This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer
File:                     m1ZovBMhETHfDtPunCXTEUxUspM.cer (raw, json)
Hash identifier:          14RBC+UwTlhS+hq640VDjU/jlGutfjUWlwDpXcttIF4=
Subject key identifier:   9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3CBC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 03:35:17 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328170
                          IP: 102.22.80.0/22
                          IP: 102.67.136.0/21
                          IP: 102.211.28.0/22
                          IP: 102.221.36.0/22
                          IP: 2c0f:ed68::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15548 (0x3cbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 03:35:17 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36A42DFAF, serialNumber=9B5668BC13211131DF0ED3EE9C25D3114C54B293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:96:2f:d4:8b:7b:c7:9d:47:b9:d4:c4:1a:
                    fc:63:d7:47:2e:e4:bb:ab:03:12:a3:ea:76:e4:2c:
                    08:d0:d4:69:64:f4:a5:71:26:24:d6:6f:2d:ff:2e:
                    53:d9:2b:ec:1d:f2:75:3b:6a:74:22:2a:4c:bf:a3:
                    3c:3c:7d:7e:13:28:47:32:aa:dc:34:a7:6d:70:60:
                    9b:66:fd:39:d8:a7:e8:50:dc:27:3d:99:8d:df:18:
                    b5:a3:0e:e1:09:12:7a:bd:9f:61:b2:82:8c:8c:3d:
                    1d:8e:c9:de:17:3a:ac:41:98:af:d3:f3:2b:5d:0e:
                    87:cc:3b:b8:11:84:46:cd:b5:57:a5:c9:cc:17:2e:
                    5b:d0:0b:26:18:d3:25:ba:6c:b8:71:a2:d4:60:a9:
                    db:fc:b9:eb:71:fd:d4:d7:6a:c8:d8:b0:56:8c:0e:
                    5f:62:ad:6c:22:6a:f8:2a:2d:e2:a5:01:21:68:f1:
                    8e:99:d1:7b:93:cd:a9:b6:f0:8a:d4:bf:9f:41:e3:
                    20:7d:4e:7c:45:ad:cf:88:dd:f9:13:e0:88:81:f1:
                    44:1e:56:3f:20:d0:00:29:3b:82:ed:84:f4:a7:16:
                    6e:43:97:40:4b:54:78:1b:b2:40:ed:82:32:ed:83:
                    ef:29:df:33:9b:da:29:ba:f7:d4:89:a4:88:32:0f:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328170

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.80.0/22
                  102.67.136.0/21
                  102.211.28.0/22
                  102.221.36.0/22
                IPv6:
                  2c0f:ed68::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:9b:30:a5:70:93:2d:b7:6a:1f:38:d6:84:b6:c5:56:0d:
         c4:75:46:2b:b9:5d:c6:c0:d2:5b:44:81:b9:f6:cc:17:61:95:
         93:a6:cf:71:00:eb:cd:dc:70:01:71:d2:db:6d:05:35:73:b2:
         d7:d2:b3:fe:84:05:92:59:7c:e9:3f:1e:44:b3:79:bd:7d:37:
         0e:c6:87:e2:e3:a1:a9:70:7a:78:9a:48:b7:0d:02:36:17:48:
         20:b6:a5:bf:fa:f8:da:01:9c:e4:e8:85:d0:81:f7:3c:3e:18:
         fe:47:20:70:8a:5e:ea:62:92:b6:7d:2d:78:35:d8:59:30:67:
         f2:4d:a9:4a:d5:0c:91:c2:27:19:e1:d1:f1:16:eb:5e:87:0b:
         b7:55:7d:f0:aa:d8:59:bd:b0:01:1e:7b:77:ff:2b:c2:42:cc:
         74:8d:f1:a0:16:b2:7a:26:de:0f:bb:8a:eb:be:cb:1e:db:70:
         09:31:91:ab:c1:e3:77:e2:18:cf:a4:a5:c6:24:07:24:11:7e:
         e9:ce:83:25:d7:ae:04:1e:2c:c6:df:c8:d6:0e:93:eb:5f:34:
         46:3f:3c:3c:53:f8:de:0f:fd:56:07:f4:7b:b1:e8:50:d4:5e:
         bb:29:d2:50:ec:c1:16:44:2c:f8:a1:e3:55:43:d0:fb:54:1c:
         ac:45:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 22:49:20 2026 by rpki-client