This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer File: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (raw, json) Hash identifier: gIOVAzJrB5GBBiknNN57bD8vKs+P+elCD7kOXrr9P7s= Subject key identifier: A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70 Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 10CC Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:47:19 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 80.88.11.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 00:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4300 (0x10cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Jan 1 00:47:19 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F365C895RI, serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:26:64:88:f1:16:16:3f:ee:a6:1e:d8:3e:7c: c7:d9:cb:27:5c:47:44:19:70:15:a3:67:b1:da:3d: a9:7b:19:72:2c:22:a7:0b:cf:a8:43:a6:f9:20:6e: a2:36:13:bf:f7:4a:47:3e:7b:3a:10:60:c4:f8:da: dd:64:17:93:02:8f:82:dd:ee:e2:d8:62:d7:bc:9a: 68:c4:10:5a:9c:b8:8c:49:16:27:f7:f2:c6:60:d5: ff:ae:dc:a5:92:95:3b:3d:57:db:71:a6:99:7b:5b: 72:d3:52:57:89:c1:5a:20:36:6e:0b:bc:c9:c8:b0: a2:8a:b8:26:59:af:14:d9:0b:d2:f9:e0:51:f8:bd: 3a:28:93:bd:df:47:98:25:d7:1e:3c:f3:97:54:10: 7e:40:cc:6a:13:f1:33:9f:01:d6:ee:f5:65:b4:fb: 92:46:24:bf:9d:83:e9:3d:5e:6c:20:63:5a:e6:02: c2:67:91:31:00:b1:c7:58:a0:fa:48:3d:5b:8b:d5: af:cc:dd:91:8a:f3:09:29:3f:2b:84:d8:60:48:06: d0:80:7e:9f:f4:3e:1b:3e:f5:ac:91:f9:48:78:be: a2:ab:86:01:d4:7f:58:43:c9:36:7e:7e:bb:1d:0a: 87:56:99:9c:01:b2:b9:33:57:05:8a:39:a6:12:d3: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70 X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft sbgp-ipAddrBlock: critical IPv4: 80.88.11.0/24 Signature Algorithm: sha256WithRSAEncryption a5:64:93:ba:e1:4b:52:5c:c8:c3:cd:4d:65:8a:3a:00:b4:2c: 23:de:f9:cf:d5:49:71:75:fb:88:95:76:f7:a4:f4:7a:9e:97: 62:86:e0:e1:b8:e0:8b:f9:3a:68:01:73:30:f2:a6:4f:25:29: 02:7c:b0:42:46:43:9e:19:70:7b:aa:76:bd:1c:44:a6:e4:9b: 81:b3:11:88:83:69:b9:f7:a2:f0:0b:d0:6b:5a:7b:0c:c8:57: 7d:bc:97:91:2b:2b:4d:59:c3:1e:46:36:b1:08:33:e1:9c:3d: cd:86:6d:8c:3d:30:ac:4d:31:fb:5b:aa:b7:fc:58:63:97:81: 3e:1b:9f:ad:c1:85:04:99:91:f5:b8:ab:f3:4c:d0:e5:a5:68: d9:59:d5:fb:a1:a4:c6:d0:1e:77:b6:62:a4:b8:a7:fa:7b:20: 3d:4f:2d:4c:75:22:5f:5f:8e:6d:e8:63:cd:8b:29:a5:b8:e0: da:97:df:c0:17:59:da:d9:b8:db:8d:0f:7d:66:2a:2a:e4:79: b3:df:e5:49:dc:2d:0b:74:71:16:a9:7a:be:64:b5:8e:cb:5d: 3e:9e:3c:00:a7:c2:03:49:d5:fe:91:3b:8b:ed:4e:71:0b:55: ee:dd:52:03:7b:0e:bc:87:ba:48:86:3b:aa:65:16:eb:ad:15: 02:4e:4a:c9 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICEMwwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDQ3MTlaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjVDODk1UkkxMTAvBgNVBAUTKEE4NDA3QzUwRDM1NTEyNjk1 OTVEODRDRjEyNDNBNUYzQUZGODEwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCjJmSI8RYWP+6mHtg+fMfZyydcR0QZcBWjZ7HaPal7GXIsIqcLz6hD pvkgbqI2E7/3Skc+ezoQYMT42t1kF5MCj4Ld7uLYYte8mmjEEFqcuIxJFif38sZg 1f+u3KWSlTs9V9txppl7W3LTUleJwVogNm4LvMnIsKKKuCZZrxTZC9L54FH4vToo k73fR5gl1x4885dUEH5AzGoT8TOfAdbu9WW0+5JGJL+dg+k9XmwgY1rmAsJnkTEA scdYoPpIPVuL1a/M3ZGK8wkpPyuE2GBIBtCAfp/0Phs+9ayR+Uh4vqKrhgHUf1hD yTZ+frsdCodWmZwBsrkzVwWKOaYS00d7AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU qEB8UNNVEmlZXYTPEkOl86/4EHAwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjVDODk1L0Y0MjBD NkE0ODVEQzExRTk4MDg3QkYwQkY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY1Qzg5NS9GNDIwQzZBNDg1REMxMUU5ODA4N0JGMEJGOEFFQTIy OC9xRUI4VU5OVkVtbFpYWVRQRWtPbDg2XzRFSEEubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAUFgLMA0GCSqGSIb3DQEBCwUAA4IBAQClZJO64UtSXMjD zU1lijoAtCwj3vnP1UlxdfuIlXb3pPR6npdihuDhuOCL+TpoAXMw8qZPJSkCfLBC RkOeGXB7qna9HESm5JuBsxGIg2m596LwC9BrWnsMyFd9vJeRKytNWcMeRjaxCDPh nD3Nhm2MPTCsTTH7W6q3/Fhjl4E+G5+twYUEmZH1uKvzTNDlpWjZWdX7oaTG0B53 tmKkuKf6eyA9Ty1MdSJfX45t6GPNiymluODal9/AF1na2bjbjQ99Zioq5Hmz3+VJ 3C0LdHEWqXq+ZLWOy10+njwAp8IDSdX+kTuL7U5xC1Xu3VIDew68h7pIhjuqZRbr rRUCTkrJ -----END CERTIFICATE-----Generated at Thu Jan 1 09:11:37 2026 by rpki-client