This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ECqVKM6Relap2R5oH4HbdcNC7y4.cer
File:                     ECqVKM6Relap2R5oH4HbdcNC7y4.cer (raw, json)
Hash identifier:          YPhp7+a7ya69wXU/xlLM0RX7d2gUnlbggT84b6O3WfU=
Subject key identifier:   10:2A:95:28:CE:91:7A:56:A9:D9:1E:68:1F:81:DB:75:C3:42:EF:2E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3FD3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367A534/97B68100036211F1B9EDAFDCDAE4EC9C/ECqVKM6Relap2R5oH4HbdcNC7y4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367A534/97B68100036211F1B9EDAFDCDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 06 Feb 2026 13:49:09 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329123
                          IP: 102.214.240.0/22
                          IP: 2c0f:1f80::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16339 (0x3fd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Feb  6 13:49:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367A534AF, serialNumber=102A9528CE917A56A9D91E681F81DB75C342EF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:53:dd:31:b3:61:2c:ae:2d:f9:08:91:9c:
                    0b:71:ff:ca:dd:fa:4f:14:76:4d:03:36:32:bb:6f:
                    4e:95:43:2e:94:7a:d0:c3:bf:60:fc:4a:0f:5c:0e:
                    5f:78:aa:34:98:6d:99:d8:2b:5b:4b:5b:1c:02:3d:
                    4a:d8:7b:ae:63:60:dc:e1:28:bf:2f:b7:b2:e5:2b:
                    e3:7c:bc:fd:3a:18:ca:26:5b:18:a6:3f:1a:37:ff:
                    d4:1c:8e:76:7c:e4:b4:08:81:c9:f7:4f:e9:e2:31:
                    ce:89:24:66:ef:c3:47:ce:1f:92:75:28:28:ae:d9:
                    47:31:ae:03:4b:c3:79:30:e1:6b:a7:bf:c6:b5:9e:
                    46:c7:33:0b:9e:cd:8b:61:11:27:5e:47:f3:ca:a3:
                    14:bd:90:69:73:57:21:c4:a5:33:6b:b2:45:33:52:
                    3b:2e:c1:6b:c2:18:8d:7f:03:76:de:1f:1f:56:2c:
                    f3:dc:db:68:c2:9b:a4:07:e6:8a:e4:fc:4b:60:0f:
                    b3:5a:46:ea:be:80:2e:72:4f:c2:a8:ab:fe:ee:df:
                    2d:c7:5f:d6:72:b8:e1:1d:97:ff:b3:44:04:90:d2:
                    84:77:6b:e0:df:2c:67:5b:7b:86:bf:d9:9d:fb:85:
                    21:ad:f3:02:42:ac:af:92:69:ae:75:19:cf:29:37:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2A:95:28:CE:91:7A:56:A9:D9:1E:68:1F:81:DB:75:C3:42:EF:2E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367A534/97B68100036211F1B9EDAFDCDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367A534/97B68100036211F1B9EDAFDCDAE4EC9C/ECqVKM6Relap2R5oH4HbdcNC7y4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329123

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.240.0/22
                IPv6:
                  2c0f:1f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:2c:10:02:55:76:b7:70:d6:eb:3c:b2:3f:38:1e:27:24:d6:
         4c:44:86:13:73:22:e2:92:f1:70:00:f8:be:c3:b2:79:02:f8:
         d0:e0:85:3a:92:ba:77:32:5e:2a:38:70:b8:8b:81:9b:da:18:
         65:dd:f7:44:04:64:ea:dd:c4:d1:d0:a1:5d:e7:62:bb:4c:e8:
         b2:a2:9a:95:e1:df:75:20:af:85:37:b9:11:f8:60:8e:66:69:
         9a:63:cb:e6:19:7d:04:ba:57:1d:4e:3d:37:bd:25:cf:74:50:
         48:cf:72:1c:83:51:f6:9a:b8:ce:94:8f:bb:55:bf:75:96:58:
         e4:10:a7:b1:78:20:c1:e5:67:8e:ee:f4:68:bc:8f:44:54:44:
         90:2f:46:de:e9:1c:df:4c:79:99:84:00:6e:d2:fb:ba:69:49:
         2a:21:96:98:22:b6:a3:a3:af:7f:a7:98:39:40:59:b3:c0:74:
         16:7b:e2:ea:27:07:b3:ed:07:4b:0f:6f:d1:72:6f:e4:ef:e4:
         8f:61:bf:d1:ac:4a:f0:ea:6b:10:46:21:e3:1d:40:1a:47:b7:
         d2:af:17:4a:4d:48:7d:45:61:a8:6d:af:99:6b:79:cb:0b:0b:
         c8:8d:88:3e:6e:6a:bf:df:6e:9a:95:f9:e8:ce:c5:c2:80:34:
         e0:3b:97:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:45:37 2026 by rpki-client