This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer File: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (raw, json) Hash identifier: 7P3OQMXmFsOa8WIMclWcCqGJQ7rr260vhG2nME8veoM= Subject key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65 Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 10E8 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:50:58 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 81.10.0.0/17 IP: 212.103.160.0/19 IP: 213.158.160.0/19 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 00:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4328 (0x10e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Jan 1 00:50:58 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:41:8d:0c:76:59:78:4f:09:58:c0:d3:b8:f3: 10:ec:94:9d:ac:87:1b:2e:4c:09:01:68:d0:0a:86: 34:22:90:10:cd:19:75:72:a5:51:00:07:a9:ec:b3: 93:19:da:a0:70:9d:5e:f3:b8:2c:43:ed:a8:eb:cc: 56:49:69:cf:ba:1b:c3:86:4a:f5:e9:5c:a0:68:ae: 42:98:06:46:00:61:5c:82:a6:fc:44:f6:79:74:c2: 2f:f5:64:80:74:47:48:24:78:8f:3e:7d:be:d1:37: 9c:9d:7d:e1:7e:15:f8:c6:09:c9:aa:ce:c8:49:64: fd:d8:18:74:46:2f:3e:21:3c:05:14:d9:98:99:de: 79:18:0d:94:ff:d4:84:1c:f9:4e:f7:c1:b7:87:bd: de:aa:4d:2e:6e:a0:9c:b0:a4:e0:b5:57:16:c5:56: 9c:e0:41:b9:2a:5a:e7:c2:fd:32:83:66:f5:3b:ac: a5:1c:d8:8e:73:40:67:e6:2b:a2:b8:d1:9d:cf:34: a8:c3:0b:e7:7c:b3:cd:27:8d:f1:7d:8f:ea:57:c4: 84:06:b0:35:93:27:61:d6:a2:d2:3f:77:cc:78:a4: 02:83:f5:53:b0:d4:35:56:e7:7b:8e:1f:fd:7f:18: 3d:b8:30:6a:85:76:25:d1:f7:86:4e:49:3e:1c:98: 92:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65 X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft sbgp-ipAddrBlock: critical IPv4: 81.10.0.0/17 212.103.160.0/19 213.158.160.0/19 Signature Algorithm: sha256WithRSAEncryption 39:30:07:7b:cc:59:7d:e3:7f:58:08:01:e7:47:e3:71:52:2d: 77:fa:c3:a3:22:04:31:c7:e8:c3:e1:e0:dc:4b:f5:31:82:d5: 6c:3e:a5:94:00:6e:66:5d:d3:c5:e2:6d:b9:a9:15:99:da:ab: 2d:46:f9:3b:de:d4:ae:38:db:cb:c1:df:fb:37:26:fc:92:60: 61:40:5b:34:9f:ae:7f:8f:85:25:4b:61:b3:bc:7f:67:29:dc: e2:f6:f4:09:31:3e:19:4b:d9:cc:a9:cc:cf:df:59:f4:81:b8: bf:0a:92:d4:56:24:15:f8:1e:fd:41:2e:d9:cc:50:e8:6d:e6: ce:03:1e:cc:46:fb:22:ec:ae:2f:7d:a9:18:00:38:84:47:45: 80:4a:99:33:25:23:20:27:0a:d2:fa:99:03:bd:6c:86:fb:0b: ec:2c:01:10:b0:75:8a:76:f8:88:7a:ea:58:d6:db:c6:2e:a1: b6:f9:82:11:a3:67:cb:20:27:3c:74:74:15:42:2c:8c:92:dd: 05:5b:79:dd:db:50:3f:32:34:fb:18:41:0f:27:6e:51:8e:0c: e9:66:07:68:0f:7b:98:69:04:d5:71:0c:fd:58:12:f8:09:f7: 06:35:19:f7:91:2d:d1:fc:2c:cf:d6:83:e8:73:60:41:28:fb: c1:49:62:7e -----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgICEOgwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDUwNThaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkI0OUZBUkkxMTAvBgNVBAUTKDI5QzBEREUyNDMwNUYyMEU0 RTVBRDBCQkZEQzAwRkYxNzQ4Q0E2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDXQY0Mdll4TwlYwNO48xDslJ2shxsuTAkBaNAKhjQikBDNGXVypVEA B6nss5MZ2qBwnV7zuCxD7ajrzFZJac+6G8OGSvXpXKBorkKYBkYAYVyCpvxE9nl0 wi/1ZIB0R0gkeI8+fb7RN5ydfeF+FfjGCcmqzshJZP3YGHRGLz4hPAUU2ZiZ3nkY DZT/1IQc+U73wbeHvd6qTS5uoJywpOC1VxbFVpzgQbkqWufC/TKDZvU7rKUc2I5z QGfmK6K40Z3PNKjDC+d8s80njfF9j+pXxIQGsDWTJ2HWotI/d8x4pAKD9VOw1DVW 53uOH/1/GD24MGqFdiXR94ZOST4cmJJbAgMBAAGjggL9MIIC+TAdBgNVHQ4EFgQU KcDd4kMF8g5OWtC7/cAP8XSMpmUwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkI0OUZBLzhFOTcy RUNDMUMxQzExRTY5OUVBNDUwQ0Y4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZCNDlGQS84RTk3MkVDQzFDMUMxMUU2OTlFQTQ1MENGOEFFQTIy OC9LY0RkNGtNRjhnNU9XdEM3X2NBUDhYU01wbVUubWZ0MCsGCCsGAQUFBwEHAQH/ BBwwGjAYBAIAATASAwQHUQoAAwQF1GegAwQF1Z6gMA0GCSqGSIb3DQEBCwUAA4IB AQA5MAd7zFl9439YCAHnR+NxUi13+sOjIgQxx+jD4eDcS/UxgtVsPqWUAG5mXdPF 4m25qRWZ2qstRvk73tSuONvLwd/7Nyb8kmBhQFs0n65/j4UlS2GzvH9nKdzi9vQJ MT4ZS9nMqczP31n0gbi/CpLUViQV+B79QS7ZzFDobebOAx7MRvsi7K4vfakYADiE R0WASpkzJSMgJwrS+pkDvWyG+wvsLAEQsHWKdviIeupY1tvGLqG2+YIRo2fLICc8 dHQVQiyMkt0FW3nd21A/MjT7GEEPJ25RjgzpZgdoD3uYaQTVcQz9WBL4CfcGNRn3 kS3R/CzP1oPoc2BBKPvBSWJ+ -----END CERTIFICATE-----Generated at Mon Jan 12 07:14:44 2026 by rpki-client