This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/huglnkPq8W75kYMuF3CJk-ot1X4.cer
File:                     huglnkPq8W75kYMuF3CJk-ot1X4.cer (raw, json)
Hash identifier:          NrXELrXIOg8o3qjwonbUTl3VlO1iwAbI4UzI3NkJpvk=
Subject key identifier:   86:E8:25:9E:43:EA:F1:6E:F9:91:83:2E:17:70:89:93:EA:2D:D5:7E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3C9E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/huglnkPq8W75kYMuF3CJk-ot1X4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:30:50 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327861
                          IP: 102.141.236.0/22
                          IP: 196.13.208.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15518 (0x3c9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:30:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36A18AFAF, serialNumber=86E8259E43EAF16EF991832E17708993EA2DD57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:3d:46:36:b3:3c:2c:ac:ae:43:0a:32:06:
                    75:76:02:da:f8:05:93:eb:9e:5a:3a:03:05:a8:fa:
                    ec:74:39:23:c2:76:59:6e:f6:85:43:1f:ad:79:4e:
                    ac:87:f1:de:6e:9d:bd:68:6f:36:d6:01:bc:87:1b:
                    ba:7c:ae:ad:9d:6c:59:14:50:70:8f:1c:c3:1c:91:
                    c2:46:d6:04:b6:cc:36:22:af:8c:04:37:f5:bb:32:
                    8c:f6:d4:ee:5e:f9:0a:d5:43:59:b7:ea:e7:9d:ff:
                    f1:f0:11:2f:65:aa:1a:0a:9d:fb:7a:b6:1f:7d:25:
                    f0:3c:3c:7a:ac:c5:33:8b:55:8e:55:0a:49:7a:26:
                    14:f2:76:e9:94:40:57:46:2c:4e:f0:fc:04:12:d4:
                    1f:a8:76:92:63:d2:9e:9e:f6:69:81:b2:62:88:2e:
                    c9:af:66:13:76:a0:3e:80:ee:39:a1:91:cd:ce:a8:
                    35:0f:a7:f9:a9:df:1c:8f:4b:04:de:06:94:f3:96:
                    d3:bd:99:b6:a0:e2:27:76:ac:10:d0:c1:65:73:05:
                    7f:ce:90:a6:42:17:e9:47:ab:fa:2a:79:39:d5:53:
                    9a:8d:29:fe:f8:6a:87:cc:ad:92:eb:ce:47:48:93:
                    41:0c:45:77:64:97:53:98:bd:d5:ca:11:83:61:50:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E8:25:9E:43:EA:F1:6E:F9:91:83:2E:17:70:89:93:EA:2D:D5:7E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A18AF/B855BBE8628C11EE9EC0747F4AD9E6FC/huglnkPq8W75kYMuF3CJk-ot1X4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327861

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.141.236.0/22
                  196.13.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:2d:c7:a7:01:36:3b:19:d8:08:03:87:98:36:eb:ab:a0:
         5e:fd:de:c4:b2:ab:31:87:1f:52:79:8b:65:ae:f6:09:0c:e5:
         c5:32:1c:09:91:bb:d4:7a:7f:e3:16:76:66:d7:9e:60:33:dd:
         50:06:46:cd:10:09:91:8c:33:39:5c:af:cb:b5:09:76:dd:b8:
         53:ed:a0:89:ee:ce:5b:9e:e1:cf:85:b2:a5:01:ce:f7:90:54:
         f6:84:a1:3e:65:fe:e1:34:40:5f:42:8a:5e:1a:25:85:26:c7:
         52:7b:6e:61:ad:0d:d5:e9:01:47:d2:8f:cf:02:75:19:30:e9:
         77:93:b5:30:93:a9:c2:35:52:af:85:0e:fe:ad:ca:90:d5:ee:
         3d:a0:58:09:c1:20:19:ad:2c:39:89:31:3a:6d:35:46:0f:a7:
         22:6a:a9:af:8e:58:e0:bc:52:65:a6:c4:5b:f1:cf:4a:5c:9b:
         f1:9b:c2:d0:75:9b:0c:4d:ee:ef:5d:f4:86:99:29:a3:8e:3c:
         2e:d8:6d:7e:d3:18:36:79:aa:5d:b1:b9:87:e6:b6:93:12:8e:
         cb:48:f4:1b:66:d7:8e:72:e8:02:74:db:32:ff:14:7d:53:e1:
         c1:fc:c3:32:8f:e3:bc:2b:75:56:52:66:2a:5a:35:ad:a9:83:
         df:d7:ab:8f
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgICPJ4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAxMDEwMzMwNTBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkExOEFGQUYxMTAvBgNVBAUTKDg2RTgyNTlFNDNFQUYxNkVGOTkxODMy
RTE3NzA4OTkzRUEyREQ1N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXRz1GNrM8LKyuQwoyBnV2Atr4BZPrnlo6AwWo+ux0OSPCdllu9oVDH615TqyH
8d5unb1obzbWAbyHG7p8rq2dbFkUUHCPHMMckcJG1gS2zDYir4wEN/W7Moz21O5e
+QrVQ1m36ued//HwES9lqhoKnft6th99JfA8PHqsxTOLVY5VCkl6JhTydumUQFdG
LE7w/AQS1B+odpJj0p6e9mmBsmKILsmvZhN2oD6A7jmhkc3OqDUPp/mp3xyPSwTe
BpTzltO9mbag4id2rBDQwWVzBX/OkKZCF+lHq/oqeTnVU5qNKf74aofMrZLrzkdI
k0EMRXdkl1OYvdXKEYNhUNP7AgMBAAGjggMRMIIDDTAdBgNVHQ4EFgQUhuglnkPq
8W75kYMuF3CJk+ot1X4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBMThBRi9CODU1QkJFODYyOEMx
MUVFOUVDMDc0N0Y0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTE4QUYvQjg1NUJCRTg2MjhDMTFFRTlFQzA3NDdGNEFEOUU2RkMvaHVnbG5r
UHE4Vzc1a1lNdUYzQ0prLW90MVg0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFALUwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJmjewDBADEDdAwDQYJ
KoZIhvcNAQELBQADggEBAEqmLcenATY7GdgIA4eYNuuroF793sSyqzGHH1J5i2Wu
9gkM5cUyHAmRu9R6f+MWdmbXnmAz3VAGRs0QCZGMMzlcr8u1CXbduFPtoInuzlue
4c+FsqUBzveQVPaEoT5l/uE0QF9Cil4aJYUmx1J7bmGtDdXpAUfSj88CdRkw6XeT
tTCTqcI1Uq+FDv6typDV7j2gWAnBIBmtLDmJMTptNUYPpyJqqa+OWOC8UmWmxFvx
z0pcm/GbwtB1mwxN7u9d9IaZKaOOPC7YbX7TGDZ5ql2xuYfmtpMSjstI9Btm145y
6AJ02zL/FH1T4cH8wzKP47wrdVZSZipaNa2pg9/Xq48=
-----END CERTIFICATE-----
Generated at Fri Feb 6 22:47:57 2026 by rpki-client