This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer File: XKOJ-4BR0kErpd-AHYmyys5XJZw.cer (raw, json) Hash identifier: EpQZsFckm6uzXMgMNzkdA7ikT0cj2CEzfgDLfkKav2Q= Subject key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3A3A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:02:58 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328073 IP: 102.218.196.0/22 IP: 2c0f:6d80::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 13 Jan 2026 00:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14906 (0x3a3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:02:58 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:54:63:0c:f6:76:61:49:83:b4:6d:5c:cc:81: 2d:b3:0d:c6:54:d2:ad:5a:c3:ee:69:9e:0d:cc:26: 68:d7:a0:b3:71:48:ad:9b:d9:fb:a8:01:d5:5d:2d: f1:41:47:46:d6:da:21:cd:ef:94:85:a5:2b:32:cf: cf:12:2e:26:67:66:e5:90:b6:a6:6c:8d:47:17:45: c5:3a:47:ad:5e:e1:34:24:61:81:7a:99:f7:55:a4: 12:5e:19:c3:5d:64:bb:6d:a8:d1:6f:90:db:0c:f0: ba:00:57:af:4f:68:0a:8b:24:3e:09:3f:9d:fa:44: 3d:e4:7a:fc:e5:de:a9:ca:4c:72:d9:67:a7:f3:4c: 49:eb:96:06:2f:89:f6:c5:86:71:4e:46:e2:d4:a7: a5:ca:e3:bd:0b:ec:04:2a:d7:f8:1d:6d:54:db:8e: 43:05:91:ad:70:d9:67:1c:be:7d:ce:69:67:18:13: 3f:b2:d7:01:0d:9b:5e:03:90:6b:6a:46:e4:b9:a3: 59:ae:fd:ac:9f:ae:3a:b1:29:68:39:22:a1:82:73: 84:f5:78:03:57:fb:02:72:9e:88:af:0a:d0:88:93: 18:29:e8:19:9c:f2:f2:18:5b:34:c7:58:30:33:bf: 75:68:d7:af:fb:9b:54:fd:ff:db:17:fd:f4:94:91: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328073 sbgp-ipAddrBlock: critical IPv4: 102.218.196.0/22 IPv6: 2c0f:6d80::/32 Signature Algorithm: sha256WithRSAEncryption 2c:41:99:1f:c9:5d:ce:c6:a7:45:4f:d7:27:ee:5d:02:ed:67: a3:3b:ee:a1:51:4c:50:12:a3:7e:3f:aa:ed:15:42:97:4d:b5: f7:66:74:e9:8e:c5:1d:bd:2f:0a:95:68:9b:3e:c9:47:78:28: cc:ff:60:f8:d2:09:9c:72:72:2c:b3:69:df:cb:c0:4a:c0:d0: b7:6b:65:86:f1:f8:18:5f:cd:72:60:b2:a4:1b:01:c3:4b:35: 31:5c:73:8f:7b:1b:49:c0:03:af:4b:fb:2f:7e:b5:98:87:39: 07:aa:eb:0b:14:f3:6a:c5:48:7d:72:63:fc:f6:94:6a:f0:95: 1f:dc:13:eb:a3:b7:1c:94:6c:72:90:d2:1b:69:36:5f:2c:58: d9:cf:72:6a:3f:9a:28:be:57:d7:66:af:9f:d7:3d:90:59:8c: 8e:6d:7d:7e:48:b0:81:4b:a9:88:d2:28:b9:a4:78:0f:7b:92: 42:9f:35:1e:c6:0c:ea:af:29:d2:60:2d:9c:dc:2b:3c:94:ea: 86:77:fc:55:b6:79:1a:d7:83:e5:23:bf:13:71:3b:ba:bf:bc: 64:06:3b:7e:c4:ea:95:3b:8b:7d:d9:fc:ba:65:a0:6e:70:4e: d3:b0:f1:69:18:c9:ca:c1:c3:bd:d3:ee:86:00:93:b5:41:5e: 3b:20:5c:c0 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOjowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjAyNThaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjYyREFCQUYxMTAvBgNVBAUTKDVDQTM4OUZCODA1MUQyNDEyQkE1REY4 MDFEODlCMkNBQ0U1NzI1OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzVGMM9nZhSYO0bVzMgS2zDcZU0q1aw+5png3MJmjXoLNxSK2b2fuoAdVdLfFB R0bW2iHN75SFpSsyz88SLiZnZuWQtqZsjUcXRcU6R61e4TQkYYF6mfdVpBJeGcNd ZLttqNFvkNsM8LoAV69PaAqLJD4JP536RD3kevzl3qnKTHLZZ6fzTEnrlgYvifbF hnFORuLUp6XK470L7AQq1/gdbVTbjkMFka1w2Wccvn3OaWcYEz+y1wENm14DkGtq RuS5o1mu/ayfrjqxKWg5IqGCc4T1eANX+wJynoivCtCIkxgp6Bmc8vIYWzTHWDAz v3Vo16/7m1T9/9sX/fSUkfwJAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUXKOJ+4BR 0kErpd+AHYmyys5XJZwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2MkRBQi8wNDhGODgxMDhGMzIx MUVEQjBFRUYxQjdGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2NjJEQUIvMDQ4Rjg4MTA4RjMyMTFFREIwRUVGMUI3RjEyMjI0NjgvWEtPSi00 QlIwa0VycGQtQUhZbXl5czVYSlp3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFAYkwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2sQwDQQCAAIwBwMF ACwPbYAwDQYJKoZIhvcNAQELBQADggEBACxBmR/JXc7Gp0VP1yfuXQLtZ6M77qFR TFASo34/qu0VQpdNtfdmdOmOxR29LwqVaJs+yUd4KMz/YPjSCZxyciyzad/LwErA 0LdrZYbx+BhfzXJgsqQbAcNLNTFcc497G0nAA69L+y9+tZiHOQeq6wsU82rFSH1y Y/z2lGrwlR/cE+ujtxyUbHKQ0htpNl8sWNnPcmo/mii+V9dmr5/XPZBZjI5tfX5I sIFLqYjSKLmkeA97kkKfNR7GDOqvKdJgLZzcKzyU6oZ3/FW2eRrXg+UjvxNxO7q/ vGQGO37E6pU7i33Z/LploG5wTtOw8WkYycrBw73T7oYAk7VBXjsgXMA= -----END CERTIFICATE-----Generated at Mon Jan 12 01:47:28 2026 by rpki-client