 102.207.221.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Jan 2026 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14504 (0x38a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 01:00:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36390A9AF, serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:75:fd:3d:c6:c0:20:96:18:4e:a6:7d:70:
                    af:69:fe:16:3b:1f:66:90:43:64:7c:38:15:aa:23:
                    d8:93:c9:d0:80:be:fc:00:8f:25:e5:19:f0:40:f0:
                    70:cd:5a:a5:22:cf:e5:7f:78:b1:74:43:33:f1:b8:
                    49:0d:37:93:6d:42:a2:6f:ca:82:00:40:29:aa:b5:
                    8b:fe:af:28:bf:2a:10:4b:84:e4:12:cb:9a:5e:44:
                    c6:b3:88:82:d7:e5:d7:bf:6d:e4:a7:c5:fa:a3:a9:
                    f5:6c:e8:91:3d:f9:dc:c2:9d:cb:d6:2b:cf:09:22:
                    f6:7a:9a:55:c3:45:6b:f1:ba:bc:2a:41:6c:dd:6d:
                    9b:14:7d:20:89:fe:e7:c5:d5:55:b4:bf:73:f9:0d:
                    d9:87:6c:c8:dc:da:2d:a8:34:c4:9e:61:cb:85:b2:
                    26:4f:ed:9a:49:db:a8:13:97:96:8e:bf:c5:f8:f7:
                    88:16:d1:ac:b5:2a:47:d7:07:7c:36:0f:5b:92:86:
                    ac:72:0d:a3:61:e8:e0:d5:08:3c:08:c3:b0:43:c8:
                    1e:7b:fe:6c:1b:c8:e3:7f:9c:51:fa:3c:ad:28:9d:
                    e7:16:53:5d:64:4a:8f:d9:ef:f1:e7:18:20:c0:3f:
                    b0:d7:18:e3:d7:01:3f:72:b4:52:91:d1:14:9d:b5:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328233

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:71:4e:83:30:52:73:1c:e8:78:ca:6d:62:c9:f5:ae:97:97:
         10:55:51:7a:ea:b7:28:bc:06:1a:c0:f6:44:8e:5b:4a:14:1c:
         09:c7:8f:38:43:08:39:3f:0d:fa:32:a3:4d:be:bc:68:e5:63:
         74:66:cd:cc:65:1a:5c:1c:24:77:15:bf:6c:9c:45:9b:29:bd:
         2e:83:bf:73:2f:63:41:8e:80:25:e1:8f:c6:eb:07:db:54:05:
         14:f7:0c:eb:45:bf:4e:bc:d0:55:71:0e:3e:48:9c:a4:0e:f0:
         13:4e:42:6e:a1:c4:47:94:5c:aa:94:f3:47:1a:55:1d:a8:49:
         da:d8:4f:61:fa:17:54:30:14:da:90:6d:a4:bb:48:e2:d7:bf:
         20:60:fa:56:44:f6:be:07:bc:f8:6b:c6:57:88:a9:c3:0a:93:
         a9:77:31:02:b4:49:5a:5c:55:48:ac:33:28:cc:6d:ff:4f:01:
         64:36:9b:aa:cc:38:3a:e7:48:dc:c7:ff:4f:31:82:39:9d:f9:
         1f:6c:66:c6:24:43:b0:69:5f:08:fa:8e:ed:af:bf:ea:bf:d0:
         93:73:17:08:d8:d0:cd:0f:ce:d2:be:d9:79:a2:54:ae:b0:71:
         60:ee:87:5b:0b:d2:82:bb:31:19:b8:bf:f6:ea:8f:e5:2c:e6:
         13:d7:41:8e
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICOKgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMTAwNTJaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjM5MEE5QUYxMTAvBgNVBAUTKEM3NDIzRUQyN0FGQ0MxMEQ1OTgyOUE4
MEIxNzk3MTYyQjY0NkZGREQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9a3X9PcbAIJYYTqZ9cK9p/hY7H2aQQ2R8OBWqI9iTydCAvvwAjyXlGfBA8HDN
WqUiz+V/eLF0QzPxuEkNN5NtQqJvyoIAQCmqtYv+ryi/KhBLhOQSy5peRMaziILX
5de/beSnxfqjqfVs6JE9+dzCncvWK88JIvZ6mlXDRWvxurwqQWzdbZsUfSCJ/ufF
1VW0v3P5DdmHbMjc2i2oNMSeYcuFsiZP7ZpJ26gTl5aOv8X494gW0ay1KkfXB3w2
D1uShqxyDaNh6ODVCDwIw7BDyB57/mwbyON/nFH6PK0onecWU11kSo/Z7/HnGCDA
P7DXGOPXAT9ytFKR0RSdtQVVAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUx0I+0nr8
wQ1ZgpqAsXlxYrZG/90wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzOTBBOS8zMUEzRERBMjg2RTIx
MUVGQkIzRDZDOTY3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzkwQTkvMzFBM0REQTI4NkUyMTFFRkJCM0Q2Qzk2NzYyRTk1MUEveDBJLTBu
cjh3UTFaZ3BxQXNYbHhZclpHXzkwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAikwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmz90wDQYJKoZIhvcN
AQELBQADggEBABdxToMwUnMc6HjKbWLJ9a6XlxBVUXrqtyi8BhrA9kSOW0oUHAnH
jzhDCDk/Dfoyo02+vGjlY3RmzcxlGlwcJHcVv2ycRZspvS6Dv3MvY0GOgCXhj8br
B9tUBRT3DOtFv0680FVxDj5InKQO8BNOQm6hxEeUXKqU80caVR2oSdrYT2H6F1Qw
FNqQbaS7SOLXvyBg+lZE9r4HvPhrxleIqcMKk6l3MQK0SVpcVUisMyjMbf9PAWQ2
m6rMODrnSNzH/08xgjmd+R9sZsYkQ7BpXwj6ju2vv+q/0JNzFwjY0M0PztK+2Xmi
VK6wcWDuh1sL0oK7MRm4v/bqj+Us5hPXQY4=
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:04:00 2026 by rpki-client