This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer File: 1F-q3w0PsrIYxNl-HvQbwMkznC8.cer (raw, json) Hash identifier: xpydeokQoxNzDVYCyCJS3vRj2ntfmkb6bVOY0XBoBcE= Subject key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 10CA Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:47:01 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 80.249.64.0/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4298 (0x10ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Jan 1 00:47:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fd:f5:e7:88:dd:94:b3:ad:95:3e:c2:c1:3c: 34:bf:c1:de:4a:58:4d:0b:01:cd:64:88:cd:f3:3a: 8d:ca:65:cc:e4:4d:a2:71:38:b4:e7:13:00:ee:80: ab:86:14:af:69:4d:ca:9f:f6:86:2d:3f:a0:64:0a: 68:2b:30:8a:e9:25:17:9a:36:51:20:9f:e6:be:82: 66:d1:02:f5:c8:47:0c:a7:10:ba:4f:45:7b:a6:28: 41:0f:96:b0:ac:54:bf:aa:7c:e5:ed:dc:a0:34:1c: 76:7b:5e:e6:42:c4:3b:46:b6:99:2d:27:4f:20:1d: 9f:48:af:d0:29:ac:b7:34:a6:ac:53:77:40:f8:a0: 92:d1:8f:5c:34:e3:7c:d9:d1:f2:d6:3b:eb:b4:dd: 31:24:1c:cd:3f:ac:68:c8:c7:cb:49:ff:e5:3e:89: c9:ff:d7:69:bb:ae:ae:03:4a:0d:5a:8a:07:42:1b: 06:46:64:01:db:9b:d2:b3:83:ea:77:cb:39:1f:fb: 1d:6d:1c:c1:c8:ef:22:e1:c6:38:8d:f7:55:45:8f: 56:a3:3b:e9:04:21:21:28:07:d3:e6:dc:90:5f:83: 44:c7:25:2e:1c:f6:52:45:e7:21:f9:98:87:1b:d8: c3:d9:cd:c9:84:55:4f:c1:b4:ab:2a:9a:89:1d:43: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft sbgp-ipAddrBlock: critical IPv4: 80.249.64.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:48:32:a7:30:6a:d0:1c:02:c5:15:b1:b9:83:f1:64:87:02: d7:15:5b:0b:5c:55:ad:97:f5:f1:6e:cc:e8:9f:9e:ec:29:09: 7b:9c:31:e1:90:91:ae:28:2e:18:3c:eb:7a:28:30:ae:46:3b: b6:0d:73:48:80:06:d7:4f:2c:de:8e:7c:dd:3f:24:56:2a:c1: 50:c4:bf:2b:7b:0a:af:90:f3:43:16:f3:a1:40:39:fc:d2:de: 94:07:66:c2:70:91:0a:56:e9:b3:21:95:b8:7e:24:2c:1c:3d: f1:91:cc:3c:33:e3:e9:b4:57:9a:af:ad:66:bc:6a:e3:f1:39: b0:6c:05:ed:41:3e:b5:25:72:62:78:ed:3d:e4:95:cc:3e:17: df:ef:36:80:7d:53:c1:47:78:4e:a9:30:2a:41:79:fd:0b:7d: 96:2a:0e:3e:ea:ad:e2:67:68:c4:aa:1d:78:85:aa:7c:e8:1a: 3e:ba:ed:82:51:94:0e:90:e8:97:99:d9:d2:d6:3c:7a:da:21: c1:f4:22:5f:b8:6a:8c:b2:b5:51:4a:71:a1:bc:bd:31:78:eb: ee:6c:ae:0a:cc:be:99:79:2b:48:1d:a5:78:a4:fc:06:03:fb: 20:11:5d:3e:94:bd:d7:da:18:04:65:dc:82:e3:a1:fd:44:08: f5:69:6f:83 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICEMowDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDQ3MDFaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjUxQjEyUkkxMTAvBgNVBAUTKEQ0NUZBQURGMEQwRkIyQjIx OEM0RDk3RTFFRjQxQkMwQzkzMzlDMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCa/fXniN2Us62VPsLBPDS/wd5KWE0LAc1kiM3zOo3KZczkTaJxOLTn EwDugKuGFK9pTcqf9oYtP6BkCmgrMIrpJReaNlEgn+a+gmbRAvXIRwynELpPRXum KEEPlrCsVL+qfOXt3KA0HHZ7XuZCxDtGtpktJ08gHZ9Ir9AprLc0pqxTd0D4oJLR j1w043zZ0fLWO+u03TEkHM0/rGjIx8tJ/+U+icn/12m7rq4DSg1aigdCGwZGZAHb m9Kzg+p3yzkf+x1tHMHI7yLhxjiN91VFj1ajO+kEISEoB9Pm3JBfg0THJS4c9lJF 5yH5mIcb2MPZzcmEVU/BtKsqmokdQ15fAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU 1F+q3w0PsrIYxNl+HvQbwMkznC8wHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjUxQjEyLzFDQzc3 QjEyNUJGMDExRjA5MzZBRTBEOURBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY1MUIxMi8xQ0M3N0IxMjVCRjAxMUYwOTM2QUUwRDlEQUU0RUM5 Qy8xRi1xM3cwUHNySVl4TmwtSHZRYndNa3puQzgubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQEUPlAMA0GCSqGSIb3DQEBCwUAA4IBAQB9SDKnMGrQHALF FbG5g/FkhwLXFVsLXFWtl/Xxbszon57sKQl7nDHhkJGuKC4YPOt6KDCuRju2DXNI gAbXTyzejnzdPyRWKsFQxL8rewqvkPNDFvOhQDn80t6UB2bCcJEKVumzIZW4fiQs HD3xkcw8M+PptFear61mvGrj8TmwbAXtQT61JXJieO095JXMPhff7zaAfVPBR3hO qTAqQXn9C32WKg4+6q3iZ2jEqh14hap86Bo+uu2CUZQOkOiXmdnS1jx62iHB9CJf uGqMsrVRSnGhvL0xeOvubK4KzL6ZeStIHaV4pPwGA/sgEV0+lL3X2hgEZdyC46H9 RAj1aW+D -----END CERTIFICATE-----Generated at Mon Jan 26 17:29:28 2026 by rpki-client