This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer File: XugMfoiMcbMQJBh4C9bhClLRcIg.cer (raw, json) Hash identifier: U4N1oXZ0NTgbkR0+OmVjEPEvGTonDXTMjrBfzmwPaaU= Subject key identifier: 5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 389A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:58:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328974 IP: 102.206.84.0/22 IP: 102.217.228.0/22 IP: 2c0f:5f00::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 08 Feb 2026 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14490 (0x389a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 00:58:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36364C2AF, serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:0c:c5:1d:c2:d4:0d:3c:4d:24:47:f2:be: a8:12:97:6d:f5:67:f9:9e:15:53:86:66:85:9e:5d: 5a:e2:98:bb:61:b3:35:2a:91:2a:38:82:d1:cb:0f: a3:af:2f:c0:28:29:75:9d:ea:09:15:46:ce:be:72: cf:81:b2:29:30:08:4d:6d:3d:cd:c0:05:46:eb:ed: da:36:bd:ad:1e:71:ce:00:87:ec:cf:58:59:bc:14: 39:db:ea:c2:c5:fe:04:73:08:26:68:2d:56:ff:37: 82:bc:69:08:ef:63:d8:ff:eb:4b:bd:43:bf:6c:47: 1e:96:f0:0f:09:3c:91:3d:46:ae:da:70:14:37:9a: 5d:cd:aa:93:07:8c:28:98:ed:32:52:66:85:2b:2a: 14:31:f1:a0:bf:c4:9d:38:49:7e:12:98:b6:fc:96: 50:51:e7:03:22:f4:c5:8a:82:59:48:ba:e6:de:ba: 0e:07:e9:7e:2c:72:64:9a:27:a9:d2:e1:1e:15:13: 01:2b:06:8f:80:b8:9f:7d:3d:cb:06:a4:8f:30:f2: 1c:2f:50:eb:40:b1:8c:e1:b6:57:4f:a7:ab:f1:b8: 16:fa:f6:cd:f3:6f:84:b3:4a:8e:d0:9c:12:4e:62: 0f:f9:33:7b:e2:c0:3f:45:aa:37:60:d6:ed:a5:b0: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328974 sbgp-ipAddrBlock: critical IPv4: 102.206.84.0/22 102.217.228.0/22 IPv6: 2c0f:5f00::/32 Signature Algorithm: sha256WithRSAEncryption 62:2a:80:f5:96:c2:9f:43:0f:3e:6b:b2:8d:d6:da:64:ab:3c: 4b:63:13:4c:b5:c2:65:83:fd:3a:57:03:1b:e4:9b:71:e2:3f: ef:a5:e1:ee:7c:58:23:5e:38:a5:61:46:8b:9b:a3:70:c1:ae: 4c:89:9d:6b:30:39:a6:15:c6:a2:25:61:d9:74:32:97:1a:f6: 30:12:5d:6e:7d:df:80:fb:95:70:ca:05:e3:2a:55:0a:41:d0: 7a:77:d7:e9:c2:8c:79:4b:20:0d:7f:71:c2:f9:6d:74:50:d4: a3:23:0c:c2:f0:b4:69:45:34:5b:f2:8a:ea:60:6b:11:43:6f: 67:13:1c:68:b9:3e:89:f7:1b:af:23:48:4a:9a:9e:90:ae:d5: e5:44:9d:f3:0e:ad:30:e4:f6:8b:6d:e8:4e:a2:63:4b:e7:48: 84:1b:78:f9:0c:84:8a:02:47:d8:99:9b:11:a0:42:8f:d1:0a: e9:4c:50:10:a1:62:19:ba:3f:c8:c3:05:03:6a:6a:bc:30:c7: 0a:e0:3e:52:ae:88:9f:83:bd:b8:8b:65:7f:16:c5:f2:c0:fe: 07:22:11:9d:50:b4:69:1d:e7:22:e6:f6:da:b3:a2:f2:f4:db: fe:2c:fb:63:39:cd:74:cd:d1:47:98:db:3e:c8:62:e6:dd:a5: 4d:bf:5d:cb -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgICOJowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMDU4MjdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNjM2NEMyQUYxMTAvBgNVBAUTKDVFRTgwQzdFODg4QzcxQjMxMDI0MTg3 ODBCRDZFMTBBNTJEMTcwODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLNgzFHcLUDTxNJEfyvqgSl231Z/meFVOGZoWeXVrimLthszUqkSo4gtHLD6Ov L8AoKXWd6gkVRs6+cs+BsikwCE1tPc3ABUbr7do2va0ecc4Ah+zPWFm8FDnb6sLF /gRzCCZoLVb/N4K8aQjvY9j/60u9Q79sRx6W8A8JPJE9Rq7acBQ3ml3NqpMHjCiY 7TJSZoUrKhQx8aC/xJ04SX4SmLb8llBR5wMi9MWKgllIuubeug4H6X4scmSaJ6nS 4R4VEwErBo+AuJ99PcsGpI8w8hwvUOtAsYzhtldPp6vxuBb69s3zb4SzSo7QnBJO Yg/5M3viwD9Fqjdg1u2lsBGHAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUXugMfoiM cbMQJBh4C9bhClLRcIgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzNjRDMi82NDNCN0E1NEI1ODQx MUVDQjdDRkM3NzU1QTQwRDU3Ny8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MzY0QzIvNjQzQjdBNTRCNTg0MTFFQ0I3Q0ZDNzc1NUE0MEQ1NzcvWHVnTWZv aU1jYk1RSkJoNEM5YmhDbExSY0lnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFBQ4wNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJmzlQDBAJm2eQwDQQC AAIwBwMFACwPXwAwDQYJKoZIhvcNAQELBQADggEBAGIqgPWWwp9DDz5rso3W2mSr PEtjE0y1wmWD/TpXAxvkm3HiP++l4e58WCNeOKVhRoubo3DBrkyJnWswOaYVxqIl Ydl0Mpca9jASXW5934D7lXDKBeMqVQpB0Hp31+nCjHlLIA1/ccL5bXRQ1KMjDMLw tGlFNFvyiupgaxFDb2cTHGi5Pon3G68jSEqanpCu1eVEnfMOrTDk9ott6E6iY0vn SIQbePkMhIoCR9iZmxGgQo/RCulMUBChYhm6P8jDBQNqarwwxwrgPlKuiJ+DvbiL ZX8WxfLA/gciEZ1QtGkd5yLm9tqzovL02/4s+2M5zXTN0UeY2z7IYubdpU2/Xcs= -----END CERTIFICATE-----Generated at Fri Feb 6 22:47:57 2026 by rpki-client