This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
File:                     YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (raw, json)
Hash identifier:          P1aSzAVDH5tUU9whtzq2lgECjXLQtpROj+qfdFLtGSY=
Subject key identifier:   62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10FE
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:54:16 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 80.250.32.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4350 (0x10fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:54:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:c4:25:c0:5f:b9:97:54:2c:44:9a:5c:a2:
                    62:63:02:90:c3:ca:a8:86:b9:31:13:d5:d0:af:5c:
                    b6:78:76:d0:56:30:00:c6:d9:ce:c1:2c:e0:58:04:
                    8b:c3:14:5d:d3:e1:ed:bd:64:e8:7f:7f:33:cb:3a:
                    12:b6:fa:6c:fe:21:65:41:1e:ed:7f:c0:e0:28:ab:
                    0f:63:d3:9c:97:4c:45:11:05:53:93:15:94:97:81:
                    39:55:fc:7c:92:1b:d0:89:8f:6a:0b:a0:84:a9:76:
                    54:af:81:92:3c:91:ae:a4:8f:ca:3d:dc:5d:07:b2:
                    82:ec:36:c2:26:40:e5:78:81:25:0f:87:a9:f2:24:
                    3c:8d:1e:ba:4e:d2:db:b7:b8:64:b5:b1:c8:eb:6d:
                    0d:ba:b7:3a:12:93:eb:81:b5:3f:62:92:cd:9b:e6:
                    93:51:ff:0f:af:59:46:f2:6b:52:b9:65:c6:13:1c:
                    9a:6d:00:10:01:fe:42:00:bb:38:b1:44:fe:9d:36:
                    8a:77:9b:bf:41:88:e7:33:ac:0d:72:0b:8d:14:8d:
                    b5:11:39:75:9e:7a:97:af:f0:4f:01:23:7e:dd:be:
                    18:42:cf:49:ec:8d:d0:df:73:83:b8:17:39:49:7c:
                    a9:46:70:58:e1:1d:0b:0e:52:62:eb:56:c8:be:8d:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.250.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:db:e0:87:a3:0f:7e:ad:94:94:be:9d:37:dc:40:7b:69:61:
         b7:f8:68:0a:9f:a4:1b:94:c9:c9:ed:d8:21:a2:44:97:18:85:
         f8:69:4d:21:10:e1:87:e9:15:ef:44:6d:32:e2:59:0f:5a:2c:
         03:45:07:73:5d:62:1c:c4:79:55:0b:e5:b5:1d:33:65:6f:0a:
         89:64:28:9f:25:13:7b:b8:df:18:fa:dd:9a:ba:56:93:1a:71:
         f7:31:93:09:d7:5b:93:4b:93:1a:0d:c4:b0:b6:4a:51:09:dc:
         f1:89:6a:66:62:91:9e:b9:1b:31:d4:f5:c2:45:35:50:b9:fd:
         6a:28:20:24:62:57:60:aa:b6:85:ba:db:45:1b:ab:77:dc:bf:
         1f:c4:82:bf:2b:14:cb:8a:2c:43:dd:5c:34:34:9e:79:0b:68:
         c2:87:dd:5d:77:ce:ba:74:2b:68:fa:e4:88:a3:cf:20:01:11:
         3e:4d:01:e9:00:21:85:d4:7b:eb:fd:89:97:52:34:3a:e3:a6:
         1e:08:1c:40:96:f6:e3:31:38:35:65:de:e0:58:ba:fc:8b:d5:
         a2:16:ab:1c:01:da:1c:d9:04:99:97:60:90:d8:3a:e3:e4:83:
         ec:59:e1:8d:b8:ce:ff:1b:f7:95:f5:d9:ff:74:ea:82:b6:3e:
         48:46:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:59:44 2026 by rpki-client