This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
File: nYezEXqhvXgot91GTXMHa66NzJY.cer (raw, json)
Hash identifier: /3p8PM8g2w6iGXCuh2E3NOY5JJz2WAq1yRiUMQFIv5o=
Subject key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 10D8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:48:33 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 81.26.72.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Jan 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4312 (0x10d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Jan 1 00:48:33 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:59:9e:da:81:84:63:ac:32:5d:ef:5f:3d:
92:be:f9:36:37:50:85:66:bd:e3:16:74:96:f8:a7:
47:ae:f5:fc:7d:da:d8:e9:3c:80:1b:59:2d:a5:86:
10:14:aa:7e:1e:4b:67:a0:98:b7:06:f9:71:7f:73:
fc:48:6e:56:2c:a3:8d:89:a7:8d:d5:b2:cc:c7:3f:
e8:6a:bf:ef:c5:ff:9e:98:d5:28:f0:24:f4:11:65:
3a:03:85:b0:5a:99:63:c6:23:db:de:28:4d:98:b3:
1c:fe:84:10:ec:76:3b:76:d3:1e:1d:8e:7d:1d:4d:
a4:00:a8:29:79:51:df:ef:14:65:e3:b7:dd:32:b3:
08:da:4a:03:9e:2d:8a:39:32:79:40:be:7e:30:ca:
1c:85:b1:22:d0:53:02:82:8e:34:78:eb:19:88:67:
25:00:0f:24:a7:45:e4:48:21:70:74:8e:f9:17:f6:
1f:1a:b1:90:db:98:f9:85:3d:0f:23:11:ec:6d:7e:
71:ca:49:34:a8:a1:cf:ab:77:55:05:b7:4c:1a:f5:
ec:23:da:52:ac:95:94:55:82:ac:89:2d:8e:41:20:
34:63:56:db:0a:fe:10:53:3f:44:4c:39:59:33:b2:
ff:90:63:7a:30:2e:8b:95:88:cd:7f:70:4d:bd:2e:
f7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
sbgp-ipAddrBlock: critical
IPv4:
81.26.72.0/21
Signature Algorithm: sha256WithRSAEncryption
37:90:d3:25:19:83:2e:fb:aa:93:31:10:98:08:9c:c6:9a:69:
0a:23:8c:79:5b:43:2b:d7:44:b8:32:e1:71:05:1c:f9:42:48:
f6:8c:01:eb:0b:bd:56:23:b3:a6:9e:e9:c4:e4:25:f8:55:30:
13:1b:25:41:83:39:9a:fd:86:1f:09:6a:a8:bd:58:29:e9:9e:
c0:2c:f7:db:09:38:63:cc:b2:c0:02:8e:ad:67:4a:bd:db:de:
2f:57:92:7d:f2:16:12:43:29:64:52:31:db:db:68:50:cc:1e:
07:ce:c2:25:de:c7:dc:e8:16:e2:cd:8d:73:dd:c3:be:fd:24:
9d:dd:e1:7b:16:f3:f5:ca:d5:fc:ee:0e:54:f6:c3:ae:79:31:
78:58:14:35:e8:ce:8e:9f:65:84:ac:76:1d:16:64:a4:a4:e2:
45:96:00:06:fa:53:2d:ee:5e:bc:3f:31:30:e5:e9:51:72:77:
f0:67:3f:3f:95:6a:b5:b1:4d:ab:bc:fa:b6:41:d4:21:31:f3:
42:db:b4:e1:9a:fb:93:d1:09:40:e6:81:54:c2:fd:d7:a0:eb:
0a:7f:d2:a0:1f:7f:6b:75:1c:5e:ab:b7:74:1d:23:8a:cf:d2:
ad:a7:ff:1c:59:9b:69:6d:73:2b:7d:46:74:5b:72:a9:f1:5f:
be:f5:09:c3
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICENgwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDQ4MzNaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjdGMjZEUkkxMTAvBgNVBAUTKDlEODdCMzExN0FBMUJENzgy
OEI3REQ0NjRENzMwNzZCQUU4RENDOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDPc1me2oGEY6wyXe9fPZK++TY3UIVmveMWdJb4p0eu9fx92tjpPIAb
WS2lhhAUqn4eS2egmLcG+XF/c/xIblYso42Jp43VsszHP+hqv+/F/56Y1SjwJPQR
ZToDhbBamWPGI9veKE2Ysxz+hBDsdjt20x4djn0dTaQAqCl5Ud/vFGXjt90yswja
SgOeLYo5MnlAvn4wyhyFsSLQUwKCjjR46xmIZyUADySnReRIIXB0jvkX9h8asZDb
mPmFPQ8jEextfnHKSTSooc+rd1UFt0wa9ewj2lKslZRVgqyJLY5BIDRjVtsK/hBT
P0RMOVkzsv+QY3owLouViM1/cE29LvcXAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
nYezEXqhvXgot91GTXMHa66NzJYwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjdGMjZELzNGNDA0
MUZDNzBCOTExRTlBN0YyNUQzRkY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY3RjI2RC8zRjQwNDFGQzcwQjkxMUU5QTdGMjVEM0ZGOEFFQTIy
OC9uWWV6RVhxaHZYZ290OTFHVFhNSGE2Nk56SlkubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDURpIMA0GCSqGSIb3DQEBCwUAA4IBAQA3kNMlGYMu+6qT
MRCYCJzGmmkKI4x5W0Mr10S4MuFxBRz5Qkj2jAHrC71WI7OmnunE5CX4VTATGyVB
gzma/YYfCWqovVgp6Z7ALPfbCThjzLLAAo6tZ0q9294vV5J98hYSQylkUjHb22hQ
zB4HzsIl3sfc6BbizY1z3cO+/SSd3eF7FvP1ytX87g5U9sOueTF4WBQ16M6On2WE
rHYdFmSkpOJFlgAG+lMt7l68PzEw5elRcnfwZz8/lWq1sU2rvPq2QdQhMfNC27Th
mvuT0QlA5oFUwv3XoOsKf9KgH39rdRxeq7d0HSOKz9Ktp/8cWZtpbXMrfUZ0W3Kp
8V++9QnD
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:55:38 2026 by rpki-client