This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
File:                     nYezEXqhvXgot91GTXMHa66NzJY.cer (raw, json)
Hash identifier:          /3p8PM8g2w6iGXCuh2E3NOY5JJz2WAq1yRiUMQFIv5o=
Subject key identifier:   9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10D8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:48:33 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 81.26.72.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4312 (0x10d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:48:33 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:59:9e:da:81:84:63:ac:32:5d:ef:5f:3d:
                    92:be:f9:36:37:50:85:66:bd:e3:16:74:96:f8:a7:
                    47:ae:f5:fc:7d:da:d8:e9:3c:80:1b:59:2d:a5:86:
                    10:14:aa:7e:1e:4b:67:a0:98:b7:06:f9:71:7f:73:
                    fc:48:6e:56:2c:a3:8d:89:a7:8d:d5:b2:cc:c7:3f:
                    e8:6a:bf:ef:c5:ff:9e:98:d5:28:f0:24:f4:11:65:
                    3a:03:85:b0:5a:99:63:c6:23:db:de:28:4d:98:b3:
                    1c:fe:84:10:ec:76:3b:76:d3:1e:1d:8e:7d:1d:4d:
                    a4:00:a8:29:79:51:df:ef:14:65:e3:b7:dd:32:b3:
                    08:da:4a:03:9e:2d:8a:39:32:79:40:be:7e:30:ca:
                    1c:85:b1:22:d0:53:02:82:8e:34:78:eb:19:88:67:
                    25:00:0f:24:a7:45:e4:48:21:70:74:8e:f9:17:f6:
                    1f:1a:b1:90:db:98:f9:85:3d:0f:23:11:ec:6d:7e:
                    71:ca:49:34:a8:a1:cf:ab:77:55:05:b7:4c:1a:f5:
                    ec:23:da:52:ac:95:94:55:82:ac:89:2d:8e:41:20:
                    34:63:56:db:0a:fe:10:53:3f:44:4c:39:59:33:b2:
                    ff:90:63:7a:30:2e:8b:95:88:cd:7f:70:4d:bd:2e:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.26.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:90:d3:25:19:83:2e:fb:aa:93:31:10:98:08:9c:c6:9a:69:
         0a:23:8c:79:5b:43:2b:d7:44:b8:32:e1:71:05:1c:f9:42:48:
         f6:8c:01:eb:0b:bd:56:23:b3:a6:9e:e9:c4:e4:25:f8:55:30:
         13:1b:25:41:83:39:9a:fd:86:1f:09:6a:a8:bd:58:29:e9:9e:
         c0:2c:f7:db:09:38:63:cc:b2:c0:02:8e:ad:67:4a:bd:db:de:
         2f:57:92:7d:f2:16:12:43:29:64:52:31:db:db:68:50:cc:1e:
         07:ce:c2:25:de:c7:dc:e8:16:e2:cd:8d:73:dd:c3:be:fd:24:
         9d:dd:e1:7b:16:f3:f5:ca:d5:fc:ee:0e:54:f6:c3:ae:79:31:
         78:58:14:35:e8:ce:8e:9f:65:84:ac:76:1d:16:64:a4:a4:e2:
         45:96:00:06:fa:53:2d:ee:5e:bc:3f:31:30:e5:e9:51:72:77:
         f0:67:3f:3f:95:6a:b5:b1:4d:ab:bc:fa:b6:41:d4:21:31:f3:
         42:db:b4:e1:9a:fb:93:d1:09:40:e6:81:54:c2:fd:d7:a0:eb:
         0a:7f:d2:a0:1f:7f:6b:75:1c:5e:ab:b7:74:1d:23:8a:cf:d2:
         ad:a7:ff:1c:59:9b:69:6d:73:2b:7d:46:74:5b:72:a9:f1:5f:
         be:f5:09:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:55:38 2026 by rpki-client