This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
File:                     SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (raw, json)
Hash identifier:          DdA86ErG2aWUEFY1XPYv5b9pK/sSPti3aZwUKBJ/sE0=
Subject key identifier:   48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10D4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:48:08 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 213.55.64.0/18
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4308 (0x10d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:48:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:58:f5:57:d9:04:06:35:9b:95:4e:51:8c:
                    a8:8e:ea:9d:92:13:e4:1f:4c:2b:4f:42:25:13:ae:
                    e7:8d:9b:62:b2:5b:2f:4f:1d:43:22:ed:b3:58:e8:
                    99:df:8d:f8:a6:6d:61:b6:72:44:fb:77:e7:06:86:
                    d9:5e:c9:13:ab:fe:40:e8:71:a6:e4:95:28:48:66:
                    e0:4c:28:c4:45:7e:8d:82:56:12:40:c8:64:14:3c:
                    9e:8e:29:a5:28:0d:19:43:c8:69:ec:18:63:63:51:
                    1b:c0:68:59:d2:9f:74:96:91:14:c6:2e:83:4d:ef:
                    2f:cc:56:f6:a8:c1:92:ef:cb:b2:c5:f0:c9:e5:05:
                    a5:71:30:7a:38:3c:75:a4:7c:40:74:23:e3:b6:a9:
                    85:0f:d2:a1:2e:05:ae:05:8a:ab:7e:35:3e:33:2f:
                    f1:bb:c5:dd:6c:5c:a7:23:0a:5f:8a:c8:3f:52:09:
                    22:59:a2:ba:d2:72:eb:36:d0:fd:1f:5b:31:c2:1c:
                    7d:e6:79:24:e3:b8:29:45:bf:ec:d4:30:21:78:cc:
                    f1:08:3e:3b:80:d3:e7:3f:2b:db:8c:5d:c4:51:82:
                    40:59:de:6f:11:1d:f0:ef:b0:9f:fe:8b:a9:e1:c5:
                    5e:23:24:87:27:cd:a7:85:09:21:49:82:42:c3:55:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.55.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         33:80:52:6d:86:56:8a:99:d5:ce:c4:bc:11:3e:43:0f:16:56:
         f3:c2:dc:95:fd:ea:a8:2b:55:3e:2c:af:bc:c7:d1:3d:85:22:
         af:c2:91:f4:2a:63:cb:2d:a0:20:72:04:c8:62:49:aa:c8:37:
         19:10:eb:e8:ef:ea:d1:30:5f:de:1a:4d:0f:e1:06:38:e5:f7:
         20:2a:f0:91:03:02:25:89:72:70:d2:71:3e:15:b4:f8:62:c4:
         91:20:5e:58:c6:fb:58:c3:9b:09:05:cf:eb:2f:69:e1:99:37:
         8a:b6:f3:21:c3:1c:8a:64:3e:67:3d:85:4f:4c:3e:7f:dd:50:
         ec:5d:1c:8c:59:23:41:1c:33:72:b7:b9:02:77:25:af:59:8f:
         77:ce:86:3f:14:00:7e:91:bd:6d:31:44:6f:f0:ee:46:a0:5e:
         ba:6b:9f:a3:1f:4e:2e:c2:b9:a8:b2:06:90:17:dd:c9:3c:51:
         02:80:a6:be:2e:61:59:b4:de:71:a5:f7:ee:c5:5a:7e:b7:6b:
         12:07:6e:06:84:19:b0:3e:b9:30:35:a6:a2:70:8b:c6:a9:85:
         1e:b6:6d:38:81:e5:60:3b:c3:89:f8:c1:19:4d:7e:25:c5:ba:
         17:93:18:94:b9:1d:a7:0f:be:9b:50:e2:27:fd:bb:8c:ac:4b:
         cf:cf:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:02 2026 by rpki-client