This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
File:                     pyKwoONloK3D2e6zzL_MBi2Q76k.cer (raw, json)
Hash identifier:          IrSo9ZLwerj9+uDqOJHKXiYYIV/k0fHU25wPuauz04U=
Subject key identifier:   A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10C6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:46:35 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 213.150.208.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4294 (0x10c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:46:35 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F363BEDERI, serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:a1:a4:3a:07:02:d7:f1:c5:5a:05:98:c6:
                    b0:e7:02:19:87:02:40:a5:2f:ae:52:aa:f0:a3:21:
                    16:d6:2c:1d:0b:14:74:9a:9a:c4:7e:66:6e:50:aa:
                    7b:05:6b:03:97:0c:82:5c:db:9b:b3:11:09:6a:92:
                    bb:70:24:d1:e6:64:d5:85:b0:9e:ba:ba:85:43:2d:
                    b4:33:41:cc:96:bb:af:8a:5b:07:6e:4b:91:88:1e:
                    c8:6a:57:ff:4a:eb:90:e6:cc:b2:ad:16:3d:fa:d6:
                    cc:ec:b4:38:e9:8b:6b:4f:aa:95:9a:e0:9c:6a:ad:
                    6d:54:22:02:e5:8a:e7:19:47:df:65:1b:31:90:f8:
                    c7:8b:96:3e:b7:36:d0:a7:dc:77:94:50:b1:ce:75:
                    8c:f4:07:22:56:3c:0c:bc:e3:3f:b3:7d:a1:7b:51:
                    d1:87:bc:fb:50:3b:ce:c3:4a:2f:a1:08:8a:40:86:
                    a9:c8:78:5b:09:85:31:2f:6c:c8:e7:c1:ae:cf:87:
                    fe:c0:31:09:df:67:a2:f8:fa:ea:0d:69:13:ce:29:
                    65:52:f1:f7:56:1f:9c:9b:96:31:0c:e6:82:5c:62:
                    b6:e4:05:47:53:93:e9:ea:2e:b1:f5:0f:81:35:24:
                    6f:cb:4c:24:43:55:aa:bf:bd:92:13:f1:d6:c2:ed:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.150.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:94:ab:5b:1b:f9:95:1f:84:8d:28:88:92:92:70:90:79:89:
         ca:87:08:85:de:db:79:38:ec:3f:36:46:cc:9f:c9:1b:1f:1b:
         2d:69:7f:a7:75:2c:7d:a2:05:5f:36:91:35:15:b1:6c:5d:70:
         14:df:d7:74:7e:2d:64:e1:97:0c:2d:6a:c2:1b:94:08:5d:32:
         f6:eb:1e:04:e8:c8:af:44:33:2d:cc:13:18:d4:a5:4a:ba:07:
         ff:99:db:a0:d1:3b:16:3a:84:42:fc:a9:de:77:15:4f:56:e7:
         83:23:61:06:47:5d:f2:2b:49:eb:8f:80:30:54:ea:3f:7a:c4:
         f1:2a:a7:10:ec:3c:77:ea:9c:21:e7:f5:98:95:cb:25:7f:4b:
         ac:36:0a:76:d2:65:8f:e1:4e:da:87:83:f0:6a:b0:1f:2b:0d:
         68:5d:41:32:7f:8b:87:49:9f:40:c0:a1:38:4a:d5:9e:23:af:
         3e:79:f2:7b:8f:14:93:16:3e:21:d2:2b:22:df:dd:97:88:dc:
         41:f2:d7:06:e0:f5:4f:21:48:bb:eb:4c:7a:4b:92:dc:3f:da:
         ba:61:d0:49:09:6c:1d:74:d3:c2:fa:6c:c3:04:c5:f4:75:18:
         5e:1a:d4:cc:6d:87:b7:45:2f:79:41:1f:a6:1e:f7:65:11:c8:
         fd:87:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:04:42 2026 by rpki-client