This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer File: XulhNES2heRACvJQMvMjaKxzhgo.cer (raw, json) Hash identifier: 1qQ+QxgXCh4sbl1ub6sk92unsE50zX4iEGbfbLyIbAA= Subject key identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3F85 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Tue 13 Jan 2026 07:47:57 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 329693 IP: 102.203.137.0/24 IP: 2c0f:44a0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16261 (0x3f85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 13 07:47:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36EE763AF, serialNumber=5EE9613444B685E4400AF25032F32368AC73860A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:a5:cb:9f:67:ac:17:8c:1c:9e:56:fb:24: 0b:fb:a7:4e:9e:f3:b9:ce:76:f3:b2:9a:f2:5b:6e: c4:57:a1:74:37:a5:7b:f7:07:a0:3a:53:47:0c:76: d1:91:1b:ac:fc:46:7d:f0:10:7a:0c:16:81:f2:58: 64:72:e2:61:75:0a:6c:f1:ec:ef:16:3b:55:04:dd: 8a:cf:bb:b1:9c:7d:e4:bd:bc:96:15:c5:67:d1:74: e1:ce:cd:2f:8b:99:ce:0c:7b:e4:85:a7:35:ae:b2: 0b:2c:24:4a:5e:11:4f:68:fa:1c:77:9b:7d:ec:f7: 6e:5d:c0:df:6d:34:0c:9b:f3:8e:54:12:b9:f3:c5: bf:9c:2e:6c:36:bb:5a:e4:9e:a4:6a:56:7c:7d:37: 55:b8:bb:c3:07:02:10:d3:52:9d:d6:64:38:3d:6e: ae:56:54:dd:d9:3f:1a:2e:26:25:5c:c2:cf:98:0f: a5:fc:66:39:74:41:5e:b2:2d:a2:49:23:55:54:5b: 82:0a:a0:ee:83:50:1c:bf:78:a4:dc:46:70:bf:54: f1:a1:21:8f:5e:c9:63:42:7e:77:7e:11:42:ca:d3: cc:f7:8b:5f:f6:66:f4:d0:37:a3:a6:dc:10:ab:e9: 0d:b6:31:da:7f:ad:18:f8:53:5f:e4:3c:73:ba:fd: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 329693 sbgp-ipAddrBlock: critical IPv4: 102.203.137.0/24 IPv6: 2c0f:44a0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:9e:be:78:d0:f7:67:c5:6a:a9:9d:7e:07:e1:33:8d:22:fa: b3:f2:65:d6:53:16:eb:e4:b7:b3:7d:f6:f7:e1:d6:0a:38:2b: 90:71:4e:0b:e2:4e:d3:8b:cc:c4:bb:cc:4e:de:57:5a:87:d4: c7:ab:8c:73:84:5b:83:fc:8f:ce:e8:e3:23:88:c8:82:9e:2a: dd:5a:15:96:95:ab:51:76:3c:7f:cf:db:f3:e0:de:ed:6d:5b: e0:9c:09:93:6c:c5:81:61:27:bd:07:6b:87:48:8f:54:ed:f6: eb:5c:07:5c:89:f2:83:87:37:30:fa:22:51:af:ae:ec:98:b8: 57:7e:2d:ad:f0:ff:21:d3:cb:ca:7e:20:d0:3a:dc:01:d3:ff: 53:72:bf:a5:8f:ca:3f:82:3d:b1:e5:96:26:9e:94:5d:48:c1: 05:83:36:c8:17:d3:11:a5:72:48:a9:7d:29:98:9a:2a:71:46: 17:ab:ce:ec:6b:a1:21:cc:a1:17:c2:ae:18:1e:9f:15:56:4f: 0d:41:43:5e:4f:be:8e:56:24:58:b3:8b:44:9d:7d:8e:37:92: bb:b6:89:3e:77:eb:da:6c:c6:2e:50:f5:e2:de:19:60:87:52: ff:48:76:8d:59:c1:95:06:59:ac:22:dc:f3:01:04:97:ad:1e: bb:f5:94:18 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICP4UwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMTMwNzQ3NTdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkVFNzYzQUYxMTAvBgNVBAUTKDVFRTk2MTM0NDRCNjg1RTQ0MDBBRjI1 MDMyRjMyMzY4QUM3Mzg2MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFJqXLn2esF4wcnlb7JAv7p06e87nOdvOymvJbbsRXoXQ3pXv3B6A6U0cMdtGR G6z8Rn3wEHoMFoHyWGRy4mF1Cmzx7O8WO1UE3YrPu7GcfeS9vJYVxWfRdOHOzS+L mc4Me+SFpzWusgssJEpeEU9o+hx3m33s925dwN9tNAyb845UErnzxb+cLmw2u1rk nqRqVnx9N1W4u8MHAhDTUp3WZDg9bq5WVN3ZPxouJiVcws+YD6X8Zjl0QV6yLaJJ I1VUW4IKoO6DUBy/eKTcRnC/VPGhIY9eyWNCfnd+EULK08z3i1/2ZvTQN6Om3BCr 6Q22Mdp/rRj4U1/kPHO6/WDPAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUXulhNES2 heRACvJQMvMjaKxzhgowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFRTc2My8yODM1MjI2MkYwNTQx MUYwOTJCRTZFRENEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RUU3NjMvMjgzNTIyNjJGMDU0MTFGMDkyQkU2RURDREFFNEVDOUMvWHVsaE5F UzJoZVJBQ3ZKUU12TWphS3h6aGdvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFB90wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABmy4kwDQQCAAIwBwMF ACwPRKAwDQYJKoZIhvcNAQELBQADggEBAJqevnjQ92fFaqmdfgfhM40i+rPyZdZT Fuvkt7N99vfh1go4K5BxTgviTtOLzMS7zE7eV1qH1MerjHOEW4P8j87o4yOIyIKe Kt1aFZaVq1F2PH/P2/Pg3u1tW+CcCZNsxYFhJ70Ha4dIj1Tt9utcB1yJ8oOHNzD6 IlGvruyYuFd+La3w/yHTy8p+INA63AHT/1Nyv6WPyj+CPbHlliaelF1IwQWDNsgX 0xGlckipfSmYmipxRherzuxroSHMoRfCrhgenxVWTw1BQ15Pvo5WJFizi0SdfY43 kru2iT5369psxi5Q9eLeGWCHUv9Ido1ZwZUGWawi3PMBBJetHrv1lBg= -----END CERTIFICATE-----Generated at Sun Jan 25 05:54:35 2026 by rpki-client