This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer File: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (raw, json) Hash identifier: ODPsy/iImVniqak/Pgduwz/zaZKctT401Fyabu3//kE= Subject key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 10E2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:49:40 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 212.0.128.0/19 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4322 (0x10e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Jan 1 00:49:40 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F369C738RI, serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:ba:bb:d2:66:6a:ba:28:5a:81:43:81:23: bf:9d:51:e2:c8:1a:8d:f2:50:57:8e:b0:37:5a:e2: 12:97:62:3c:9f:f3:b4:4b:32:17:ec:f6:cd:c1:80: e9:7a:8a:53:0b:18:e8:f0:11:66:eb:bd:32:08:ea: 2d:9a:19:e3:83:29:22:02:0f:bb:5a:3d:16:a0:2a: 57:47:9b:31:41:d4:72:8a:32:b2:3f:bb:63:9e:f7: 5c:94:74:f3:15:ef:db:83:cc:05:32:88:0c:22:37: 61:44:03:b7:b5:40:32:e8:3e:aa:17:4d:87:01:74: 6b:4b:94:67:5c:20:2e:26:a8:dc:c9:db:b6:a5:38: d7:71:0e:bf:50:a8:b3:4a:7a:a4:78:d3:ff:1a:21: 36:78:6a:68:5b:7d:35:bf:5a:77:b6:3e:f7:d0:91: f4:73:15:ae:89:42:25:bf:72:ba:e4:6e:65:c1:b0: 4c:c0:de:0f:12:e8:e6:4d:82:a6:57:b5:6b:00:8c: cf:0b:3a:8e:81:bb:af:99:7d:5b:32:f5:c0:93:94: fc:b6:78:7d:8f:77:31:0c:57:7c:f5:92:79:66:4a: d3:62:f7:97:17:28:e1:b8:12:74:d6:1c:3f:e5:34: b1:72:b4:8f:19:ab:71:15:8f:75:1c:d8:3e:f2:82: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft sbgp-ipAddrBlock: critical IPv4: 212.0.128.0/19 Signature Algorithm: sha256WithRSAEncryption b8:56:30:f3:54:09:9d:41:ec:47:a5:67:ed:d2:62:66:78:10: 18:a7:1a:07:96:65:ed:27:fa:5d:a3:37:4b:f7:1a:f7:98:7a: 56:29:25:25:c9:3a:ab:e5:c0:ec:7f:a1:5d:cf:95:91:d4:fd: 3f:28:84:11:ca:e7:19:58:68:05:1d:67:dc:79:5a:78:52:90: 5a:14:ca:73:f3:d2:7c:c0:f9:84:64:f0:b9:f5:42:fb:f7:b8: 8f:86:a3:3d:44:3f:ee:18:a8:52:f2:27:34:4f:aa:b1:f4:d4: b1:cd:b1:4b:4b:b4:f3:1b:10:82:4a:57:8a:8f:f8:5f:20:fc: 20:38:2c:c5:16:3c:74:16:0b:c3:7d:f7:75:bd:95:9c:7a:6b: 66:eb:12:56:cf:f1:db:61:41:f6:df:9a:fb:70:68:89:1b:dc: bb:9b:d6:1e:f7:b9:aa:02:05:90:bf:66:6d:8e:83:38:cb:e8: 7f:ec:47:ac:f2:d0:43:08:22:62:fb:79:7e:6c:1a:d6:77:cb: 63:92:5b:d5:33:9d:8c:c1:67:0c:42:d5:bf:fe:81:1d:0f:d7: 02:b1:fb:be:80:a9:11:b3:ee:c7:b8:91:69:72:83:00:76:e4: a5:d4:9a:d6:b8:3d:18:1d:c8:ab:ce:b8:17:00:5a:bc:8b:58: e7:44:f1:b4 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICEOIwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDQ5NDBaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjlDNzM4UkkxMTAvBgNVBAUTKDc0RkQ4QTk5Qjk4RjdDNTk4 MjcyNTc4RjVFQTE0RjEyMTg5N0E5NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC17bq70mZquihagUOBI7+dUeLIGo3yUFeOsDda4hKXYjyf87RLMhfs 9s3BgOl6ilMLGOjwEWbrvTII6i2aGeODKSICD7taPRagKldHmzFB1HKKMrI/u2Oe 91yUdPMV79uDzAUyiAwiN2FEA7e1QDLoPqoXTYcBdGtLlGdcIC4mqNzJ27alONdx Dr9QqLNKeqR40/8aITZ4amhbfTW/Wne2PvfQkfRzFa6JQiW/crrkbmXBsEzA3g8S 6OZNgqZXtWsAjM8LOo6Bu6+ZfVsy9cCTlPy2eH2PdzEMV3z1knlmStNi95cXKOG4 EnTWHD/lNLFytI8Zq3EVj3Uc2D7ygoU5AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU dP2KmbmPfFmCclePXqFPEhiXqVswHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjlDNzM4Lzg5NkJF NzhBRUVBOTExRUE4RkRDRkIxQkY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY5QzczOC84OTZCRTc4QUVFQTkxMUVBOEZEQ0ZCMUJGOEFFQTIy OC9kUDJLbWJtUGZGbUNjbGVQWHFGUEVoaVhxVnMubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQF1ACAMA0GCSqGSIb3DQEBCwUAA4IBAQC4VjDzVAmdQexH pWft0mJmeBAYpxoHlmXtJ/pdozdL9xr3mHpWKSUlyTqr5cDsf6Fdz5WR1P0/KIQR yucZWGgFHWfceVp4UpBaFMpz89J8wPmEZPC59UL797iPhqM9RD/uGKhS8ic0T6qx 9NSxzbFLS7TzGxCCSleKj/hfIPwgOCzFFjx0FgvDffd1vZWcemtm6xJWz/HbYUH2 35r7cGiJG9y7m9Ye97mqAgWQv2ZtjoM4y+h/7Ees8tBDCCJi+3l+bBrWd8tjklvV M52MwWcMQtW//oEdD9cCsfu+gKkRs+7HuJFpcoMAduSl1JrWuD0YHcirzrgXAFq8 i1jnRPG0 -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:35 2026 by rpki-client