This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer File: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (raw, json) Hash identifier: 1f9QrB5GLNacvyX7ryc+rmCF6Rqqj5DBunkE238OAWs= Subject key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5 Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 10C4 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:46:21 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 80.88.2.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 12 Jan 2026 00:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4292 (0x10c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Jan 1 00:46:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:b3:5c:ae:26:87:4d:d8:3a:58:ae:14:d9: 36:82:62:ca:18:ba:0d:e1:70:d6:82:f6:97:83:93: b5:d8:29:1c:50:6a:d9:d1:a1:22:9e:30:39:28:86: 45:f6:c5:59:ad:6e:1a:29:5e:22:c8:0e:77:64:77: 1f:94:df:f7:a2:ad:d1:8f:1a:30:3c:ea:1f:c4:f3: bb:1e:81:57:48:2a:00:7a:9c:8e:19:61:9b:5c:df: 72:62:5a:b6:bf:8a:ef:a3:08:bb:89:5f:69:9e:59: 0e:2a:92:65:6e:72:d1:58:d1:46:b6:ff:1e:3d:0c: 04:88:4b:9c:3f:89:13:a7:74:3c:03:f5:1a:e8:26: 97:f9:90:33:53:73:42:b1:d2:ce:d8:91:bd:50:1c: 14:68:99:b5:ed:f6:a1:4d:f4:65:de:45:f2:36:d9: 9a:d3:7f:77:51:3a:7b:9e:4f:a5:e2:57:68:17:e9: d4:08:40:ff:7f:d9:fa:a9:d4:7e:98:2d:2b:d7:08: 23:ee:99:27:3f:65:d3:4d:a2:fe:76:de:9e:8a:f8: 60:58:bb:c2:36:3b:a0:26:7d:31:c3:79:7c:75:f5: 5a:c2:82:4b:14:1a:21:fc:ae:34:9a:a6:6c:96:72: 16:d7:af:82:d1:91:4f:79:32:39:54:99:c8:51:60: 5b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5 X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft sbgp-ipAddrBlock: critical IPv4: 80.88.2.0/24 Signature Algorithm: sha256WithRSAEncryption 29:70:a2:55:c9:70:39:d1:6c:a8:08:92:3a:23:2d:ab:92:39: 4d:45:4c:eb:12:b5:e8:97:1e:1a:fc:b8:f1:fe:49:1f:bf:42: 84:83:44:a7:d6:0d:32:9b:81:e7:be:08:a2:b8:c9:87:63:5f: 03:49:93:37:e5:af:c1:62:84:d3:37:51:c5:d7:34:89:50:28: 0c:5b:92:b2:7e:f2:c5:1e:d7:d5:f0:8d:b5:10:64:21:ec:5d: 0b:d6:15:e1:ea:74:1e:a5:3b:24:d3:b9:ff:35:ae:27:16:ba: 83:f2:19:4a:f1:3d:7e:3c:d1:17:aa:c3:c5:c8:0e:ac:b4:42: 22:c8:01:cc:8c:de:d5:3b:2d:e6:f7:de:7f:25:4c:5f:f1:88: 58:e3:30:b5:95:e6:66:d7:da:68:93:2d:c5:ed:a3:d6:e9:4b: ee:c7:8a:80:45:78:8b:fc:d8:6b:f6:9d:0e:00:71:10:17:d2: ef:f8:f5:87:8e:60:c1:85:2b:6c:a5:1f:1b:17:c0:73:84:08: c2:30:ca:9d:d2:7c:28:65:00:73:17:0d:eb:b5:60:e4:e8:11: 81:d5:95:99:64:13:4f:16:57:90:08:13:e6:18:1f:fe:df:4c: f1:47:aa:e2:8c:70:26:bb:08:2c:8e:5f:60:3c:97:72:a5:15: 40:ab:2a:0b -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICEMQwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDQ2MjFaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjM5MEE5UkkxMTAvBgNVBAUTKEYwNkNDQzQ0RDUyQ0Y5QkUx MTVDRUM3QTREQTZCMTMwOUJBNDM5QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDVo7NcriaHTdg6WK4U2TaCYsoYug3hcNaC9peDk7XYKRxQatnRoSKe MDkohkX2xVmtbhopXiLIDndkdx+U3/eirdGPGjA86h/E87segVdIKgB6nI4ZYZtc 33JiWra/iu+jCLuJX2meWQ4qkmVuctFY0Ua2/x49DASIS5w/iROndDwD9RroJpf5 kDNTc0Kx0s7Ykb1QHBRombXt9qFN9GXeRfI22ZrTf3dROnueT6XiV2gX6dQIQP9/ 2fqp1H6YLSvXCCPumSc/ZdNNov523p6K+GBYu8I2O6AmfTHDeXx19VrCgksUGiH8 rjSapmyWchbXr4LRkU95MjlUmchRYFv5AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU 8GzMRNUs+b4RXOx6TaaxMJukOaUwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjM5MEE5LzFCM0E0 MjU0ODZFMjExRUZCNDY4NjA5Njc2MkU5NTFBLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzYzOTBBOS8xQjNBNDI1NDg2RTIxMUVGQjQ2ODYwOTY3NjJFOTUx QS84R3pNUk5Vcy1iNFJYT3g2VGFheE1KdWtPYVUubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAUFgCMA0GCSqGSIb3DQEBCwUAA4IBAQApcKJVyXA50Wyo CJI6Iy2rkjlNRUzrErXolx4a/Ljx/kkfv0KEg0Sn1g0ym4HnvgiiuMmHY18DSZM3 5a/BYoTTN1HF1zSJUCgMW5KyfvLFHtfV8I21EGQh7F0L1hXh6nQepTsk07n/Na4n FrqD8hlK8T1+PNEXqsPFyA6stEIiyAHMjN7VOy3m995/JUxf8YhY4zC1leZm19po ky3F7aPW6Uvux4qARXiL/Nhr9p0OAHEQF9Lv+PWHjmDBhStspR8bF8BzhAjCMMqd 0nwoZQBzFw3rtWDk6BGB1ZWZZBNPFleQCBPmGB/+30zxR6rijHAmuwgsjl9gPJdy pRVAqyoL -----END CERTIFICATE-----Generated at Sat Jan 10 03:57:21 2026 by rpki-client