This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer File: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (raw, json) Hash identifier: QBSq1jgFtVJGdhSF3kq8whg65OLr34x7xuXUJhj45n0= Subject key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2 Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 1104 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:55:02 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 217.29.128.0/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4356 (0x1104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Jan 1 00:55:02 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:30:6d:26:87:52:81:c2:43:c3:b2:ae:e9: 5d:c3:cc:61:e5:61:a7:28:fa:f4:33:37:58:12:6d: 12:b8:53:59:50:16:bb:0f:08:13:54:c8:d8:b6:05: 93:f1:0b:4e:25:a4:1f:23:07:c2:15:98:c8:35:79: 5b:5d:9a:99:a5:3e:75:e1:3e:c5:5f:ab:eb:7e:74: 5d:92:35:9a:1f:39:00:dd:9f:67:43:da:e0:d7:49: 98:98:ab:77:0e:68:1b:8b:73:98:44:ba:8a:2f:50: 49:35:37:0b:00:35:4d:fa:f8:f9:fd:26:5d:2d:a2: c6:fc:98:92:80:7e:0b:86:c2:3a:fa:de:cd:aa:fa: ed:e9:f1:36:f5:f2:e1:32:9f:6c:8e:32:59:f2:91: e5:36:67:71:77:78:64:99:f3:aa:ce:57:a7:34:a6: 0c:d4:e3:92:aa:5a:89:a9:f6:10:44:5f:6e:bd:0f: 0b:5e:d5:db:f2:27:16:5f:1f:b6:b2:72:b2:56:f2: 5e:31:e0:58:f0:38:c0:09:db:11:86:9c:20:0b:c1: bd:5a:d0:c9:cc:43:5a:e3:88:cd:29:3c:0f:54:59: b4:15:a9:98:1a:15:a5:53:6f:78:84:3c:11:61:6e: a8:10:7b:58:92:f7:cc:90:63:bf:58:2a:a5:59:e9: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2 X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft sbgp-ipAddrBlock: critical IPv4: 217.29.128.0/20 Signature Algorithm: sha256WithRSAEncryption b5:a6:a4:6e:5c:cc:2c:2b:b9:98:fc:4f:31:87:83:c4:d2:74: 1d:1b:96:54:79:39:71:80:f5:8e:f6:9f:24:ca:3a:a7:09:ff: 6e:d7:8f:89:80:b3:33:45:a4:56:9d:fe:14:bb:88:95:e6:62: 19:48:d9:f6:e8:2f:c9:9d:c5:9f:f6:55:27:40:22:6d:07:d6: a6:14:fe:fc:de:64:b1:fd:d4:aa:3e:29:ee:e2:76:42:83:8a: 43:cc:4c:bf:a7:e4:aa:66:e0:0d:67:86:c8:83:e7:2d:c3:dc: 87:fa:8d:cf:e8:12:97:e7:0e:73:3e:e8:fb:fb:30:df:37:31: 26:d5:8f:d0:95:a2:de:70:6a:00:14:97:9d:ff:b8:dd:a1:40: 56:bc:c0:f2:d6:8f:2d:99:c5:69:58:a4:ac:38:19:f3:3c:84: a6:8e:ef:39:f9:e6:e3:46:94:8f:b0:36:43:40:5f:66:32:c1: 66:64:cb:75:0e:59:4d:8c:42:c4:55:4f:cb:51:f3:59:cb:eb: 89:d4:d9:57:36:2c:bc:3c:df:9f:5f:93:7a:6f:9a:65:cf:e4: d0:56:f1:d0:22:c4:83:2f:db:a1:c8:d8:1c:bd:98:af:4b:44: 30:04:67:29:ab:77:78:5f:9f:81:7f:11:d4:63:b8:d7:f0:c5: bb:bd:62:81 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICEQQwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDU1MDJaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkVCREQ3UkkxMTAvBgNVBAUTKDk3MkNGREFFRUIxMjZGNkZD RDQ2OTZBNTkwRjcwMTg4MzdBQTVGRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDS9jBtJodSgcJDw7Ku6V3DzGHlYaco+vQzN1gSbRK4U1lQFrsPCBNU yNi2BZPxC04lpB8jB8IVmMg1eVtdmpmlPnXhPsVfq+t+dF2SNZofOQDdn2dD2uDX SZiYq3cOaBuLc5hEuoovUEk1NwsANU36+Pn9Jl0tosb8mJKAfguGwjr63s2q+u3p 8Tb18uEyn2yOMlnykeU2Z3F3eGSZ86rOV6c0pgzU45KqWomp9hBEX269Dwte1dvy JxZfH7aycrJW8l4x4FjwOMAJ2xGGnCALwb1a0MnMQ1rjiM0pPA9UWbQVqZgaFaVT b3iEPBFhbqgQe1iS98yQY79YKqVZ6Y3JAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU lyz9rusSb2/NRpalkPcBiDeqX/IwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkVCREQ3LzY3RjAw NEM2QkUxRDExRUI4NTc2Qjk0MkY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZFQkRENy82N0YwMDRDNkJFMUQxMUVCODU3NkI5NDJGOEFFQTIy OC9seXo5cnVzU2IyX05ScGFsa1BjQmlEZXFYX0kubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQE2R2AMA0GCSqGSIb3DQEBCwUAA4IBAQC1pqRuXMwsK7mY /E8xh4PE0nQdG5ZUeTlxgPWO9p8kyjqnCf9u14+JgLMzRaRWnf4Uu4iV5mIZSNn2 6C/JncWf9lUnQCJtB9amFP783mSx/dSqPinu4nZCg4pDzEy/p+SqZuANZ4bIg+ct w9yH+o3P6BKX5w5zPuj7+zDfNzEm1Y/QlaLecGoAFJed/7jdoUBWvMDy1o8tmcVp WKSsOBnzPISmju85+ebjRpSPsDZDQF9mMsFmZMt1DllNjELEVU/LUfNZy+uJ1NlX Niy8PN+fX5N6b5plz+TQVvHQIsSDL9uhyNgcvZivS0QwBGcpq3d4X5+BfxHUY7jX 8MW7vWKB -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:46 2026 by rpki-client