This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
File:                     kOmId5HPLZYFAfiu3iSiM0q6VAM.cer (raw, json)
Hash identifier:          fxxZawKjLf+U5bmJP6ZpnPfqbFZrAetmwc6AbaCX7eM=
Subject key identifier:   90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       37C8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:20:52 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 36915
                          IP: 41.207.64.0/19
                          IP: 2001:4370::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14280 (0x37c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:20:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F361C3A1AF, serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:d9:53:6a:12:80:93:df:ca:db:27:a9:41:
                    56:0f:2a:5a:b2:af:ac:fc:3d:34:93:c5:95:14:94:
                    30:26:be:40:e0:71:18:7a:5a:09:5c:92:35:8c:ca:
                    ac:ec:66:6d:04:6b:a9:85:32:ba:60:5a:88:77:33:
                    da:b8:79:ff:46:9f:08:3e:bb:e5:49:8f:ef:a9:a6:
                    e5:9b:ed:22:c7:18:3d:49:78:55:20:61:0b:50:62:
                    83:6f:f4:ba:35:9f:f8:64:8c:01:20:36:69:ee:7f:
                    71:49:68:b6:70:63:cb:d7:09:02:2c:90:af:fd:5c:
                    11:f0:51:38:2f:fb:2d:b5:58:5f:5a:3f:7f:69:a7:
                    7f:13:e1:89:7e:9a:be:b7:c6:bf:fc:3e:96:8d:c0:
                    80:bb:6e:0c:75:eb:d0:c5:85:3a:08:a8:60:96:bc:
                    cd:46:b7:31:26:c5:42:b0:5b:6f:f3:9c:d7:09:ca:
                    e6:17:c3:22:b8:c8:f5:0d:1e:db:ac:2e:da:74:f1:
                    16:c3:3a:40:d0:44:52:51:67:f5:f7:39:32:93:b3:
                    c3:e1:2b:fc:8a:03:de:4a:f1:2a:d3:1a:bc:74:63:
                    b5:3b:e2:26:a2:fb:a3:10:30:fd:69:19:ad:b4:b2:
                    b2:b8:76:a9:0f:e0:32:e7:8e:4c:ee:6d:cd:ad:41:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36915

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.207.64.0/19
                IPv6:
                  2001:4370::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:a7:ce:09:c3:ba:e3:94:4d:7d:cf:3c:31:a1:97:19:cf:6c:
         eb:82:04:3b:ed:78:75:2d:db:e5:18:b1:8b:bf:3f:f3:68:77:
         b9:ea:88:06:b6:e7:bc:3f:8b:15:57:ef:2e:8b:c8:a3:1d:49:
         ed:c9:49:c5:db:3f:0e:ab:bb:3f:0e:1e:0e:a2:61:54:2f:6d:
         ab:51:71:08:0b:03:88:52:5d:69:78:31:ba:9f:74:77:cf:5f:
         60:ba:0d:54:95:5a:13:5b:82:dc:cb:6c:7d:7d:66:a0:8a:48:
         7d:c6:13:12:08:0f:a0:b2:d2:3e:39:93:1b:84:23:3a:ae:2a:
         50:f9:81:4a:bb:ee:ed:cd:ea:c7:63:4a:c4:bc:d9:37:5e:bd:
         8e:97:b3:e4:ea:06:14:eb:71:f6:d0:c4:34:c1:43:ba:5a:19:
         54:83:07:97:98:3f:f9:4a:cd:67:4a:f2:6a:a2:8c:8e:d1:e4:
         11:eb:c7:0e:7a:f2:8f:96:7e:d3:d5:e9:c4:57:6b:60:8e:6f:
         5a:07:fe:1a:82:b3:27:10:03:98:8e:48:91:fe:0d:83:a6:3e:
         79:c5:ff:56:cf:fc:a9:88:ce:d2:44:29:76:c5:78:56:45:62:
         c9:a2:52:b0:87:1d:49:8f:ce:42:4d:ac:65:2b:fd:9b:81:95:
         ce:27:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:49:00 2026 by rpki-client