This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (raw, json)
Hash identifier:          BZnl11DNpWh5PGLZaaoh4nJoG83nXFKoRkTHjhyWgz4=
Subject key identifier:   F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10E6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:50:34 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 62.68.32.0/19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4326 (0x10e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:50:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:56:ee:48:0e:c5:00:63:1f:31:c2:3b:af:
                    93:51:d7:27:2f:3e:ab:f6:02:7a:35:ac:cc:65:a8:
                    42:e1:ed:02:b3:8f:9f:53:39:d5:7d:f9:27:79:a1:
                    cc:42:88:de:9e:4f:6b:05:46:92:b6:48:8e:f5:27:
                    ba:dd:f1:20:db:04:ed:a6:3f:bf:39:9d:70:b8:66:
                    c7:13:2e:ec:c5:45:59:68:71:0b:81:f8:65:86:b8:
                    a1:69:5f:25:15:fb:4a:80:b1:c5:f1:a7:19:36:d3:
                    93:a3:c2:ce:9a:66:46:54:b1:28:e2:0a:1e:cb:ce:
                    a4:04:bf:f9:04:c5:ef:bd:05:14:4a:c0:52:25:0d:
                    6d:fa:a8:57:49:3b:e4:e9:8b:34:65:1b:a0:08:3b:
                    2c:82:4a:f9:87:fb:9b:e6:c8:67:65:f7:87:b5:45:
                    10:22:72:0c:23:ba:48:1b:8e:86:fa:3c:30:b2:f0:
                    6f:33:1d:f5:87:63:44:a3:75:e6:93:85:7e:68:9e:
                    e1:38:23:12:4d:77:2a:17:d2:f4:b9:9a:2d:d4:ae:
                    37:29:2e:65:1a:fa:37:f8:bf:2b:39:2b:30:5d:3c:
                    29:6e:97:0a:f5:5d:0d:f1:80:d4:57:4d:1d:81:25:
                    02:ea:11:17:40:c9:a6:18:82:2e:a3:31:31:52:0b:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:84:76:21:ba:3b:6a:63:d1:9b:26:c0:e6:16:75:3b:4f:b0:
         5c:c2:10:bd:7a:55:89:df:bd:ad:93:62:6d:0a:8a:08:85:f8:
         b6:78:37:b4:11:b9:7d:21:fb:b0:91:6d:26:6a:fd:f8:30:6b:
         82:d7:fd:e9:9e:02:b7:71:d0:90:8c:7a:dd:7e:58:96:44:8e:
         a8:0d:8d:c9:ce:53:e0:d5:6c:08:13:f7:92:89:0e:c6:b1:d3:
         af:11:92:1a:b7:d3:85:31:04:ea:9c:82:47:29:99:22:a9:f8:
         6d:81:50:92:77:c4:d1:70:73:27:80:6c:34:74:ea:81:f5:e3:
         1f:0b:e9:1a:72:0e:ff:b2:96:6a:bb:b1:36:17:99:e1:cf:c8:
         de:37:e4:96:7d:c5:1b:0f:3f:c0:37:09:a3:20:15:38:48:87:
         0a:4f:8c:f5:ff:28:77:3c:6a:f6:b3:de:2b:10:20:3f:93:dc:
         5b:c9:8b:72:dc:f5:34:4f:81:83:dd:a1:08:3a:54:6b:a6:b9:
         c3:41:b7:4b:4c:1d:02:8f:f1:93:36:22:7e:64:fc:26:c5:6e:
         0f:c2:69:44:55:36:d8:b5:97:17:f9:e2:41:42:8c:e6:55:98:
         8e:ea:a7:a6:99:a6:5a:38:5a:c4:4d:f5:98:6b:bb:d9:60:5f:
         ba:3b:e5:15
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICEOYwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ
RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3
ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDUwMzRaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkE5OTFEUkkxMTAvBgNVBAUTKEY0OEFCRUQzRUNBMzA4RUIy
MkUxQjVBMjQyODRDRkUxRTAzMkNGRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDel1buSA7FAGMfMcI7r5NR1ycvPqv2Ano1rMxlqELh7QKzj59TOdV9
+Sd5ocxCiN6eT2sFRpK2SI71J7rd8SDbBO2mP785nXC4ZscTLuzFRVlocQuB+GWG
uKFpXyUV+0qAscXxpxk205Ojws6aZkZUsSjiCh7LzqQEv/kExe+9BRRKwFIlDW36
qFdJO+TpizRlG6AIOyyCSvmH+5vmyGdl94e1RRAicgwjukgbjob6PDCy8G8zHfWH
Y0SjdeaThX5onuE4IxJNdyoX0vS5mi3UrjcpLmUa+jf4vys5KzBdPClulwr1XQ3x
gNRXTR2BJQLqERdAyaYYgi6jMTFSC4ydAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
9Iq+0+yjCOsi4bWiQoTP4eAyz9IwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD
wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw
ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkE5OTFELzY2NkRG
NDU2MTlGMzExRUJBMDM5NjMwOEY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZBOTkxRC82NjZERjQ1NjE5RjMxMUVCQTAzOTYzMDhGOEFFQTIy
OC85SXEtMC15akNPc2k0YldpUW9UUDRlQXl6OUkubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQFPkQgMA0GCSqGSIb3DQEBCwUAA4IBAQAshHYhujtqY9Gb
JsDmFnU7T7BcwhC9elWJ372tk2JtCooIhfi2eDe0Ebl9IfuwkW0mav34MGuC1/3p
ngK3cdCQjHrdfliWRI6oDY3JzlPg1WwIE/eSiQ7GsdOvEZIat9OFMQTqnIJHKZki
qfhtgVCSd8TRcHMngGw0dOqB9eMfC+kacg7/spZqu7E2F5nhz8jeN+SWfcUbDz/A
NwmjIBU4SIcKT4z1/yh3PGr2s94rECA/k9xbyYty3PU0T4GD3aEIOlRrprnDQbdL
TB0Cj/GTNiJ+ZPwmxW4PwmlEVTbYtZcX+eJBQozmVZiO6qemmaZaOFrETfWYa7vZ
YF+6O+UV
-----END CERTIFICATE-----
Generated at Mon Jan 26 17:28:11 2026 by rpki-client