This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer File: XriN9L-QidcEmh--gAXmIequhis.cer (raw, json) Hash identifier: lDee1qK+m8J9nvLSsQItHTSlJ+w5Q0dEUPzZOfk+DbI= Subject key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3B9F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:53:26 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328631 IP: 102.22.248.0/21 IP: 102.206.232.0/22 IP: 102.209.8.0/22 IP: 102.213.124.0/22 IP: 102.218.24.0/22 IP: 2c0f:e8a8::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 08 Feb 2026 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15263 (0x3b9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:53:26 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A2303AF, serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:c5:f0:45:cc:78:7d:2b:ef:91:59:aa:10: f5:d8:e3:ed:b0:2e:98:4d:38:36:83:a0:ca:fe:e1: 4f:22:cf:2b:91:f0:2e:c8:e3:7d:4b:f6:02:a0:ac: a6:8d:d1:7c:b3:7d:32:44:0d:23:89:9e:7c:b1:9f: db:7f:c2:86:ef:29:bd:e9:8d:c3:37:60:95:cb:37: 45:91:76:f9:cb:8f:a1:6f:55:f3:7a:19:68:d3:30: 66:4f:39:d1:6b:34:ca:f3:6d:11:83:64:91:f0:01: 54:04:1c:e2:e9:5f:8d:e6:5e:62:f6:c2:84:24:8f: 66:be:8f:7b:1f:0e:1d:30:7b:ee:14:b6:72:72:ce: 25:fa:58:f8:6a:d3:0a:79:86:22:f3:9b:88:cf:7a: 3a:b4:5b:8e:56:bb:55:1f:4a:25:c5:1c:46:cd:ca: 9d:c9:73:66:f6:84:69:c2:d4:92:7c:0d:4e:46:41: 37:af:2c:39:c1:dd:2a:e3:a0:ae:f3:42:67:3f:fa: 07:14:28:7d:97:92:45:c5:72:1f:fb:90:bb:44:82: 31:8f:1a:8b:1e:c0:34:7b:ef:f3:9c:a3:10:0a:ff: 3b:e4:2d:dd:52:48:92:98:2c:10:00:6c:6f:66:eb: db:9c:e3:ae:2b:b5:45:75:ab:be:fc:72:15:e4:93: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328631 sbgp-ipAddrBlock: critical IPv4: 102.22.248.0/21 102.206.232.0/22 102.209.8.0/22 102.213.124.0/22 102.218.24.0/22 IPv6: 2c0f:e8a8::/32 Signature Algorithm: sha256WithRSAEncryption 18:09:a7:d8:cb:3f:b4:24:c1:61:7d:c3:85:24:10:a7:b8:5e: 0a:c5:b4:2d:b6:2b:c1:e3:85:c2:39:bb:62:d5:83:ab:51:92: cc:9a:0e:49:43:07:fa:f5:f9:07:a0:66:b6:43:90:35:ac:0d: 3c:8e:f6:7a:6b:a8:64:2b:37:91:aa:72:f2:9e:3b:34:a4:11: e2:01:f1:8f:3a:67:1c:a9:10:64:d0:cd:85:2e:48:22:f3:11: 0a:96:0b:a3:5d:18:2a:a3:93:88:21:f1:b5:ae:1e:a8:7a:93: de:b3:a8:49:14:d9:62:17:91:d8:b6:71:13:bd:22:0f:c2:9b: e6:e4:87:03:4d:d8:27:9c:fe:85:6a:e8:51:81:b8:93:22:88: 42:9e:e6:26:6f:87:49:1e:4c:f4:a6:97:55:6f:53:f1:07:62: 54:02:b6:7e:63:cd:63:c1:b9:11:6e:1e:76:fc:31:87:05:69: 93:7b:8f:23:b2:41:75:77:51:29:91:7d:47:47:d1:a5:23:49: d9:65:88:66:05:c3:fe:17:4c:4e:bc:8c:7d:01:3b:9a:02:7c: b0:3e:43:a9:41:30:20:a8:65:d0:0c:b3:cd:98:35:ab:05:54: 1f:f5:53:64:2a:59:77:66:4c:2a:fc:70:e2:43:fe:0f:51:3d: de:88:50:19 -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgICO58wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjUzMjZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkEyMzAzQUYxMTAvBgNVBAUTKDVFQjg4REY0QkY5MDg5RDcwNDlBMUZC RTgwMDVFNjIxRUFBRTg2MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfn8XwRcx4fSvvkVmqEPXY4+2wLphNODaDoMr+4U8izyuR8C7I431L9gKgrKaN 0XyzfTJEDSOJnnyxn9t/wobvKb3pjcM3YJXLN0WRdvnLj6FvVfN6GWjTMGZPOdFr NMrzbRGDZJHwAVQEHOLpX43mXmL2woQkj2a+j3sfDh0we+4UtnJyziX6WPhq0wp5 hiLzm4jPejq0W45Wu1UfSiXFHEbNyp3Jc2b2hGnC1JJ8DU5GQTevLDnB3SrjoK7z Qmc/+gcUKH2XkkXFch/7kLtEgjGPGosewDR77/OcoxAK/zvkLd1SSJKYLBAAbG9m 69uc464rtUV1q778chXkkyZTAgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQUXriN9L+Q idcEmh++gAXmIequhiswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBMjMwMy82NTcxNUY3ODU5NDMx MUVBQjMwRjQyNjFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTIzMDMvNjU3MTVGNzg1OTQzMTFFQUIzMEY0MjYxRjhBRUEyMjgvWHJpTjlM LVFpZGNFbWgtLWdBWG1JZXF1aGlzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA7cwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBANmFvgDBAJmzugDBAJm 0QgDBAJm1XwDBAJm2hgwDQQCAAIwBwMFACwP6KgwDQYJKoZIhvcNAQELBQADggEB ABgJp9jLP7QkwWF9w4UkEKe4XgrFtC22K8HjhcI5u2LVg6tRksyaDklDB/r1+Qeg ZrZDkDWsDTyO9nprqGQrN5GqcvKeOzSkEeIB8Y86ZxypEGTQzYUuSCLzEQqWC6Nd GCqjk4gh8bWuHqh6k96zqEkU2WIXkdi2cRO9Ig/Cm+bkhwNN2Cec/oVq6FGBuJMi iEKe5iZvh0keTPSml1VvU/EHYlQCtn5jzWPBuRFuHnb8MYcFaZN7jyOyQXV3USmR fUdH0aUjSdlliGYFw/4XTE68jH0BO5oCfLA+Q6lBMCCoZdAMs82YNasFVB/1U2Qq WXdmTCr8cOJD/g9RPd6IUBk= -----END CERTIFICATE-----Generated at Fri Feb 6 22:46:29 2026 by rpki-client