This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer
File:                     5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer (raw, json)
Hash identifier:          DZr1zEYmsmNuEWAIAxR5GzgoUKVNwtM9sbdrMLou0xk=
Subject key identifier:   E6:35:24:6F:EB:F7:07:53:2E:DA:D2:02:1A:FC:87:48:C1:71:16:AF
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10C2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:46:07 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 213.181.224.0/19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4290 (0x10c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:46:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F362AF0DRI, serialNumber=E635246FEBF707532EDAD2021AFC8748C17116AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:e2:05:ae:95:a3:0c:76:1e:23:a7:f0:7b:
                    1a:76:8a:b1:9b:8c:da:30:19:bf:ca:12:ce:36:c6:
                    d1:f6:9e:88:20:30:b9:0b:41:d1:c5:46:ad:3f:a2:
                    60:55:23:cd:44:ce:11:e1:78:41:15:7c:2b:fe:b6:
                    b2:05:6e:33:4a:35:bc:5b:44:df:00:c1:1f:13:04:
                    bb:1c:5b:3d:d9:6f:0b:ad:f1:86:1f:04:43:11:b6:
                    0b:0c:63:f6:5c:37:51:d2:f6:48:70:c3:1a:81:cc:
                    46:6a:5b:1b:a9:18:d2:5b:3a:96:d7:8d:98:2a:2d:
                    88:c2:0a:f8:f7:a7:d7:5f:fc:50:63:41:e8:cc:7e:
                    44:64:ac:2d:f5:76:79:91:25:d9:02:6f:39:d4:4e:
                    cd:a6:ce:e8:2c:aa:77:26:bc:8a:38:1d:56:35:95:
                    f9:36:96:2c:23:43:88:36:b0:2b:12:af:3a:03:de:
                    54:c8:c1:da:c2:1a:15:a8:d0:d1:70:8c:b8:9b:4d:
                    cc:73:4d:e7:a8:94:1a:b3:54:6e:2b:85:d1:62:18:
                    3e:5c:56:73:77:3e:d7:18:d2:5b:01:a0:ed:6c:28:
                    54:52:72:a1:c2:c4:dd:24:de:d9:d5:00:e2:52:d0:
                    55:26:51:13:ee:f8:bc:ca:a2:33:9e:f7:c6:03:66:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:35:24:6F:EB:F7:07:53:2E:DA:D2:02:1A:FC:87:48:C1:71:16:AF
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF0D/1605D51E722D11F083098B85DAE4EC9C/5jUkb-v3B1Mu2tICGvyHSMFxFq8.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.181.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:13:6c:ef:73:1e:8b:72:96:ae:bc:16:4b:80:b5:2b:85:
         12:e8:65:c8:31:6e:32:2d:94:cc:38:44:e7:2b:b5:7d:4c:aa:
         38:e3:47:96:75:29:18:6a:66:d4:dc:7a:52:08:43:5e:d2:56:
         80:02:b2:a4:f4:4e:4d:df:8a:f3:57:7c:c0:5b:dd:69:11:2e:
         c1:12:a4:db:e9:f9:95:af:41:f5:9c:ac:48:f1:ce:b8:fb:09:
         ca:88:5b:79:3f:66:12:5b:d9:18:de:d6:a9:db:1a:b3:9b:c8:
         00:b3:10:0e:65:a1:fa:f5:72:44:7f:84:27:4f:d5:a6:76:99:
         1e:82:d8:77:b7:08:a5:1b:94:71:92:53:fb:31:e5:9c:d6:05:
         9e:d9:6c:a3:5a:8e:7a:ff:27:7e:8e:13:0c:71:9a:c7:68:b4:
         20:fc:77:76:d6:22:75:b6:bf:eb:fa:4b:70:c6:f4:bc:15:d4:
         c7:52:5d:46:35:10:f0:2c:82:f1:20:d8:90:72:37:eb:b8:40:
         50:c4:da:ed:7e:72:5a:2b:f6:ad:3c:1c:b6:66:51:8f:13:4b:
         ca:3a:d3:53:ff:9d:a8:f8:3b:fc:b0:8b:2c:7c:63:83:de:3c:
         88:a3:1a:ba:d8:7b:9b:c8:2d:0b:a0:5a:fa:07:de:f2:36:2d:
         2e:56:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:56:44 2026 by rpki-client