This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
File: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (raw, json)
Hash identifier: xBt25wdeMT7MFd1dqxS5Fs/a/6hAb2DrhZUOgYIJpek=
Subject key identifier: 39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 10F0
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:51:52 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 212.52.128.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4336 (0x10f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Jan 1 00:51:52 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36C01B9RI, serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:74:fa:4c:97:5b:23:3a:e5:82:15:57:51:
0d:f8:c6:f5:60:42:1f:37:13:73:fe:a0:c9:c4:02:
71:7b:1b:5a:e5:4b:36:be:2f:0a:19:41:db:00:18:
cc:84:cf:23:d8:5a:cd:a2:3a:a0:3e:8c:32:94:82:
2d:6a:4a:d7:99:3d:3b:ce:ad:e4:ed:ee:1f:62:21:
ec:e9:b4:89:b4:4d:c4:67:42:86:f6:bb:78:72:af:
d1:40:0e:bb:38:da:11:45:3f:3a:09:36:67:c6:e7:
14:20:6a:ae:90:0b:a9:80:4a:28:63:9a:2d:8d:cf:
e6:4b:57:f0:b5:f3:14:2e:e7:ab:d1:bd:ac:57:5f:
c9:fe:a4:a9:14:0b:14:7a:3c:61:bf:d9:8d:6b:c8:
d2:98:73:fe:bf:f6:ee:59:fb:19:93:7a:aa:a2:c2:
0c:b1:41:29:98:9b:e2:cd:18:ad:49:80:b9:39:03:
d8:39:47:98:f6:5d:98:d3:73:e1:97:1e:77:f6:57:
36:a0:2e:11:ee:79:07:a2:51:31:49:b9:73:a0:4f:
12:9b:7e:c8:55:e7:89:d0:9a:d0:2a:eb:00:a7:0a:
cf:92:f2:27:1c:be:0d:a9:40:e5:b4:72:94:16:b3:
51:a3:34:fd:ad:70:9d:0d:85:3e:35:c9:12:eb:ea:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
sbgp-ipAddrBlock: critical
IPv4:
212.52.128.0/19
Signature Algorithm: sha256WithRSAEncryption
90:58:74:c0:87:73:b6:c0:e5:81:43:05:e9:9a:17:80:a1:77:
7c:ff:c1:49:f7:a0:ca:c5:a6:85:8e:02:52:0e:29:76:1a:ae:
c2:d6:b4:86:fd:4e:a6:9e:ea:fa:6d:14:69:34:a4:fe:21:ef:
60:dd:61:f6:48:4f:ac:9c:48:0b:51:61:8d:55:c8:df:c3:65:
f5:36:28:2b:ef:b9:d6:3a:b2:6e:dd:d5:92:49:e8:5b:a1:b8:
c0:c2:91:d8:94:de:8d:b7:48:51:40:62:de:06:26:65:66:7b:
27:d7:54:c0:9a:fb:40:5c:21:11:c5:39:6f:8c:dd:6c:18:bc:
c8:e9:bd:5a:f5:64:40:b4:80:f7:da:26:35:e7:5c:58:fc:75:
3c:62:f0:e4:91:40:59:80:b3:e3:1f:62:af:fe:71:c3:10:f8:
92:8e:11:4b:f8:a6:ff:fb:81:7c:9b:63:7a:51:df:57:4d:8d:
d6:e1:91:44:c4:f9:27:38:74:21:77:df:d7:10:04:5c:1d:0a:
15:9c:33:33:c1:16:44:40:62:3c:bd:dd:0b:22:a7:11:00:34:
23:d4:40:cf:34:fc:cd:5c:58:d4:e1:29:86:9a:ab:1a:f6:5b:
ee:05:34:8c:91:2c:4d:66:06:a4:cb:01:6f:3d:19:3f:ee:2a:
45:da:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:17:42 2026 by rpki-client