This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer File: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (raw, json) Hash identifier: WGAjmXTfCgdokK98XyWtkGwWIlDjE34bEfqdPnKFXNM= Subject key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0 Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 10FC Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:54:03 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 80.87.64.0/19 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4348 (0x10fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Jan 1 00:54:03 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:49:f5:f2:1a:8c:ab:2b:02:46:b1:0a:2c:88: 08:b8:01:fd:04:92:ae:4d:e4:8a:00:19:4e:66:0e: f1:bd:b2:b2:93:2f:9c:47:10:18:8a:5b:e1:bc:2e: 8d:f0:28:1e:69:ae:f9:9d:7c:ef:a1:c5:22:7d:d8: b4:ed:9e:b9:1a:a6:4c:9f:7d:f7:74:30:01:b3:4a: 8e:ba:25:6a:ea:5f:4b:e4:da:14:54:82:9d:35:d9: a5:35:53:fe:c9:bc:4a:4c:af:0a:ec:08:10:db:6f: 58:11:a6:d6:ca:29:6e:fa:e1:2e:7b:3a:51:da:ef: 7a:6c:32:f9:b2:25:1e:e6:99:9c:62:9e:5b:d9:26: f6:4f:84:2d:31:12:c8:22:6b:32:8d:9f:4d:d3:5b: a1:e8:ad:ac:fd:b1:66:19:2b:ab:f8:51:8b:69:ae: f1:de:26:8a:29:9f:32:a8:30:5c:a3:42:1d:9d:a4: 61:62:8d:b8:16:75:40:87:6e:7f:a5:3f:6c:20:ec: cc:94:e0:88:7b:d1:03:0c:01:8e:30:fc:0c:19:e3: 7a:67:b3:70:d7:e7:6a:83:21:cd:e5:2f:2c:f7:f7: af:8f:bc:41:b2:64:fa:16:07:3b:08:19:1b:f0:e5: de:ae:15:0d:a9:3d:da:55:1f:eb:68:4b:0f:77:97: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0 X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft sbgp-ipAddrBlock: critical IPv4: 80.87.64.0/19 Signature Algorithm: sha256WithRSAEncryption 3a:d7:62:97:5a:8f:8d:06:cd:e8:17:ea:34:60:77:55:63:a0: 51:d5:c6:22:6c:03:62:3e:85:74:35:f3:bb:25:89:ea:d8:7b: ab:d8:c1:96:d8:c8:f9:35:c7:35:37:9a:18:bb:90:d2:fe:55: a8:90:bb:06:6c:8f:23:5b:b7:cc:be:5b:12:4b:c4:4d:0e:e3: 58:42:6f:be:40:cb:f8:ab:49:78:81:a1:26:31:bb:c4:75:79: e5:47:12:b0:d6:fe:a1:1c:9b:78:c5:18:e1:56:cf:87:d6:26: 25:78:b6:e5:9f:dd:59:58:4d:09:8e:bc:2e:5e:88:fd:29:80: 0d:de:4b:33:ac:2c:f1:41:e4:1e:2a:17:3d:fb:ba:10:1f:a0: 02:94:bd:aa:25:cf:29:5b:49:11:59:84:fa:18:c1:a7:86:f0: a2:30:25:04:56:4e:3c:58:d9:7a:d3:a3:1a:cb:e2:b4:98:18: ee:e0:7d:ad:16:03:99:27:ae:6b:31:a3:04:2a:e7:86:bc:7c: 9b:aa:2f:11:e3:58:31:47:31:2e:27:a2:f7:3d:8f:d0:97:38: 28:1b:11:10:b9:1e:3f:89:0e:7e:21:91:c9:67:82:bf:9b:36: ac:ad:ca:bc:e6:b4:b2:1b:f0:64:66:8c:2d:99:0d:bf:ef:b6: c8:04:38:9e -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICEPwwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDU0MDNaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkRFNDJEUkkxMTAvBgNVBAUTKDlEODVEQUQwMkZDMTc3QTQw RTlCOTA3MDIzNzA2RjNGOTc3NDREQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCgSfXyGoyrKwJGsQosiAi4Af0Ekq5N5IoAGU5mDvG9srKTL5xHEBiK W+G8Lo3wKB5prvmdfO+hxSJ92LTtnrkapkyfffd0MAGzSo66JWrqX0vk2hRUgp01 2aU1U/7JvEpMrwrsCBDbb1gRptbKKW764S57OlHa73psMvmyJR7mmZxinlvZJvZP hC0xEsgiazKNn03TW6Horaz9sWYZK6v4UYtprvHeJoopnzKoMFyjQh2dpGFijbgW dUCHbn+lP2wg7MyU4Ih70QMMAY4w/AwZ43pns3DX52qDIc3lLyz396+PvEGyZPoW BzsIGRvw5d6uFQ2pPdpVH+toSw93lzHDAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU nYXa0C/Bd6QOm5BwI3BvP5d0TaAwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkRFNDJEL0NDOUFB MEU2NDFEQTExRUVCMDNFQkUzNzRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZERTQyRC9DQzlBQTBFNjQxREExMUVFQjAzRUJFMzc0QUQ5RTZG Qy9uWVhhMENfQmQ2UU9tNUJ3STNCdlA1ZDBUYUEubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQFUFdAMA0GCSqGSIb3DQEBCwUAA4IBAQA612KXWo+NBs3o F+o0YHdVY6BR1cYibANiPoV0NfO7JYnq2Hur2MGW2Mj5Ncc1N5oYu5DS/lWokLsG bI8jW7fMvlsSS8RNDuNYQm++QMv4q0l4gaEmMbvEdXnlRxKw1v6hHJt4xRjhVs+H 1iYleLbln91ZWE0JjrwuXoj9KYAN3kszrCzxQeQeKhc9+7oQH6AClL2qJc8pW0kR WYT6GMGnhvCiMCUEVk48WNl606May+K0mBju4H2tFgOZJ65rMaMEKueGvHybqi8R 41gxRzEuJ6L3PY/QlzgoGxEQuR4/iQ5+IZHJZ4K/mzasrcq85rSyG/BkZowtmQ2/ 77bIBDie -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:34 2026 by rpki-client