This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
File:                     5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (raw, json)
Hash identifier:          nkYQLFEms18aXVHheCfHd/hM6smDyW/5caP1l97myOw=
Subject key identifier:   E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10F6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:52:58 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 62.173.32.0/19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4342 (0x10f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:52:58 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36CC8EBRI, serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:bd:cf:bf:05:da:f0:41:18:c5:d7:4c:0d:
                    1f:95:2b:74:a3:32:be:3f:ee:72:e1:6f:af:81:9f:
                    22:30:67:b9:77:7e:1c:cf:35:af:63:75:fa:41:c9:
                    66:8c:4f:f9:b0:dc:04:e6:e2:02:c4:1d:e5:7d:68:
                    30:fb:c8:e7:28:da:9f:34:f7:4a:52:b9:6e:90:f6:
                    04:9e:02:1e:e5:29:5c:c1:17:91:dc:e5:1d:c4:72:
                    41:38:6d:15:00:90:bd:bc:3a:9e:aa:11:90:31:09:
                    f4:0f:18:1a:27:87:70:f9:7a:c2:ff:ae:f7:5c:01:
                    d4:24:bf:ef:1a:71:57:55:54:53:25:da:e5:fe:67:
                    45:d3:e5:3b:c9:ab:48:e9:3f:35:31:18:a0:0c:20:
                    d0:10:aa:88:9b:49:06:f8:77:0b:ed:eb:7a:11:c4:
                    97:39:53:21:b4:95:6d:83:aa:43:ba:22:f5:1b:04:
                    2f:da:b9:3c:11:d1:31:84:78:1c:8e:e6:88:78:74:
                    c9:a2:cc:32:dd:2b:f0:be:60:9b:cd:df:57:6f:b4:
                    4d:97:58:7c:eb:a3:ba:d7:1b:18:5d:97:1c:09:b4:
                    26:c5:b3:f3:bf:8c:98:7a:05:73:30:a5:f6:5b:8e:
                    e2:8e:1d:f5:84:4e:d0:30:25:08:6f:e6:7e:01:04:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.173.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:31:99:c5:f4:87:fb:eb:0f:75:31:7e:93:0d:1f:6e:b2:
         89:7a:96:13:d9:a1:eb:6d:c3:58:c4:07:2a:56:ef:ca:00:ba:
         cd:1d:97:88:8a:ea:55:1a:66:89:d7:be:6f:41:55:db:ba:f1:
         fc:67:29:ec:e4:fe:3d:32:88:a7:52:82:36:ab:ab:13:dd:07:
         47:67:c5:e5:d1:6f:3f:e5:98:36:a4:e4:a7:26:15:b6:4c:5d:
         c8:94:93:84:37:13:d0:92:c1:f5:de:d9:df:81:a1:65:50:27:
         d4:01:a7:c3:ef:27:76:d3:77:ba:b0:03:d6:2a:29:eb:06:a8:
         f8:36:33:b7:e6:16:5d:72:1a:8d:d3:b4:33:27:e4:e0:8d:43:
         e6:2d:36:42:23:36:03:d4:ab:05:4b:73:27:c7:ff:31:51:24:
         c0:17:53:ff:ad:b1:74:c0:8d:73:77:94:31:31:ff:85:f9:6d:
         c5:71:c0:1a:0f:d8:17:a3:c2:3b:8a:15:6f:50:1e:72:68:b5:
         54:83:86:b6:09:95:44:cf:40:c8:50:0e:32:d8:1e:69:ea:60:
         a7:c0:e4:9c:79:18:ad:64:b0:88:b7:fa:7c:b1:b1:a7:c9:de:
         9b:78:80:2e:e1:5f:a4:e5:b0:cf:e0:a5:0c:6e:0f:f1:98:fa:
         b9:0c:4e:c2
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICEPYwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDUyNThaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkNDOEVCUkkxMTAvBgNVBAUTKEU2OTBGQjY1NkI4RDdEMEYw
RjY3NkQ5RDEyN0EzMkRGOEQzQTZEODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQChcb3PvwXa8EEYxddMDR+VK3SjMr4/7nLhb6+BnyIwZ7l3fhzPNa9j
dfpByWaMT/mw3ATm4gLEHeV9aDD7yOco2p8090pSuW6Q9gSeAh7lKVzBF5Hc5R3E
ckE4bRUAkL28Op6qEZAxCfQPGBonh3D5esL/rvdcAdQkv+8acVdVVFMl2uX+Z0XT
5TvJq0jpPzUxGKAMINAQqoibSQb4dwvt63oRxJc5UyG0lW2DqkO6IvUbBC/auTwR
0TGEeByO5oh4dMmizDLdK/C+YJvN31dvtE2XWHzro7rXGxhdlxwJtCbFs/O/jJh6
BXMwpfZbjuKOHfWETtAwJQhv5n4BBNe/AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
5pD7ZWuNfQ8PZ22dEnoy3406bYUwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkNDOEVCL0NENDBC
MUVBQjBFRDExRUNBNDgzMTg4MjVBNDBENTc3LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZDQzhFQi9DRDQwQjFFQUIwRUQxMUVDQTQ4MzE4ODI1QTQwRDU3
Ny81cEQ3Wld1TmZROFBaMjJkRW5veTM0MDZiWVUubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQFPq0gMA0GCSqGSIb3DQEBCwUAA4IBAQBETDGZxfSH++sP
dTF+kw0fbrKJepYT2aHrbcNYxAcqVu/KALrNHZeIiupVGmaJ175vQVXbuvH8Zyns
5P49MoinUoI2q6sT3QdHZ8Xl0W8/5Zg2pOSnJhW2TF3IlJOENxPQksH13tnfgaFl
UCfUAafD7yd203e6sAPWKinrBqj4NjO35hZdchqN07QzJ+TgjUPmLTZCIzYD1KsF
S3Mnx/8xUSTAF1P/rbF0wI1zd5QxMf+F+W3FccAaD9gXo8I7ihVvUB5yaLVUg4a2
CZVEz0DIUA4y2B5p6mCnwOSceRitZLCIt/p8sbGnyd6beIAu4V+k5bDP4KUMbg/x
mPq5DE7C
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:39:40 2026 by rpki-client