This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer File: X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer (raw, json) Hash identifier: rkMPqVIa07PAPfCcrwYF52asp1H2mBVDRvtcr1zeJEI= Subject key identifier: 5F:D4:C6:0A:EC:0F:5B:27:6D:AA:B9:DB:69:11:76:65:89:D8:AA:24 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C2E Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:14:47 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37724 IP: 102.222.66.0/23 IP: 2001:43f8:1800::/40 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15406 (0x3c2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:14:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36DD1E2AF, serialNumber=5FD4C60AEC0F5B276DAAB9DB6911766589D8AA24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:af:22:85:5d:21:52:99:c2:54:b0:8e:73: c3:e6:c5:7c:e5:df:f4:ba:27:85:14:c3:40:09:98: dd:33:67:d7:1d:ce:ee:7e:e7:5c:ee:c2:99:a2:5c: 17:55:ec:c8:ad:bc:22:c4:f7:79:92:e9:f2:c8:e0: 0e:3b:45:82:ca:57:fa:35:55:9e:a0:8c:cc:9a:08: 9f:d6:15:f5:7f:47:fd:2b:2f:fa:79:d9:06:e2:71: 32:81:aa:c8:ea:d6:45:d1:19:e8:fa:3d:1b:45:25: 2c:ab:b5:2e:19:4f:36:4f:73:c7:9c:5a:0d:8d:fa: 85:29:0a:f3:3a:83:72:78:ab:bb:77:d8:6b:f0:4a: 9c:64:14:2e:a7:c7:1a:58:87:56:c9:e6:ee:82:d8: 3f:9d:d4:3e:12:47:0e:b6:b8:dc:59:77:69:57:f4: 87:de:29:31:5d:75:fa:6c:4d:76:f6:4d:bd:63:2f: e8:18:5b:60:88:8e:01:24:65:17:f4:03:62:3b:cb: 3e:5b:25:f8:3a:cf:1d:2b:56:98:fe:2a:19:3b:29: 97:60:75:6d:21:ce:12:2c:5a:ba:f4:24:03:04:2c: bb:7e:0d:c7:e4:f8:5a:46:39:dd:83:e9:ff:d4:15: 78:11:87:62:55:c6:c9:14:7d:42:72:34:e2:5d:6e: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D4:C6:0A:EC:0F:5B:27:6D:AA:B9:DB:69:11:76:65:89:D8:AA:24 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37724 sbgp-ipAddrBlock: critical IPv4: 102.222.66.0/23 IPv6: 2001:43f8:1800::/40 Signature Algorithm: sha256WithRSAEncryption 22:6c:83:ab:93:9c:9d:f5:f6:cc:72:a0:cb:f9:48:4b:7b:dc: a4:da:ea:fc:7e:3d:fc:82:87:cc:6b:0b:1c:5e:42:35:61:d4: 95:f3:fc:6a:cf:00:54:f2:d8:11:21:93:a2:74:09:79:0e:c5: d8:ad:ba:b8:60:de:34:2f:bd:32:b2:fc:af:7e:f0:7b:0e:84: 20:66:6e:b8:2e:eb:cc:1e:4a:5e:7e:ae:a3:0c:4d:64:b2:62: dd:7c:74:b3:3b:fb:dd:25:84:a5:cb:5c:46:23:04:94:26:8c: d5:11:7b:1a:ba:ef:18:44:91:d0:d0:3d:f8:e9:d4:13:76:fb: d4:4b:17:13:5e:f9:a5:ff:1f:e5:9b:4a:94:ed:ae:98:10:53: 74:a1:c0:61:45:26:10:69:c0:34:68:48:c6:b8:00:d7:cc:81: 3a:32:f7:94:32:ec:e7:4d:28:4a:d4:82:88:a1:91:d4:0b:93: ff:3e:b4:11:e7:43:06:77:24:d2:92:fd:fc:99:2a:22:35:b8: cb:27:d1:a0:7d:c3:03:b3:ce:12:41:6d:ee:6b:66:d9:82:87: cd:d5:a5:57:ed:05:18:7d:83:32:68:11:03:b0:a9:38:e0:92: 64:e8:c6:1c:86:6e:f8:c1:d6:4d:6e:c1:53:ad:6e:75:8b:10: 45:31:3f:e1 -----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgICPC4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzE0NDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkREMUUyQUYxMTAvBgNVBAUTKDVGRDRDNjBBRUMwRjVCMjc2REFBQjlE QjY5MTE3NjY1ODlEOEFBMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrq68ihV0hUpnCVLCOc8PmxXzl3/S6J4UUw0AJmN0zZ9cdzu5+51zuwpmiXBdV 7MitvCLE93mS6fLI4A47RYLKV/o1VZ6gjMyaCJ/WFfV/R/0rL/p52QbicTKBqsjq 1kXRGej6PRtFJSyrtS4ZTzZPc8ecWg2N+oUpCvM6g3J4q7t32GvwSpxkFC6nxxpY h1bJ5u6C2D+d1D4SRw62uNxZd2lX9IfeKTFddfpsTXb2Tb1jL+gYW2CIjgEkZRf0 A2I7yz5bJfg6zx0rVpj+Khk7KZdgdW0hzhIsWrr0JAMELLt+Dcfk+FpGOd2D6f/U FXgRh2JVxskUfUJyNOJdbvCpAgMBAAGjggMbMIIDFzAdBgNVHQ4EFgQUX9TGCuwP WydtqrnbaRF2ZYnYqiQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZERDFFMi81NEM5MTkyQUMwMjkx MUVBOTFDMzg3MEFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2REQxRTIvNTRDOTE5MkFDMDI5MTFFQTkxQzM4NzBBRjhBRUEyMjgvWDlUR0N1 d1BXeWR0cXJuYmFSRjJaWW5ZcWlRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAk1wwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBAFm3kIwDgQCAAIwCAMG ACABQ/gYMA0GCSqGSIb3DQEBCwUAA4IBAQAibIOrk5yd9fbMcqDL+UhLe9yk2ur8 fj38gofMawscXkI1YdSV8/xqzwBU8tgRIZOidAl5DsXYrbq4YN40L70ysvyvfvB7 DoQgZm64LuvMHkpefq6jDE1ksmLdfHSzO/vdJYSly1xGIwSUJozVEXsauu8YRJHQ 0D346dQTdvvUSxcTXvml/x/lm0qU7a6YEFN0ocBhRSYQacA0aEjGuADXzIE6MveU MuznTShK1IKIoZHUC5P/PrQR50MGdyTSkv38mSoiNbjLJ9GgfcMDs84SQW3ua2bZ gofN1aVX7QUYfYMyaBEDsKk44JJk6MYchm74wdZNbsFTrW51ixBFMT/h -----END CERTIFICATE-----Generated at Sun Jan 25 04:18:53 2026 by rpki-client