This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer File: 9XSxa6hq2W4A3trNY0H5qCTqR6c.cer (raw, json) Hash identifier: dA+nDlyiip389dj2a5EKHLvqMKTCyUcDZZeTKyrUsnQ= Subject key identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C82 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:26:51 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329472 IP: 102.206.104.0/22 IP: 102.208.48.0/22 IP: 2c0f:54c0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15490 (0x3c82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:26:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F369E9B3AF, serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:46:41:40:d9:14:7d:dc:f8:4e:56:52:eb: b3:fc:31:0b:4b:ac:e1:42:39:eb:46:87:61:5b:2b: 9e:2d:76:d0:f6:40:86:ce:ba:8d:be:c8:d1:34:43: 83:90:1b:58:de:ed:4b:17:e7:f0:80:03:6e:b4:5a: 9d:e3:28:63:d8:26:c5:fa:3a:b8:62:22:d1:ee:6e: 78:fc:f5:9a:e5:cd:cb:ab:3d:3d:63:11:08:b4:05: 7f:ce:73:2b:41:a4:4d:b1:33:55:3b:9c:e9:e9:db: a1:9d:1b:ed:67:c4:a0:00:62:fd:e2:89:5b:ae:60: cf:fd:a0:eb:d6:17:55:2d:f2:ac:b3:be:ee:d4:a7: 1e:1b:55:f9:fe:fa:48:9d:06:d2:44:0e:0b:3e:5b: 13:f6:d4:9e:35:19:23:d3:e7:db:4b:6c:50:5b:bb: 4e:bc:fb:b4:fd:e0:86:d3:79:0b:73:cc:85:e2:27: 62:30:bb:39:5e:fa:7f:52:6d:0c:60:bd:38:8d:b1: d3:a4:68:58:6c:2e:78:78:0b:0c:12:6a:74:b2:e3: 1a:47:00:f3:00:a3:95:e6:ea:c6:7e:4b:d9:93:21: 62:20:02:e9:03:21:97:dc:69:e9:22:6c:a7:3b:13: 7f:da:55:6b:b0:d6:42:d4:cb:1b:e0:54:44:0e:d4: 40:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329472 sbgp-ipAddrBlock: critical IPv4: 102.206.104.0/22 102.208.48.0/22 IPv6: 2c0f:54c0::/32 Signature Algorithm: sha256WithRSAEncryption 8c:55:51:50:b3:ad:0d:d3:38:a3:b3:34:c7:aa:46:ff:4e:9a: c2:93:29:71:25:c9:16:7b:2c:fe:36:eb:b3:9e:1c:3f:0a:ea: 79:49:e5:a0:c4:47:cf:60:52:d2:04:e5:d4:35:4b:62:57:27: 95:85:9e:ac:4b:26:98:f0:50:83:7b:8d:05:db:d3:98:1c:0a: a2:0b:27:69:ac:55:93:00:9a:d8:69:36:1b:6c:3d:47:b7:bc: 76:35:94:e1:61:ee:97:21:8f:d7:0e:a8:af:b2:7a:49:ca:a5: 5d:10:b0:7b:b5:54:d3:b3:06:69:f2:1e:1f:8e:e6:1b:fa:5b: bc:c4:09:06:69:00:1c:19:40:b4:29:91:59:f5:65:71:7c:3f: 8d:bb:14:5a:cc:e8:7a:34:b0:ca:30:6e:fa:20:03:2f:c1:70: 4b:98:69:23:9a:f5:a8:d7:29:35:de:55:f4:c1:90:03:25:bf: 25:ea:c4:6a:ea:8a:da:e5:04:92:c6:d3:5a:5f:0b:69:2d:87: ba:82:03:d1:34:07:bf:36:7b:49:0b:37:86:00:0a:35:6d:0c: 68:47:1c:ab:b3:00:6a:0c:93:1e:a5:ca:36:58:fb:99:c0:36: c0:42:6c:73:70:8a:1a:ec:5f:6c:00:0d:f2:05:c1:21:e6:0d: 64:0c:9c:09 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICPIIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzI2NTFaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjlFOUIzQUYxMTAvBgNVBAUTKEY1NzRCMTZCQTg2QUQ5NkUwMERFREFD RDYzNDFGOUE4MjRFQTQ3QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4zkZBQNkUfdz4TlZS67P8MQtLrOFCOetGh2FbK54tdtD2QIbOuo2+yNE0Q4OQ G1je7UsX5/CAA260Wp3jKGPYJsX6OrhiItHubnj89ZrlzcurPT1jEQi0BX/OcytB pE2xM1U7nOnp26GdG+1nxKAAYv3iiVuuYM/9oOvWF1Ut8qyzvu7Upx4bVfn++kid BtJEDgs+WxP21J41GSPT59tLbFBbu068+7T94IbTeQtzzIXiJ2Iwuzle+n9SbQxg vTiNsdOkaFhsLnh4CwwSanSy4xpHAPMAo5Xm6sZ+S9mTIWIgAukDIZfcaekibKc7 E3/aVWuw1kLUyxvgVEQO1EDlAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU9XSxa6hq 2W4A3trNY0H5qCTqR6cwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5RTlCMy9FRTQwQTU4QTU1OEMx MUVGQUZDQ0ZCQTA3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2OUU5QjMvRUU0MEE1OEE1NThDMTFFRkFGQ0NGQkEwNzYyRTk1MUEvOVhTeGE2 aHEyVzRBM3RyTlkwSDVxQ1RxUjZjLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBwAwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJmzmgDBAJm0DAwDQQC AAIwBwMFACwPVMAwDQYJKoZIhvcNAQELBQADggEBAIxVUVCzrQ3TOKOzNMeqRv9O msKTKXElyRZ7LP4267OeHD8K6nlJ5aDER89gUtIE5dQ1S2JXJ5WFnqxLJpjwUIN7 jQXb05gcCqILJ2msVZMAmthpNhtsPUe3vHY1lOFh7pchj9cOqK+yeknKpV0QsHu1 VNOzBmnyHh+O5hv6W7zECQZpABwZQLQpkVn1ZXF8P427FFrM6Ho0sMowbvogAy/B cEuYaSOa9ajXKTXeVfTBkAMlvyXqxGrqitrlBJLG01pfC2kth7qCA9E0B782e0kL N4YACjVtDGhHHKuzAGoMkx6lyjZY+5nANsBCbHNwihrsX2wADfIFwSHmDWQMnAk= -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:38 2026 by rpki-client