This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/EQYAxu67aMpSEon5sYeaJnpW4_w.cer
File:                     EQYAxu67aMpSEon5sYeaJnpW4_w.cer (raw, json)
Hash identifier:          8PvjmmJxJEVlrHE4mIlSncoEjiBqeSOltkZTdRvmBAU=
Subject key identifier:   11:06:00:C6:EE:BB:68:CA:52:12:89:F9:B1:87:9A:26:7A:56:E3:FC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3FB6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 28 Jan 2026 12:13:00 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328476
                          IP: 102.69.148.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16310 (0x3fb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan 28 12:13:00 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367B9AEAF, serialNumber=110600C6EEBB68CA521289F9B1879A267A56E3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:c5:23:1a:c2:2c:9e:0e:74:21:7a:48:2e:
                    f6:8b:88:42:f2:f7:d9:a0:2d:09:e9:bf:fe:70:ec:
                    d7:a4:f2:63:0c:84:ea:30:e3:b2:65:19:29:66:37:
                    cc:a1:28:4b:fc:d0:2d:10:5a:ea:a4:ff:4c:24:56:
                    20:81:a1:3b:f8:d8:c8:21:d0:52:eb:24:83:41:a3:
                    df:93:6b:95:f3:4b:c2:8a:e8:d1:63:2e:40:4b:fb:
                    9d:26:c8:57:8f:3e:62:d2:2d:76:50:06:b0:f3:1d:
                    53:7d:00:75:08:59:85:62:7c:bf:55:73:bb:53:65:
                    ef:e5:14:aa:08:49:65:f1:68:87:14:19:fa:b5:7b:
                    54:7f:30:d6:e8:a9:fe:71:6a:ec:ec:2b:ac:7c:74:
                    bc:0c:cc:71:c9:7d:d7:69:23:92:c3:27:f1:b6:32:
                    d9:65:ac:ec:b2:f8:bf:81:bc:01:6a:6f:69:6f:32:
                    22:19:36:45:d5:3e:d1:b6:db:98:df:73:25:06:82:
                    b4:05:e1:b4:6b:15:36:a1:d5:b2:b1:41:c6:be:20:
                    dd:73:c0:92:f0:4e:34:0b:cf:27:06:a7:3c:a7:d6:
                    82:84:80:86:3d:bc:2e:33:d0:f9:99:58:2d:b6:51:
                    62:b5:64:b4:5e:b3:fd:0f:fd:a8:bf:52:00:6b:d0:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:06:00:C6:EE:BB:68:CA:52:12:89:F9:B1:87:9A:26:7A:56:E3:FC
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B9AE/AAB063E2FC4211F0B43A6C96DAE4EC9C/EQYAxu67aMpSEon5sYeaJnpW4_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328476

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.69.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:50:e8:82:4c:c3:77:87:e4:ad:49:8f:38:dd:9f:5b:10:52:
         ec:5c:20:9a:87:13:59:9e:bc:03:d6:58:7e:2c:91:7e:9c:13:
         82:6b:d1:28:2e:5c:81:ce:04:c6:5b:0c:68:0a:26:6c:83:1a:
         58:c9:46:3f:03:74:6e:ef:af:e4:cd:99:5e:6b:c1:4d:59:7e:
         c0:08:55:78:2d:2b:d5:d8:d4:3d:6e:91:5f:cd:08:de:3f:9f:
         14:60:96:84:46:b2:05:a4:d4:a6:6d:c2:70:1c:94:5b:84:3d:
         23:85:a6:84:77:b5:62:8a:ca:e3:f6:fe:f5:56:dc:29:58:c0:
         53:48:f2:57:07:2b:f2:6a:8e:83:29:dd:96:8c:fc:c3:b9:1b:
         0a:25:dd:4d:52:99:9c:3e:01:bc:6c:06:1b:c9:d3:5d:3c:9a:
         79:15:99:42:32:d4:86:37:06:fd:a6:82:7c:38:17:c2:48:0e:
         01:b6:e4:a9:85:84:a9:76:29:64:95:a1:92:f8:2c:3e:95:c9:
         26:01:20:3b:73:7c:c4:7f:78:61:2b:dd:ec:aa:59:54:43:7a:
         8c:3e:60:e8:63:b9:34:e0:95:36:30:30:b9:fd:af:92:01:60:
         81:01:1d:8a:dd:9b:67:1f:df:4b:60:b7:a7:f6:20:a7:47:76:
         bb:d1:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:45:35 2026 by rpki-client