This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer
File:                     UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer (raw, json)
Hash identifier:          VV4gMTIg8RHHh/bQXxhutsra+V+CvVzQIcOKOejEg/8=
Subject key identifier:   53:36:D9:13:1D:82:8C:81:67:1C:26:C7:83:86:90:BB:9F:CC:C9:8F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3D05
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:46:41 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329210
                          IP: 102.213.240.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15621 (0x3d05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:46:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36B09DCAF, serialNumber=5336D9131D828C81671C26C7838690BB9FCCC98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:99:e9:63:05:15:61:c7:1c:b2:a5:ec:60:
                    75:d0:20:98:24:8d:54:dc:16:30:ba:20:2e:e9:99:
                    18:fe:05:6e:ca:fa:6c:7a:35:57:64:1b:57:3a:b8:
                    75:08:87:05:06:d6:a6:7f:06:90:7c:0f:24:8f:fa:
                    bb:83:5a:e6:82:49:04:23:9b:ea:e0:91:70:1b:d4:
                    76:d8:af:9c:60:5a:9e:e0:b0:7d:9c:8c:26:b2:f9:
                    fb:31:a8:71:0f:de:e4:83:bd:54:27:99:be:91:3e:
                    31:ea:49:1c:48:4c:7e:f3:55:09:55:9f:88:90:64:
                    b3:32:35:6f:8a:19:b5:fb:68:f4:2f:58:05:e6:5a:
                    46:80:4f:1d:6b:58:88:c2:30:e9:13:48:d6:c2:b8:
                    c2:e1:45:5e:87:cb:30:a3:bc:6d:e6:a0:7d:1b:98:
                    89:28:76:cd:dd:c0:ac:5f:6d:8d:d9:79:dc:df:fa:
                    19:d9:e3:0a:b0:64:73:bb:ad:66:ce:df:e3:d6:fd:
                    92:13:5d:4f:4b:eb:2d:33:19:07:a4:7d:c7:fa:39:
                    a3:34:88:1d:78:e6:b9:81:e9:b1:07:53:f4:6d:a3:
                    9f:be:db:4d:4e:4d:f9:11:b6:79:9f:79:5c:43:53:
                    de:ad:e4:df:bc:bc:9c:2a:14:6a:15:8c:fd:4f:10:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:36:D9:13:1D:82:8C:81:67:1C:26:C7:83:86:90:BB:9F:CC:C9:8F
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329210

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:cb:83:ce:e5:a0:2a:6e:48:87:1d:69:c2:c5:b5:c6:18:e9:
         36:0b:b2:e0:0e:de:c7:9f:9a:45:14:04:54:5a:50:23:ab:eb:
         f0:36:bc:57:ad:82:0a:be:ba:b6:27:4d:e8:c0:9d:88:76:c8:
         ee:2a:50:47:f0:19:a9:de:b0:1c:10:19:ee:bd:7c:72:52:dc:
         a2:6b:81:9d:0d:d8:b1:6e:d9:ed:e7:52:83:55:fc:b9:1e:5e:
         c5:d6:d7:87:05:25:75:d6:a3:7d:c4:90:e4:78:d6:fc:57:a0:
         00:90:a6:75:f6:af:29:2b:6f:f3:98:0e:80:b6:f8:a9:b2:fd:
         67:49:03:2f:51:45:b7:5d:32:df:d8:6c:43:5f:4d:bc:36:8d:
         d4:29:c1:dc:c1:6e:01:cd:30:d6:bf:83:e3:03:3a:07:37:3e:
         af:43:92:6a:8d:94:a5:23:d5:55:23:e1:f9:a7:90:9c:77:d6:
         00:d8:c5:2c:b8:87:e1:60:f7:4c:9f:00:9d:dc:fb:c0:13:d0:
         0a:e0:b8:5b:85:34:b1:da:e4:e4:75:fc:45:4d:72:39:3e:d5:
         0e:96:71:0b:70:90:f7:18:d7:f9:63:de:f0:f8:83:43:d2:2d:
         d3:ea:72:c4:9f:ed:3d:c9:2b:d1:06:6d:d0:bf:fc:27:94:f4:
         c2:8b:6e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:46:29 2026 by rpki-client