This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer File: ui_9XON8AcbtlPuVw1jXCimNyXQ.cer (raw, json) Hash identifier: mPKceqiPqgZYSC6bvqRmC2CH9sgw+Oun+UvoC4o7bxQ= Subject key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B13 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:33:23 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329371 IP: 102.209.144.0/22 IP: 2c0f:ac0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 11:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15123 (0x3b13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:33:23 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2f:7b:00:8d:de:40:b7:f9:a6:6c:8f:f8:3e: 84:e4:88:63:10:84:43:57:b7:8d:3f:da:24:33:71: 66:dd:04:1c:84:ac:5a:8c:fa:d0:9f:23:97:7c:0e: bc:d6:28:c0:1b:5a:e8:64:1c:e4:a1:49:db:bd:63: 2d:2a:ee:88:3a:00:5c:f9:f1:07:77:f1:59:38:7b: f4:8e:f9:fd:f2:b3:51:b0:70:50:98:05:9e:90:61: 8f:0f:62:74:d8:5f:44:07:55:ee:49:b4:92:02:dc: 9c:b2:9b:27:c5:09:29:3e:17:bb:60:45:df:6f:99: e1:fd:3c:70:ba:6b:e0:5f:40:ae:6d:fc:b8:52:ca: 85:04:38:06:fa:b2:9d:ec:5f:7c:e5:d6:85:75:69: 94:2b:ec:46:a5:1e:2c:f3:e2:3a:f2:5f:1c:6f:97: b4:ae:77:4f:fe:c9:86:74:38:8c:e3:02:ce:fa:1d: 7f:66:77:d5:4c:43:a0:7f:52:98:8d:51:a2:17:08: 62:66:45:7b:b4:8c:2c:64:12:07:30:81:35:d9:51: 18:a4:51:37:b4:10:c2:3f:e0:57:58:da:de:fc:e3: 23:f3:7e:31:60:92:44:39:f5:4e:8a:78:4a:4d:09: 9a:29:00:ea:82:d1:58:97:b0:9d:83:73:58:e8:8e: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329371 sbgp-ipAddrBlock: critical IPv4: 102.209.144.0/22 IPv6: 2c0f:ac0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:96:db:08:7c:ba:c9:5f:32:25:38:7e:57:7f:94:9f:9d:3c: 12:2f:8f:d4:8b:fd:41:f4:49:2c:9c:b4:b8:ec:b4:68:ed:4f: 66:07:97:50:67:5f:75:63:f7:f4:80:92:30:fe:fc:64:5e:75: 06:a6:85:27:06:46:e4:22:17:40:18:62:2a:fb:29:b8:d3:61: e3:fe:21:a2:c8:4d:f0:e9:c8:02:2f:c5:86:34:4e:fc:fb:70: 8d:9a:bf:fc:8c:fa:b5:24:5e:dc:0d:e9:1e:43:7e:4c:bf:6c: fb:15:c2:e8:30:96:99:d9:65:1b:02:b2:97:3d:95:be:b4:c2: 48:9d:25:0c:15:a3:db:b3:06:d2:0c:3c:2b:8f:3f:f2:65:33: f1:09:27:29:a2:01:c7:0f:5a:9a:52:1e:d5:d4:87:9b:27:59: 97:83:55:f0:68:0d:c9:48:04:1d:65:75:59:9b:3a:f7:9b:46: 92:99:5f:c5:c7:11:6b:c3:79:86:7e:5c:aa:2e:fc:eb:5b:9f: 60:23:87:50:8f:61:93:44:1d:0c:29:88:51:66:12:12:8a:19: 99:d4:f0:98:da:58:b0:d2:19:95:18:fc:7a:14:90:fe:0d:4e: 8d:91:0f:1d:75:58:ef:6a:2d:fd:f8:12:6d:46:b5:0d:d5:0d: 71:b3:70:9d -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICOxMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjMzMjNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjc5NjgwQUYxMTAvBgNVBAUTKEJBMkZGRDVDRTM3QzAxQzZFRDk0RkI5 NUMzNThENzBBMjk4REM5NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfL3sAjd5At/mmbI/4PoTkiGMQhENXt40/2iQzcWbdBByErFqM+tCfI5d8DrzW KMAbWuhkHOShSdu9Yy0q7og6AFz58Qd38Vk4e/SO+f3ys1GwcFCYBZ6QYY8PYnTY X0QHVe5JtJIC3JyymyfFCSk+F7tgRd9vmeH9PHC6a+BfQK5t/LhSyoUEOAb6sp3s X3zl1oV1aZQr7EalHizz4jryXxxvl7Sud0/+yYZ0OIzjAs76HX9md9VMQ6B/UpiN UaIXCGJmRXu0jCxkEgcwgTXZURikUTe0EMI/4FdY2t784yPzfjFgkkQ59U6KeEpN CZopAOqC0ViXsJ2Dc1jojqP1AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUui/9XON8 AcbtlPuVw1jXCimNyXQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3OTY4MC82NzEwMUY1MEUyOTEx MUVFQkM5QTcyNTg3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2Nzk2ODAvNjcxMDFGNTBFMjkxMTFFRUJDOUE3MjU4Nzc1NDEyRTYvdWlfOVhP TjhBY2J0bFB1VncxalhDaW1OeVhRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBpswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm0ZAwDQQCAAIwBwMF ACwPCsAwDQYJKoZIhvcNAQELBQADggEBACyW2wh8uslfMiU4fld/lJ+dPBIvj9SL /UH0SSyctLjstGjtT2YHl1BnX3Vj9/SAkjD+/GRedQamhScGRuQiF0AYYir7KbjT YeP+IaLITfDpyAIvxYY0Tvz7cI2av/yM+rUkXtwN6R5Dfky/bPsVwugwlpnZZRsC spc9lb60wkidJQwVo9uzBtIMPCuPP/JlM/EJJymiAccPWppSHtXUh5snWZeDVfBo DclIBB1ldVmbOvebRpKZX8XHEWvDeYZ+XKou/Otbn2Ajh1CPYZNEHQwpiFFmEhKK GZnU8JjaWLDSGZUY/HoUkP4NTo2RDx11WO9qLf34Em1GtQ3VDXGzcJ0= -----END CERTIFICATE-----Generated at Mon Jan 12 16:00:25 2026 by rpki-client