This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer
File:                     DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer (raw, json)
Hash identifier:          3+Njt5po6ERgyP2M4Obawzu4pEOcWPP2U9p/WwT4s3o=
Subject key identifier:   0E:B2:E6:6D:6C:12:2B:F3:FE:A8:3B:6C:BB:7B:8C:AE:AE:11:C3:0E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       38A4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:59:59 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328030
                          IP: 196.41.81.0/24
                          IP: 2001:43f8:c70::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14500 (0x38a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:59:59 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36382EDAF, serialNumber=0EB2E66D6C122BF3FEA83B6CBB7B8CAEAE11C30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:fd:d4:ce:5a:81:9e:9c:4e:2f:1b:dc:39:
                    97:77:79:74:8e:22:b5:20:99:52:12:fb:84:1b:4f:
                    48:4c:d2:db:e4:d0:18:ce:de:d6:59:ba:b4:e4:0c:
                    25:2a:d1:4f:0f:7a:25:4f:ce:97:18:13:aa:9a:de:
                    d3:8b:16:de:6a:52:15:50:58:2a:06:eb:01:c4:56:
                    7e:7e:4d:58:18:7c:ed:9f:1d:7c:08:e4:ae:dc:b3:
                    10:87:57:9b:c2:36:0b:b7:28:ce:25:95:8c:74:c1:
                    9a:8d:c0:f3:ce:16:c1:5a:15:00:27:ce:aa:4f:7d:
                    65:19:11:45:96:db:9c:bd:de:57:f8:7e:9f:68:27:
                    c5:f0:dd:ff:18:55:e6:b4:55:4e:cc:cc:5c:23:2e:
                    3c:1c:f6:3d:ac:c8:0d:72:97:0b:aa:76:43:88:f4:
                    85:31:59:29:eb:4f:64:eb:40:51:ae:ad:a3:f0:91:
                    36:76:96:aa:cb:86:31:35:20:23:b1:83:98:a1:8b:
                    ee:27:d1:cc:1a:ae:f2:4d:cc:24:53:d5:fc:80:8b:
                    c1:ea:a6:0d:bb:aa:c3:c0:95:f3:ab:a4:66:72:36:
                    0c:16:06:30:1c:61:e7:57:1f:f9:b7:8c:a9:8f:84:
                    9a:8a:c9:c3:c9:d3:de:8c:f0:6f:32:6d:67:7a:59:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B2:E6:6D:6C:12:2B:F3:FE:A8:3B:6C:BB:7B:8C:AE:AE:11:C3:0E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328030

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.41.81.0/24
                IPv6:
                  2001:43f8:c70::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:51:d2:06:1c:ce:b3:01:76:74:9b:6d:63:af:d6:2b:72:
         20:39:e6:8e:1d:40:30:66:d9:df:a6:a0:ba:64:b2:c7:06:84:
         c8:91:47:58:61:e9:70:b8:e0:64:3d:c1:f2:79:e2:1d:ad:d9:
         8d:32:62:7b:27:e7:88:91:40:5e:bf:7c:54:a1:e6:e0:bb:e4:
         88:39:71:a5:15:0c:a7:54:42:44:a5:e8:05:cf:95:87:0f:e1:
         59:24:80:2e:51:23:1c:23:b6:c0:74:c4:d7:e5:94:35:1a:d8:
         41:be:49:6e:23:56:6c:92:62:48:e9:34:e7:ef:4a:59:9b:86:
         36:fd:e1:64:36:33:c8:de:f1:41:3d:fe:bf:d1:56:a6:c3:3a:
         af:5a:ad:a7:69:91:25:ce:b3:fe:f9:19:86:83:b8:35:78:aa:
         19:59:85:62:60:86:d3:a8:0b:0e:e2:ee:e8:c1:b5:01:e7:a1:
         1f:e2:58:9b:cf:eb:93:59:a1:07:3c:0e:d9:2d:98:c4:48:e8:
         c8:ba:94:49:6b:30:37:c7:fb:26:d6:34:f4:95:e3:71:30:bc:
         69:51:a2:44:db:c2:c1:c9:1f:0f:61:a7:0c:a4:c6:58:1e:f1:
         31:00:6c:df:5e:2d:23:e4:f5:98:8d:5d:01:e9:70:a0:ac:df:
         1b:62:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:50:50 2026 by rpki-client