This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
File:                     yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer (raw, json)
Hash identifier:          Y0rm5W6EOq4k1qfIGkQHbD5zoiKYrUaoJR8JIyb10Ws=
Subject key identifier:   C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3F36
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 05:17:26 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 36965
                          IP: 41.73.160.0/19
                          IP: 41.221.48.0/20
                          IP: 2001:43a0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 07:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16182 (0x3f36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 05:17:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36FB3EDAF, serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:eb:24:1d:1b:21:64:3c:4c:71:78:6c:2d:
                    47:e8:97:c9:98:04:b9:dd:6a:ed:eb:93:4d:9f:02:
                    38:bb:df:f2:9b:a0:9e:26:a4:6f:4c:cf:8c:0c:73:
                    19:dd:5c:26:3c:9a:b3:66:9b:df:07:34:2c:65:70:
                    01:f0:85:81:45:c5:66:fd:c7:34:4e:f3:f9:70:9d:
                    02:ab:a2:1a:a5:38:5e:8b:d1:b1:0a:53:85:7d:ea:
                    5e:fe:01:13:2a:f0:d2:86:a5:59:53:98:5c:02:a6:
                    46:f9:0e:71:04:71:76:c3:91:52:17:fa:8d:64:1c:
                    d7:fa:05:01:98:6f:2a:88:f4:a9:9b:15:89:1b:7f:
                    b5:bb:46:42:ef:98:fb:ab:9a:83:e4:12:32:d7:6d:
                    6e:44:91:7f:a9:27:c5:d3:70:8a:9c:b8:f9:e7:7b:
                    71:f1:db:c6:ea:84:0e:ed:7c:be:11:83:a1:8d:b9:
                    da:91:66:53:d0:a0:f1:09:dd:fb:6e:68:e5:6d:13:
                    62:c4:ce:6c:c0:3c:92:14:9f:42:61:8b:12:87:f1:
                    72:5f:22:1a:80:b6:2e:f0:2e:bd:dc:08:54:8b:f6:
                    6f:d8:37:e4:d8:ca:11:17:d9:06:32:0b:9f:23:20:
                    b8:9e:5a:a8:67:f9:6d:c4:d4:91:03:66:5a:a6:54:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36965

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.73.160.0/19
                  41.221.48.0/20
                IPv6:
                  2001:43a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:1f:aa:8e:77:f0:a4:11:cd:e6:7b:f4:d2:9d:9a:51:43:2c:
         1a:5a:1e:96:1a:0a:fb:33:a6:84:5b:52:d6:f2:7e:1f:9d:bf:
         59:74:8f:6b:05:57:7e:b0:ef:ac:9a:7c:1e:d6:2b:ec:c0:ae:
         25:f2:85:8c:b2:22:4e:21:ea:b7:1d:2f:cb:d8:a6:c7:5f:6f:
         0f:71:40:7d:b5:19:32:0e:eb:01:0f:5d:75:e4:6b:a8:a1:b2:
         58:0b:67:2c:9c:94:3b:99:de:c7:0e:e6:bc:54:8b:c6:18:d7:
         55:1f:88:7b:52:f6:ef:9a:bb:0d:a5:f1:6a:4e:5d:5b:fa:72:
         70:52:23:54:7c:a3:9e:7a:d3:a1:ad:aa:23:40:c6:aa:bf:29:
         da:fc:24:06:61:1d:3a:26:83:15:c5:5c:f3:1d:f5:06:07:89:
         4a:c6:84:19:7f:a2:e3:8d:8f:fc:de:19:ef:81:cd:b6:e6:70:
         b5:86:39:98:da:89:ba:e7:72:89:e9:46:5f:f0:1a:58:7d:04:
         72:ff:fc:39:da:90:95:4d:1c:64:88:95:d1:0e:6a:16:d4:a5:
         9c:ba:4c:d0:54:76:9e:d0:75:b1:fc:dd:be:22:49:10:a4:fb:
         cb:20:e3:85:66:57:e7:5b:49:d9:ba:ab:13:c0:43:7d:5e:24:
         61:a0:36:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 12 10:29:04 2026 by rpki-client