This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
File:                     gBdkcAW5GRQgyZGxrgeYtayhTQw.cer (raw, json)
Hash identifier:          itxXSWrNLeqlkpt6K2cHsAu1tR8fN70l/TyU9XQDIzA=
Subject key identifier:   80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3885
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:55:32 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37025
                          IP: 102.219.194.0/23
                          IP: 196.6.228.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Jan 2026 00:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14469 (0x3885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:55:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3632CFEAF, serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:66:8d:d5:a5:c6:9b:8e:69:ee:8d:04:30:
                    ec:a0:2a:96:00:d3:16:71:57:61:9a:3c:b1:20:7d:
                    52:07:68:7b:ba:fe:97:52:13:1d:1d:9e:f1:59:fc:
                    11:8b:6e:25:1e:e5:6c:ce:19:23:e1:1c:da:eb:91:
                    01:d1:42:02:96:d9:85:d0:5b:d0:28:ad:68:81:00:
                    81:ba:44:75:42:07:0f:19:0c:74:94:63:70:69:f0:
                    fa:32:71:88:90:ce:39:f5:38:5e:dd:30:cf:0d:e5:
                    14:3d:01:7d:bd:20:b4:53:e5:e3:fe:2b:a3:b0:58:
                    9b:52:15:93:e4:58:eb:83:86:e2:6f:08:5a:71:69:
                    df:2c:77:68:8c:5d:c0:65:4d:0f:72:aa:fb:63:25:
                    cd:4c:e6:de:d8:2a:63:9b:d5:26:73:81:51:fd:4d:
                    32:6d:8d:3f:9c:6f:f7:f2:33:4b:61:72:e9:99:94:
                    ed:cb:89:8b:88:2a:1c:2e:17:d9:99:10:02:76:36:
                    ec:4f:36:ec:ad:14:30:de:5e:93:78:8a:0c:b4:73:
                    99:19:ca:56:6a:c9:b6:9a:dd:30:80:78:05:50:66:
                    f8:a6:74:36:fe:98:fc:d4:38:bd:9a:04:8d:27:96:
                    5e:c6:c0:8c:b5:c3:9d:61:70:73:30:fb:bf:39:df:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37025

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.194.0/23
                  196.6.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ee:1a:a1:6c:6a:12:45:4c:b0:29:61:d9:bb:8d:40:94:a2:
         0f:3b:48:91:de:9e:de:06:91:65:92:36:fe:72:53:2b:11:11:
         51:56:fc:9f:4b:2b:77:2d:28:e2:72:c1:56:41:e9:d3:98:48:
         9c:0d:64:3d:a0:4f:27:c5:62:18:4b:e6:07:18:5d:dc:c5:23:
         95:0c:45:6c:54:a3:3d:52:26:00:a8:2d:b9:f5:03:b6:90:6e:
         1a:2d:2b:88:9b:26:2d:d6:4f:ec:29:5d:59:75:63:3b:fe:49:
         2a:45:ed:65:af:5f:b9:fc:5e:b5:a3:de:e8:62:8c:88:71:ca:
         0e:11:d0:ee:70:23:b1:08:cf:f9:b2:23:9d:af:de:e2:e9:78:
         f1:c3:5a:f8:80:e7:37:6a:98:d4:93:05:3c:52:42:b3:3b:0a:
         62:3b:b9:8f:26:7a:5a:12:0a:02:35:dc:c7:9e:3b:65:1e:9b:
         0a:3c:d1:b0:a1:56:34:aa:7b:2b:16:79:b8:ac:87:80:de:bc:
         a1:4e:6f:2c:63:cf:b5:92:2e:01:9d:23:f0:fb:df:36:ba:86:
         b1:e4:a8:1d:70:05:3e:37:ad:40:af:b6:a1:2c:ae:b9:3d:f3:
         44:bf:b6:47:71:d6:16:11:67:42:72:ec:26:ab:cf:8a:85:5e:
         23:00:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:43 2026 by rpki-client