This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer File: oHAxgIgisopRzqJ21BM9cIqlFO0.cer (raw, json) Hash identifier: lrGeA2aaokf1+03I4sIOyzSNIv0LR4anBlfCux+Uo30= Subject key identifier: A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 10AE Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Sun 21 Dec 2025 12:52:51 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 62.114.0.0/16 IP: 62.139.0.0/16 IP: 62.140.64.0/18 IP: 62.193.64.0/18 IP: 80.75.160.0 -- 80.75.183.255 IP: 84.36.0.0/16 IP: 84.233.0.0/17 IP: 194.79.96.0/19 IP: 213.152.64.0/19 IP: 213.154.32.0/19 IP: 217.52.0.0/14 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 23 Dec 2025 12:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4270 (0x10ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Dec 21 12:52:51 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F36CC4C5RI, serialNumber=A07031808822B28A51CEA276D4133D708AA514ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:75:9c:fb:f0:41:41:86:97:76:71:7e:08:a0: b6:b8:59:16:1d:43:d0:f9:69:2a:e8:9b:a2:0b:b3: fe:db:4e:16:b4:45:ac:ca:5e:b7:02:ea:54:3b:8e: d6:10:35:9a:43:9c:e0:e1:b8:3d:36:c9:26:e3:4c: 37:3d:e9:4a:5d:d1:a0:ff:57:47:0b:04:dc:82:b8: 3e:19:de:4f:df:33:bb:21:10:11:b2:21:dc:a3:3c: da:6e:75:53:eb:b8:c1:3a:5e:bd:42:d0:47:d5:00: e6:48:a7:c8:a6:5e:a6:a7:c5:0e:d2:4e:0f:0b:15: 0f:70:f7:e2:93:d5:84:7e:92:f6:a4:40:27:e0:d0: fe:e7:91:38:10:78:fe:f6:5f:32:2f:df:05:7a:7a: 06:f3:5c:f5:ae:55:18:21:e1:e5:3f:10:f3:09:b9: 24:b8:9f:44:f4:73:6d:75:ee:b8:25:c1:72:64:72: 18:31:e7:d9:61:a2:94:10:cc:78:74:14:ca:46:0e: cd:45:10:b0:32:4e:7e:3d:20:3c:d4:3e:0f:30:b4: fd:b4:cb:e0:92:b1:d6:7d:07:17:0f:cf:da:6d:70: b0:89:5c:24:9b:36:b8:c2:0b:81:b3:83:af:4b:d7: 84:54:f5:63:9f:e3:bd:f3:79:7e:94:db:49:f8:81: 8d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft sbgp-ipAddrBlock: critical IPv4: 62.114.0.0/16 62.139.0.0/16 62.140.64.0/18 62.193.64.0/18 80.75.160.0-80.75.183.255 84.36.0.0/16 84.233.0.0/17 194.79.96.0/19 213.152.64.0/19 213.154.32.0/19 217.52.0.0/14 Signature Algorithm: sha256WithRSAEncryption 33:5c:53:b7:59:b7:e9:1f:51:0d:66:9b:b7:22:81:55:43:56: a6:8a:d6:a5:86:07:6e:1a:84:ab:f8:91:b6:2c:63:0b:b0:19: e8:ec:53:df:43:fb:8e:05:68:df:ea:b8:67:a3:44:72:fb:7c: f1:05:09:9f:c9:fd:9d:6f:70:fa:e8:07:96:fd:01:f0:eb:7c: 74:73:2e:f0:4e:a2:df:67:ac:34:97:8e:20:8e:9c:3f:66:10: 28:06:b8:5a:a1:eb:b3:19:0d:6f:d2:58:c5:08:c7:42:d4:8e: 9b:2a:94:d2:3a:ca:24:eb:5b:bb:25:81:2a:56:73:67:d4:3d: 57:7e:ff:aa:54:ee:7e:28:ee:24:26:7e:b5:84:d3:12:75:f9: a1:36:3f:cc:a6:10:6c:fc:90:e6:35:7c:5a:08:b9:8c:cb:d3: df:cd:c7:93:9c:64:eb:cb:01:f5:a1:7f:ce:12:7c:8f:44:7b: aa:bb:af:55:70:3c:2b:a5:16:c6:2b:ec:3d:5c:cc:74:4d:04: 81:6a:b3:99:fd:6a:0d:15:bc:e0:84:65:61:6c:8f:51:80:92: ff:59:cc:5f:79:4e:99:f2:9b:2e:8a:58:9d:c5:14:7f:62:7b: 9e:34:4b:1c:3d:71:87:7a:7d:cc:e9:3c:5c:34:71:4a:18:10: 34:c6:51:4d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgICEK4wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNTEyMjExMjUyNTFaFw0yNjAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkNDNEM1UkkxMTAvBgNVBAUTKEEwNzAzMTgwODgyMkIyOEE1 MUNFQTI3NkQ0MTMzRDcwOEFBNTE0RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCbdZz78EFBhpd2cX4IoLa4WRYdQ9D5aSrom6ILs/7bTha0RazKXrcC 6lQ7jtYQNZpDnODhuD02ySbjTDc96Upd0aD/V0cLBNyCuD4Z3k/fM7shEBGyIdyj PNpudVPruME6Xr1C0EfVAOZIp8imXqanxQ7STg8LFQ9w9+KT1YR+kvakQCfg0P7n kTgQeP72XzIv3wV6egbzXPWuVRgh4eU/EPMJuSS4n0T0c2117rglwXJkchgx59lh opQQzHh0FMpGDs1FELAyTn49IDzUPg8wtP20y+CSsdZ9BxcPz9ptcLCJXCSbNrjC C4Gzg69L14RU9WOf473zeX6U20n4gY3zAgMBAAGjggMxMIIDLTAdBgNVHQ4EFgQU oHAxgIgisopRzqJ21BM9cIqlFO0wHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkNDNEM1L0YwQTg3 MkM2REU2QjExRjA5ODY5NDRFQURBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZDQzRDNS9GMEE4NzJDNkRFNkIxMUYwOTg2OTQ0RUFEQUU0RUM5 Qy9vSEF4Z0lnaXNvcFJ6cUoyMUJNOWNJcWxGTzAubWZ0MF8GCCsGAQUFBwEHAQH/ BFAwTjBMBAIAATBGAwMAPnIDAwA+iwMEBj6MQAMEBj7BQDAMAwQFUEugAwQDUEuw AwMAVCQDBAdU6QADBAXCT2ADBAXVmEADBAXVmiADAwLZNDANBgkqhkiG9w0BAQsF AAOCAQEAM1xTt1m36R9RDWabtyKBVUNWporWpYYHbhqEq/iRtixjC7AZ6OxT30P7 jgVo3+q4Z6NEcvt88QUJn8n9nW9w+ugHlv0B8Ot8dHMu8E6i32esNJeOII6cP2YQ KAa4WqHrsxkNb9JYxQjHQtSOmyqU0jrKJOtbuyWBKlZzZ9Q9V37/qlTufijuJCZ+ tYTTEnX5oTY/zKYQbPyQ5jV8Wgi5jMvT383Hk5xk68sB9aF/zhJ8j0R7qruvVXA8 K6UWxivsPVzMdE0EgWqzmf1qDRW84IRlYWyPUYCS/1nMX3lOmfKbLopYncUUf2J7 njRLHD1xh3p9zOk8XDRxShgQNMZRTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:30:17 2025 by rpki-client