This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer (raw, json)
Hash identifier:          aHawphP/aMfbWFDKA3DHnvL2sQOdr1jZXkOWby733dY=
Subject key identifier:   36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3C70
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:24:15 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37212
                          IP: 196.216.180.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15472 (0x3c70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:24:15 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36C6DD4AF, serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:5f:95:ef:86:16:1b:ce:3d:8f:eb:97:4c:
                    20:b6:02:93:c9:95:f9:e1:c7:8c:6c:20:58:5c:41:
                    1c:a3:1b:f1:3d:95:19:f3:9f:46:8d:c8:de:f9:7f:
                    cd:18:77:ef:84:15:c1:39:71:12:ec:2f:21:59:67:
                    a9:8b:50:fd:9e:10:eb:72:6a:41:ac:d6:36:88:1b:
                    15:8c:e0:10:80:73:00:5e:c7:cb:65:a2:74:ca:1e:
                    8a:87:c2:a7:1e:33:38:e5:3b:c3:67:3c:ae:99:b7:
                    c6:59:a1:de:e0:27:6d:e4:49:e9:10:e2:68:0b:5c:
                    6c:1b:28:0a:d4:38:40:ed:27:2c:f2:b7:28:d9:bf:
                    bd:24:3d:d3:40:81:66:a8:70:71:1a:c8:ba:c0:a1:
                    e9:a0:37:dc:a5:4e:b0:ce:44:1b:80:cf:35:fd:2b:
                    ef:41:95:51:3a:bb:c3:d5:7b:6d:1f:35:64:c6:e3:
                    2f:f4:e4:e6:99:e9:b9:c4:f3:30:82:7c:d3:92:77:
                    ba:cf:7d:7b:a3:e3:83:1e:47:5c:7e:99:1b:b1:59:
                    a6:4f:10:27:a1:34:59:9f:f0:89:0c:fb:de:b5:01:
                    b3:eb:85:af:50:4d:24:38:af:be:5c:8f:3c:84:33:
                    53:57:d8:9f:40:4c:a0:60:c0:eb:2b:b8:7a:15:05:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37212

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:2b:cc:b3:c2:fb:4c:e2:65:21:63:6c:49:e3:be:6f:74:9d:
         59:c3:c8:e7:2a:0b:e4:1e:47:6f:3e:b6:f8:e3:0b:55:6c:4e:
         58:a6:ba:86:5a:dc:87:69:1e:88:78:ea:6d:45:8a:68:88:75:
         26:60:0c:cc:5b:a7:33:c4:db:a5:02:b0:07:6f:64:21:2b:35:
         1c:56:d5:9a:be:f9:39:be:42:46:25:8c:e3:f3:19:e7:88:de:
         f0:a8:a8:fb:11:f7:40:28:59:1c:da:67:b1:75:3b:e9:52:f7:
         66:96:57:9a:9e:9e:c9:9c:b2:f1:a4:45:0d:c6:1a:4d:66:b4:
         d1:1c:92:e7:81:cc:28:c1:b7:4f:0c:3b:c2:a9:fb:52:78:d1:
         ee:8d:fe:26:47:86:49:5c:5a:75:57:9a:8f:f6:87:2d:58:b7:
         af:36:86:d9:c5:ad:d5:fd:3e:af:cf:09:fa:c1:37:f4:df:23:
         2a:e1:3e:e3:47:1d:3e:32:21:5d:0f:28:d4:1e:59:df:c4:51:
         70:fa:d1:22:da:23:8a:c9:cb:fc:7f:d4:84:72:51:a4:21:72:
         bd:e8:bb:16:7c:39:77:aa:61:13:b2:71:49:8e:1d:82:03:8f:
         24:26:5d:21:57:5a:7e:f0:c0:eb:9b:04:b7:66:ef:3c:0f:42:
         e4:85:78:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:48:05 2026 by rpki-client