This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
File:                     XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer (raw, json)
Hash identifier:          sb/dd0d4CqHpmvEZZ4UZFBFsg2rbPoM049RY7belW7w=
Subject key identifier:   5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       381D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:35:19 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329266
                          IP: 102.212.0.0/22
                          IP: 2c0f:4740::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14365 (0x381d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:35:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3627065AF, serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:01:50:c7:b0:35:37:53:9c:86:9b:0d:f5:
                    c2:9d:72:98:fa:f1:6e:53:e2:08:a0:d3:61:28:b8:
                    15:6e:0b:50:d1:26:3f:a9:7b:00:09:77:2c:0f:f0:
                    d4:28:d7:84:90:c9:f3:b8:e6:67:1a:93:f7:ea:2c:
                    32:7e:da:42:60:30:52:3d:b4:9a:17:d9:dd:02:68:
                    04:08:6d:66:e6:52:80:18:89:45:d5:a7:d5:fa:49:
                    f4:6a:2b:0a:98:1b:27:84:9f:27:c3:76:a3:34:fb:
                    a4:f7:ab:2f:c6:d0:3e:db:89:df:fa:e4:d0:03:d9:
                    ad:d5:95:0f:f8:ed:06:9d:23:dc:c9:01:60:a1:e0:
                    ce:d5:31:d4:3a:15:74:e6:2e:c9:f4:90:fe:4a:21:
                    f5:4d:8b:87:f3:3e:2d:da:40:dd:f9:6f:bd:37:9f:
                    6b:bf:41:7f:35:77:32:8b:38:a5:ca:07:e6:19:1d:
                    f7:4b:d5:46:88:3b:8c:9b:4d:20:3a:81:80:46:5f:
                    ca:d4:17:23:fa:58:a7:f3:58:84:4d:4a:b5:b8:52:
                    53:a2:57:0b:2f:97:5e:2e:83:07:ed:c1:ee:82:2b:
                    a6:fd:96:68:38:9d:1d:66:fb:57:3a:a0:42:26:65:
                    d5:27:82:de:b1:26:7e:a0:65:61:fd:b1:66:d5:c1:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329266

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.0.0/22
                IPv6:
                  2c0f:4740::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:07:a9:33:fb:f1:88:e0:0b:9b:81:05:28:8d:30:19:02:2d:
         00:0d:79:a3:0b:47:2a:78:fb:84:9e:41:da:af:e5:73:90:a0:
         58:46:6e:6a:63:7e:4d:97:ae:38:a6:a7:c0:7a:5d:fa:77:08:
         ca:05:22:8b:1f:c5:70:f0:67:36:20:21:2e:e3:73:c9:37:3c:
         cd:ea:13:34:ab:6a:fa:43:0e:89:62:3e:73:aa:fa:e6:51:12:
         a1:42:e7:9e:ba:66:f6:39:19:e7:60:79:54:b8:71:c4:6b:e1:
         e8:89:3b:a0:94:cd:e9:51:b0:4f:95:f4:f1:9d:b3:f9:dd:8b:
         8c:f6:80:98:88:2b:6a:fd:91:07:2a:a1:81:47:16:4d:ae:dd:
         97:b6:4f:3d:34:9b:86:a4:ac:90:ae:46:86:47:50:70:d7:00:
         a8:1f:a8:a5:65:69:cc:7d:2d:18:b8:d8:fd:51:5a:75:31:ec:
         4f:3a:5e:b6:1e:47:ad:41:b9:71:99:24:d4:7a:96:a2:17:73:
         06:cc:78:5c:a7:f9:5a:19:ac:3c:b1:03:08:6c:c3:8c:ae:c4:
         c6:92:7e:31:df:b6:12:5c:7e:ef:4e:a5:19:83:bf:3b:91:4e:
         6a:94:3f:84:43:3d:c7:ef:82:75:6a:ad:09:53:ee:7f:be:65:
         b9:ae:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:51:40 2026 by rpki-client