This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
File:                     M_ZYGpislU83OkcJgFDY_iv0fj0.cer (raw, json)
Hash identifier:          L5/2RVHnyHZgwyhN9ty1gi+daDt9kCCMsRF0aPxD++U=
Subject key identifier:   33:F6:58:1A:98:AC:95:4F:37:3A:47:09:80:50:D8:FE:2B:F4:7E:3D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3B35
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:38:22 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329421
                          IP: 102.209.90.0/23
                          IP: 2c0f:7340::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Feb 2026 00:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15157 (0x3b35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:38:22 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367C8F5AF, serialNumber=33F6581A98AC954F373A47098050D8FE2BF47E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b3:4f:57:3e:11:1f:c7:8d:d7:27:44:7b:9a:
                    c5:a5:df:a6:f5:4f:60:de:a2:71:e6:e5:a0:ce:a9:
                    a3:6b:2c:ee:f3:b6:d6:b2:90:e8:e7:ba:e4:69:f1:
                    fe:15:36:37:fb:58:38:88:af:4f:22:a9:34:40:af:
                    82:10:33:35:ab:e5:01:27:1d:40:a1:e1:c6:1b:bd:
                    30:5e:eb:71:c0:d5:32:91:29:11:75:50:ba:e6:cd:
                    ba:d6:c0:4a:19:06:5c:da:39:3c:1e:25:03:9a:db:
                    7a:cc:1a:25:3d:2c:53:08:0c:ea:6b:6b:ad:58:a8:
                    ea:50:6c:52:3d:1b:52:79:fe:3d:9b:af:97:88:13:
                    e2:10:f1:71:8e:51:4f:bd:26:70:02:32:1a:c0:e8:
                    f1:97:dc:cd:a3:ac:40:f1:d5:b4:32:7a:16:6d:2e:
                    ac:29:60:5e:8d:36:45:b7:4a:f4:f2:6f:d0:2c:b5:
                    73:b3:07:9e:50:68:85:c3:69:7c:ee:f0:46:ab:7c:
                    c5:f6:1f:4c:2f:cd:29:8d:be:7a:1f:24:9e:f3:67:
                    b5:24:f5:9a:0a:15:0d:c0:da:74:2f:21:ed:35:d6:
                    1a:4d:5b:14:f2:4f:fa:b1:a8:28:c9:c0:15:d9:a5:
                    0c:10:60:66:f7:c2:41:5b:5c:44:17:5c:4c:87:58:
                    71:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F6:58:1A:98:AC:95:4F:37:3A:47:09:80:50:D8:FE:2B:F4:7E:3D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329421

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.90.0/23
                IPv6:
                  2c0f:7340::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:1b:01:f1:af:84:5d:15:6c:ac:88:51:cd:42:ce:df:92:c7:
         9f:9c:1c:de:d4:10:a1:26:b6:5e:0c:f2:9c:27:de:9e:39:26:
         a2:7d:d6:bd:72:5e:52:27:f8:c7:ee:49:c3:41:5f:36:85:87:
         7c:d5:ae:f1:2f:92:5b:4f:a4:ff:1e:24:d9:5b:ab:1f:aa:96:
         6b:50:7a:1a:ed:50:18:07:a5:9e:3b:90:ff:8b:07:7b:72:99:
         f3:d9:81:de:4d:82:e7:9a:4f:2f:6c:02:f5:48:e4:e2:bc:72:
         05:cc:c5:b2:69:c1:56:12:32:c6:cf:b7:83:81:2a:fb:65:11:
         14:7f:8e:af:58:21:ea:b6:73:1b:7e:9a:63:03:89:9f:9e:8c:
         e4:76:97:11:46:65:b4:bb:ba:b5:0c:4c:b3:69:a7:1d:f1:5a:
         e9:d5:57:d8:a2:33:d8:2d:88:01:ac:01:71:05:bc:5c:54:9b:
         f2:5d:87:e6:94:f3:56:ca:a6:9e:0b:aa:77:ee:51:63:05:2f:
         24:04:1e:8c:16:94:53:c1:f6:d2:fe:aa:16:34:4a:f0:53:2f:
         f3:7b:20:96:35:0f:c5:1a:04:4b:2b:00:21:5b:7f:6f:df:0b:
         ba:39:bf:3d:ed:22:ab:18:7e:0e:35:bd:36:3f:cc:98:16:4e:
         11:c9:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:01 2026 by rpki-client