This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer File: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (raw, json) Hash identifier: DdA86ErG2aWUEFY1XPYv5b9pK/sSPti3aZwUKBJ/sE0= Subject key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2 Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 10D4 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:48:08 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 213.55.64.0/18 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4308 (0x10d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Jan 1 00:48:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:58:f5:57:d9:04:06:35:9b:95:4e:51:8c: a8:8e:ea:9d:92:13:e4:1f:4c:2b:4f:42:25:13:ae: e7:8d:9b:62:b2:5b:2f:4f:1d:43:22:ed:b3:58:e8: 99:df:8d:f8:a6:6d:61:b6:72:44:fb:77:e7:06:86: d9:5e:c9:13:ab:fe:40:e8:71:a6:e4:95:28:48:66: e0:4c:28:c4:45:7e:8d:82:56:12:40:c8:64:14:3c: 9e:8e:29:a5:28:0d:19:43:c8:69:ec:18:63:63:51: 1b:c0:68:59:d2:9f:74:96:91:14:c6:2e:83:4d:ef: 2f:cc:56:f6:a8:c1:92:ef:cb:b2:c5:f0:c9:e5:05: a5:71:30:7a:38:3c:75:a4:7c:40:74:23:e3:b6:a9: 85:0f:d2:a1:2e:05:ae:05:8a:ab:7e:35:3e:33:2f: f1:bb:c5:dd:6c:5c:a7:23:0a:5f:8a:c8:3f:52:09: 22:59:a2:ba:d2:72:eb:36:d0:fd:1f:5b:31:c2:1c: 7d:e6:79:24:e3:b8:29:45:bf:ec:d4:30:21:78:cc: f1:08:3e:3b:80:d3:e7:3f:2b:db:8c:5d:c4:51:82: 40:59:de:6f:11:1d:f0:ef:b0:9f:fe:8b:a9:e1:c5: 5e:23:24:87:27:cd:a7:85:09:21:49:82:42:c3:55: a9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2 X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft sbgp-ipAddrBlock: critical IPv4: 213.55.64.0/18 Signature Algorithm: sha256WithRSAEncryption 33:80:52:6d:86:56:8a:99:d5:ce:c4:bc:11:3e:43:0f:16:56: f3:c2:dc:95:fd:ea:a8:2b:55:3e:2c:af:bc:c7:d1:3d:85:22: af:c2:91:f4:2a:63:cb:2d:a0:20:72:04:c8:62:49:aa:c8:37: 19:10:eb:e8:ef:ea:d1:30:5f:de:1a:4d:0f:e1:06:38:e5:f7: 20:2a:f0:91:03:02:25:89:72:70:d2:71:3e:15:b4:f8:62:c4: 91:20:5e:58:c6:fb:58:c3:9b:09:05:cf:eb:2f:69:e1:99:37: 8a:b6:f3:21:c3:1c:8a:64:3e:67:3d:85:4f:4c:3e:7f:dd:50: ec:5d:1c:8c:59:23:41:1c:33:72:b7:b9:02:77:25:af:59:8f: 77:ce:86:3f:14:00:7e:91:bd:6d:31:44:6f:f0:ee:46:a0:5e: ba:6b:9f:a3:1f:4e:2e:c2:b9:a8:b2:06:90:17:dd:c9:3c:51: 02:80:a6:be:2e:61:59:b4:de:71:a5:f7:ee:c5:5a:7e:b7:6b: 12:07:6e:06:84:19:b0:3e:b9:30:35:a6:a2:70:8b:c6:a9:85: 1e:b6:6d:38:81:e5:60:3b:c3:89:f8:c1:19:4d:7e:25:c5:ba: 17:93:18:94:b9:1d:a7:0f:be:9b:50:e2:27:fd:bb:8c:ac:4b: cf:cf:2c:ba -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICENQwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDQ4MDhaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjc5NzJGUkkxMTAvBgNVBAUTKDQ4NjlCOTc1RjQ5RDk4MEZF NTE1Q0VERDQ5QTBDNDBFQkI4MUFDQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC6sVj1V9kEBjWblU5RjKiO6p2SE+QfTCtPQiUTrueNm2KyWy9PHUMi 7bNY6JnfjfimbWG2ckT7d+cGhtleyROr/kDocabklShIZuBMKMRFfo2CVhJAyGQU PJ6OKaUoDRlDyGnsGGNjURvAaFnSn3SWkRTGLoNN7y/MVvaowZLvy7LF8MnlBaVx MHo4PHWkfEB0I+O2qYUP0qEuBa4Fiqt+NT4zL/G7xd1sXKcjCl+KyD9SCSJZorrS cus20P0fWzHCHH3meSTjuClFv+zUMCF4zPEIPjuA0+c/K9uMXcRRgkBZ3m8RHfDv sJ/+i6nhxV4jJIcnzaeFCSFJgkLDValtAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU SGm5dfSdmA/lFc7dSaDEDruBrKIwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjc5NzJGLzRDNzU4 RjZBOTAxMDExRURCQzNFMEY5QkYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY3OTcyRi80Qzc1OEY2QTkwMTAxMUVEQkMzRTBGOUJGMTIyMjQ2 OC9TR201ZGZTZG1BX2xGYzdkU2FERURydUJyS0kubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQG1TdAMA0GCSqGSIb3DQEBCwUAA4IBAQAzgFJthlaKmdXO xLwRPkMPFlbzwtyV/eqoK1U+LK+8x9E9hSKvwpH0KmPLLaAgcgTIYkmqyDcZEOvo 7+rRMF/eGk0P4QY45fcgKvCRAwIliXJw0nE+FbT4YsSRIF5YxvtYw5sJBc/rL2nh mTeKtvMhwxyKZD5nPYVPTD5/3VDsXRyMWSNBHDNyt7kCdyWvWY93zoY/FAB+kb1t MURv8O5GoF66a5+jH04uwrmosgaQF93JPFECgKa+LmFZtN5xpffuxVp+t2sSB24G hBmwPrkwNaaicIvGqYUetm04geVgO8OJ+MEZTX4lxboXkxiUuR2nD76bUOIn/buM rEvPzyy6 -----END CERTIFICATE-----Generated at Mon Jan 26 05:47:56 2026 by rpki-client