This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer
File:                     SiVNJMpKR_MJflNc67lFFN3kGvc.cer (raw, json)
Hash identifier:          8VNfMg3w5AH89zzyl5iiCBArK+e5siCYugvaiFrw+dM=
Subject key identifier:   4A:25:4D:24:CA:4A:47:F3:09:7E:53:5C:EB:B9:45:14:DD:E4:1A:F7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3FC8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 03 Feb 2026 14:04:47 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329505
                          IP: 102.203.214.0/24
                          IP: 102.207.142.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16328 (0x3fc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Feb  3 14:04:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F366628AAF, serialNumber=4A254D24CA4A47F3097E535CEBB94514DDE41AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:09:6e:65:99:a2:58:13:8e:7e:9c:73:cf:
                    33:38:a3:ca:e7:d3:43:4c:c4:5e:c4:7c:14:d3:2d:
                    70:80:3c:72:3a:71:7a:56:05:3a:37:25:a6:3e:28:
                    30:2e:5f:91:99:b3:9d:a5:5b:bc:93:8c:2a:d5:db:
                    2e:33:ef:dc:80:f3:97:9a:f8:9b:a4:f2:35:79:0c:
                    45:39:e6:38:04:05:5f:ec:91:f9:5c:23:97:bb:6a:
                    5c:55:59:49:98:6c:e8:36:10:63:02:02:56:63:39:
                    13:8b:18:63:a3:bf:44:9f:2b:08:29:2f:95:76:67:
                    d3:a1:24:19:0e:08:33:fd:f2:9c:a9:bb:74:dd:37:
                    ee:09:f0:f2:e7:ee:f4:da:7b:30:f6:d0:a6:1b:96:
                    21:85:44:44:5c:52:0e:11:3a:20:3b:c4:66:09:02:
                    fb:6a:3e:d3:d2:e4:57:eb:6f:f0:47:68:1a:14:f1:
                    39:36:90:24:b2:7c:a8:90:48:e1:50:e0:0a:ec:c0:
                    48:f4:69:79:d9:d2:10:7f:0b:81:0d:ba:39:99:44:
                    9d:90:fe:d1:98:00:67:92:09:14:8d:5c:fb:58:ee:
                    6e:fa:8c:3a:32:d9:ef:ca:f0:bb:21:2e:70:b3:60:
                    3a:4d:75:44:c1:ee:3d:bd:37:b8:fb:62:1c:61:d8:
                    4c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:25:4D:24:CA:4A:47:F3:09:7E:53:5C:EB:B9:45:14:DD:E4:1A:F7
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329505

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.214.0/24
                  102.207.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:c0:8c:79:68:44:9d:41:a8:e4:b0:2e:ba:11:1b:82:ec:
         2a:6e:39:df:87:a3:3f:32:8f:bd:85:cb:6e:b8:15:96:cc:89:
         f7:01:17:d6:d6:b6:fa:f5:25:95:ef:0d:54:80:d5:c2:e6:44:
         99:74:92:85:68:a2:0b:9c:1a:2f:df:ab:81:52:69:dc:04:92:
         85:6d:49:2b:13:54:9f:d0:a5:e0:bd:83:db:b7:d4:ec:6c:01:
         76:06:be:08:6e:6f:bb:b0:a6:b6:1a:19:f6:0a:d0:79:f2:62:
         f5:c4:65:d1:b0:cc:cd:f6:50:58:4e:1f:04:a0:0d:79:7a:b4:
         a0:2b:38:1f:bc:86:c7:b1:b4:17:7a:4a:69:0d:55:62:91:5b:
         4a:db:a0:ef:84:5f:28:30:36:9e:70:76:c4:8d:a5:6c:79:99:
         2b:62:e4:dd:b0:9f:ee:ad:f6:40:4e:e8:22:d0:7b:25:cd:d7:
         52:36:84:7b:57:c9:74:c3:7e:1a:db:31:3e:fa:ee:72:5f:e4:
         ba:05:a4:06:9d:2b:07:8f:4c:16:cd:74:55:a0:9d:1d:52:8a:
         be:b4:aa:f5:05:72:ab:a6:02:b3:6c:62:e8:b0:16:ca:71:61:
         f5:8d:1d:8d:8d:04:bd:98:81:87:c9:75:24:e4:87:21:5b:39:
         a0:e9:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:45:31 2026 by rpki-client