This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
File:                     mwftdzFoum4LC-Pl3LLPeB96yCo.cer (raw, json)
Hash identifier:          mwUHFb8IaRLlcLhhn/YB6d0ugbt/JKazY6dGaopzai0=
Subject key identifier:   9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10D0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:47:44 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 80.240.192.0/20
                          IP: 217.21.112.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4304 (0x10d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:47:44 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3668037RI, serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:cf:0b:1e:92:6d:e8:59:c4:b4:ef:43:f8:
                    10:ac:2f:43:fc:fc:95:b0:17:a6:3c:fd:71:89:77:
                    81:a8:36:b8:de:51:e6:05:85:3c:4b:b1:74:00:fb:
                    b1:40:03:d6:f2:1b:57:9f:37:cb:3e:4a:cb:c9:79:
                    3c:d6:e7:c2:5a:51:b4:ef:c0:b3:c4:c6:5a:70:df:
                    58:0b:b5:ab:a9:4c:21:00:0a:da:be:5e:02:65:2f:
                    db:b0:e7:93:73:85:4e:0b:04:73:4d:e3:9b:80:e9:
                    ab:b3:5c:a1:d9:1e:ac:50:c1:fd:7d:cd:05:3b:bb:
                    b9:e9:2c:56:e6:a3:c9:19:da:ec:18:ef:b9:d5:c9:
                    a6:b4:52:b6:e6:e1:fd:8c:14:b4:0b:9c:67:30:c1:
                    48:cc:42:6b:cc:00:1e:92:14:d2:4d:f4:7a:2a:0f:
                    c8:51:97:56:35:62:e3:c4:3e:86:31:11:93:f4:4d:
                    3b:f7:a0:1f:82:38:9e:f5:45:f6:00:28:84:34:83:
                    8e:e7:3e:7f:22:eb:df:4c:e6:5d:16:a4:cf:99:1e:
                    df:22:ee:94:ac:e2:6e:cf:eb:78:84:73:5a:06:cd:
                    86:43:d7:ae:85:3f:36:20:23:fd:47:99:72:01:f5:
                    e6:e0:b8:3f:95:6e:ba:98:36:eb:ad:b0:33:83:d6:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.240.192.0/20
                  217.21.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:d6:3f:e4:25:cd:d0:03:d0:bf:48:ba:51:bd:a1:9c:20:c0:
         3b:17:f4:ed:ce:5c:61:42:df:76:14:1d:07:d0:9c:27:db:33:
         8d:ff:68:fd:f5:28:d1:57:49:d0:f2:2a:df:6a:a2:a5:16:c2:
         b9:ab:9e:b8:79:30:30:67:76:77:6e:61:8b:2f:c9:9c:ed:97:
         a9:14:ba:a4:4b:fa:b4:86:c5:11:b4:a3:0a:55:9a:4e:72:07:
         bb:37:6c:34:fc:81:44:50:e4:7d:8e:76:1e:ca:e1:3d:a5:b1:
         cd:51:ed:f2:fc:52:0f:3f:65:9a:a8:91:7b:21:44:64:c1:ca:
         1f:30:13:05:9a:c6:59:b3:ce:de:f9:8b:21:ad:82:b6:b5:86:
         fd:7a:50:3e:71:e3:05:be:b4:9a:e3:07:88:56:1e:e0:5d:c3:
         b7:94:63:a5:ca:f2:e6:9d:7f:45:6b:17:a5:3e:72:a7:70:45:
         30:1b:c9:ad:c8:ed:c3:b3:16:ae:31:6f:df:67:fd:a0:0a:70:
         96:07:d3:60:b6:86:20:11:89:56:3d:47:84:2c:bf:a2:5d:04:
         ec:d9:9f:87:3d:f8:26:82:b2:5a:5d:93:15:62:65:67:36:1b:
         29:df:e4:08:dc:eb:ad:62:67:6d:2d:39:d9:50:0b:c9:78:b9:
         86:1c:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:14:43 2026 by rpki-client