This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
File:                     sOuFTcDYmjIzySVR0W0U1DjPVR8.cer (raw, json)
Hash identifier:          V4+FuUEoCZJ6/ClJ+fuUe/iGrC1jBuQuQZHU+7fX8Q0=
Subject key identifier:   B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10EC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:51:27 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 213.150.216.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4332 (0x10ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:51:27 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36B5EE7RI, serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:a1:c5:d2:85:1a:a7:08:64:04:e6:17:9b:
                    2f:e3:d0:62:02:e0:60:fb:90:25:e3:f4:0f:50:13:
                    31:f2:7d:99:40:db:24:6d:f9:c7:9b:c3:27:bc:7b:
                    a9:83:bf:08:27:86:50:c5:a7:60:97:02:6a:f6:64:
                    c8:34:39:1b:5c:69:89:7f:6d:4f:a7:4c:8a:3d:fa:
                    b0:6b:00:4f:0a:32:28:b7:d7:92:9c:17:95:b7:ae:
                    cf:11:c0:94:d8:a1:2b:ca:06:8d:6c:33:71:20:52:
                    f7:37:04:92:4d:98:bb:b0:3c:34:a7:54:40:30:21:
                    55:d5:4c:45:52:c0:7d:8d:56:b5:d2:3e:ad:33:ac:
                    44:d9:a3:0e:92:7c:2c:d8:a0:63:b0:46:9b:38:7b:
                    7d:21:ff:34:11:20:ca:8c:a9:b5:a9:14:63:bf:26:
                    c7:1e:8a:25:67:0e:af:80:1f:55:c7:c9:bd:f8:e4:
                    29:4d:ba:61:05:a6:94:b4:16:ad:36:08:8e:65:a3:
                    ca:ef:00:8f:9a:a2:34:66:ae:be:16:bf:6a:de:22:
                    68:f7:0c:bb:14:1a:3d:7f:11:2d:70:0b:86:7b:de:
                    48:96:62:74:30:a0:07:d6:46:c6:4d:13:53:1f:11:
                    7d:4f:f9:a5:e7:a9:99:23:18:1d:10:48:9e:ee:3d:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.150.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:41:fd:22:76:6f:f0:fa:a8:c0:6b:df:e7:44:5c:4a:71:
         c3:45:a1:91:89:06:11:bd:7f:92:87:3b:00:e6:cb:70:2e:3d:
         bf:60:f6:69:4e:20:2d:96:a7:14:7a:60:ec:73:96:20:66:00:
         29:bb:d3:35:0f:8c:92:f7:96:9e:86:d9:ba:34:20:c6:5e:61:
         6b:fb:09:5d:96:a3:1d:a0:37:a6:6c:d2:3c:56:99:2b:2a:85:
         46:cf:9a:2e:63:d1:ef:89:3c:07:73:75:6d:a5:4b:4d:60:d9:
         1c:5d:64:96:64:88:7e:06:2a:7a:bd:9b:b8:5c:54:34:50:be:
         e6:71:e0:8d:09:84:f1:05:93:30:e1:89:6e:8b:4d:7b:2c:3e:
         e1:ac:5b:2b:ba:6f:47:b4:11:80:9f:45:0d:00:69:53:c4:88:
         4c:9d:ab:e2:ae:83:71:30:bc:44:31:c9:e5:16:62:43:d6:01:
         7e:94:8f:31:2d:a5:c3:51:3a:65:ed:d4:fe:e3:d1:02:45:68:
         8f:28:1c:1d:b0:8c:68:11:4e:2a:e1:d5:16:16:0d:32:7c:84:
         41:8c:9b:b1:8d:46:d7:1f:f6:d9:91:e9:9e:bd:f5:cb:d9:ac:
         cd:3c:c7:bf:5b:17:c8:2d:14:7e:55:07:de:2b:bb:d1:be:d5:
         ab:0d:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:09 2026 by rpki-client