This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
File:                     OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (raw, json)
Hash identifier:          xBt25wdeMT7MFd1dqxS5Fs/a/6hAb2DrhZUOgYIJpek=
Subject key identifier:   39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10F0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:51:52 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 212.52.128.0/19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4336 (0x10f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:51:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36C01B9RI, serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b6:74:fa:4c:97:5b:23:3a:e5:82:15:57:51:
                    0d:f8:c6:f5:60:42:1f:37:13:73:fe:a0:c9:c4:02:
                    71:7b:1b:5a:e5:4b:36:be:2f:0a:19:41:db:00:18:
                    cc:84:cf:23:d8:5a:cd:a2:3a:a0:3e:8c:32:94:82:
                    2d:6a:4a:d7:99:3d:3b:ce:ad:e4:ed:ee:1f:62:21:
                    ec:e9:b4:89:b4:4d:c4:67:42:86:f6:bb:78:72:af:
                    d1:40:0e:bb:38:da:11:45:3f:3a:09:36:67:c6:e7:
                    14:20:6a:ae:90:0b:a9:80:4a:28:63:9a:2d:8d:cf:
                    e6:4b:57:f0:b5:f3:14:2e:e7:ab:d1:bd:ac:57:5f:
                    c9:fe:a4:a9:14:0b:14:7a:3c:61:bf:d9:8d:6b:c8:
                    d2:98:73:fe:bf:f6:ee:59:fb:19:93:7a:aa:a2:c2:
                    0c:b1:41:29:98:9b:e2:cd:18:ad:49:80:b9:39:03:
                    d8:39:47:98:f6:5d:98:d3:73:e1:97:1e:77:f6:57:
                    36:a0:2e:11:ee:79:07:a2:51:31:49:b9:73:a0:4f:
                    12:9b:7e:c8:55:e7:89:d0:9a:d0:2a:eb:00:a7:0a:
                    cf:92:f2:27:1c:be:0d:a9:40:e5:b4:72:94:16:b3:
                    51:a3:34:fd:ad:70:9d:0d:85:3e:35:c9:12:eb:ea:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:58:74:c0:87:73:b6:c0:e5:81:43:05:e9:9a:17:80:a1:77:
         7c:ff:c1:49:f7:a0:ca:c5:a6:85:8e:02:52:0e:29:76:1a:ae:
         c2:d6:b4:86:fd:4e:a6:9e:ea:fa:6d:14:69:34:a4:fe:21:ef:
         60:dd:61:f6:48:4f:ac:9c:48:0b:51:61:8d:55:c8:df:c3:65:
         f5:36:28:2b:ef:b9:d6:3a:b2:6e:dd:d5:92:49:e8:5b:a1:b8:
         c0:c2:91:d8:94:de:8d:b7:48:51:40:62:de:06:26:65:66:7b:
         27:d7:54:c0:9a:fb:40:5c:21:11:c5:39:6f:8c:dd:6c:18:bc:
         c8:e9:bd:5a:f5:64:40:b4:80:f7:da:26:35:e7:5c:58:fc:75:
         3c:62:f0:e4:91:40:59:80:b3:e3:1f:62:af:fe:71:c3:10:f8:
         92:8e:11:4b:f8:a6:ff:fb:81:7c:9b:63:7a:51:df:57:4d:8d:
         d6:e1:91:44:c4:f9:27:38:74:21:77:df:d7:10:04:5c:1d:0a:
         15:9c:33:33:c1:16:44:40:62:3c:bd:dd:0b:22:a7:11:00:34:
         23:d4:40:cf:34:fc:cd:5c:58:d4:e1:29:86:9a:ab:1a:f6:5b:
         ee:05:34:8c:91:2c:4d:66:06:a4:cb:01:6f:3d:19:3f:ee:2a:
         45:da:3a:1f
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICEPAwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDUxNTJaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkMwMUI5UkkxMTAvBgNVBAUTKDM5NjQ5RDYzOEY4QzUyMDkz
ODRENjJCODgwREY3RjhDN0U0NkUxRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDXtnT6TJdbIzrlghVXUQ34xvVgQh83E3P+oMnEAnF7G1rlSza+LwoZ
QdsAGMyEzyPYWs2iOqA+jDKUgi1qSteZPTvOreTt7h9iIezptIm0TcRnQob2u3hy
r9FADrs42hFFPzoJNmfG5xQgaq6QC6mASihjmi2Nz+ZLV/C18xQu56vRvaxXX8n+
pKkUCxR6PGG/2Y1ryNKYc/6/9u5Z+xmTeqqiwgyxQSmYm+LNGK1JgLk5A9g5R5j2
XZjTc+GXHnf2VzagLhHueQeiUTFJuXOgTxKbfshV54nQmtAq6wCnCs+S8iccvg2p
QOW0cpQWs1GjNP2tcJ0NhT41yRLr6tUxAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
OWSdY4+MUgk4TWK4gN9/jH5G4fswHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkMwMUI5L0FGREE5
RkRDREEyRTExRUVBNkQxMjVBNzc3NTQxMkU2LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZDMDFCOS9BRkRBOUZEQ0RBMkUxMUVFQTZEMTI1QTc3NzU0MTJF
Ni9PV1NkWTQtTVVnazRUV0s0Z045X2pINUc0ZnMubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQF1DSAMA0GCSqGSIb3DQEBCwUAA4IBAQCQWHTAh3O2wOWB
QwXpmheAoXd8/8FJ96DKxaaFjgJSDil2Gq7C1rSG/U6mnur6bRRpNKT+Ie9g3WH2
SE+snEgLUWGNVcjfw2X1Nigr77nWOrJu3dWSSehbobjAwpHYlN6Nt0hRQGLeBiZl
Znsn11TAmvtAXCERxTlvjN1sGLzI6b1a9WRAtID32iY151xY/HU8YvDkkUBZgLPj
H2Kv/nHDEPiSjhFL+Kb/+4F8m2N6Ud9XTY3W4ZFExPknOHQhd9/XEARcHQoVnDMz
wRZEQGI8vd0LIqcRADQj1EDPNPzNXFjU4SmGmqsa9lvuBTSMkSxNZgakywFvPRk/
7ipF2jof
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:17:42 2026 by rpki-client