This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer File: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (raw, json) Hash identifier: UNQ9r+ulyKJMsUSDxRq58fXfkcC8uAzkEQnsJKshYVc= Subject key identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07 Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 10BA Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:45:07 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 80.88.3.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4282 (0x10ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Jan 1 00:45:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3615826RI, serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:27:28:74:f3:29:75:1e:03:5c:1e:6d:c9:46: e4:da:11:fc:29:8f:e3:9e:00:0c:c9:8d:7e:0d:a5: 7d:4a:48:b1:1d:89:76:d0:7d:75:cb:13:26:74:55: fd:d9:36:54:2c:8b:33:d0:17:51:6f:cb:6a:e6:da: c2:1b:05:3c:03:f9:cb:65:1f:c6:f1:cf:13:9a:c4: 0c:69:d4:13:c6:88:23:aa:8a:10:a1:ec:db:e6:9d: 8c:38:66:9c:2c:9d:4a:fe:b3:ab:a9:dd:c6:78:b8: 09:31:dd:37:35:b1:9c:94:42:2c:d9:94:03:10:5d: 66:01:c7:6a:9b:e9:0f:83:63:fb:ba:a5:34:a9:6b: 98:fb:4f:7f:f0:a1:f2:06:48:8d:d8:9d:1d:69:eb: 93:c3:49:67:7c:1d:a0:de:23:4e:44:f3:de:59:05: 0b:08:be:8c:a5:f9:10:67:22:d7:1d:6b:7e:30:c2: 91:af:c5:49:d8:aa:e9:b5:a3:fb:58:f0:6b:05:53: 31:d3:15:d5:2d:83:bc:69:c5:c5:7d:3d:e6:bd:e9: 8a:91:b9:38:8f:85:7b:4a:59:89:e8:0d:8b:1e:9e: 29:f4:e0:63:fd:df:53:f9:2a:39:f6:32:94:3f:a8: 43:12:32:a9:db:9b:8b:b2:1d:5b:aa:40:15:13:61: 81:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07 X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft sbgp-ipAddrBlock: critical IPv4: 80.88.3.0/24 Signature Algorithm: sha256WithRSAEncryption 27:95:f4:44:84:f7:1a:c9:54:94:7e:25:f5:bb:d4:9c:2f:f2: e0:2b:54:6b:a4:08:b0:9b:f7:ac:3a:69:83:f9:7e:ee:18:f4: 9a:4c:19:4d:07:1e:f7:c6:65:af:e0:74:de:a2:2f:79:97:72: d7:e9:5a:0e:b8:7e:c0:0d:a2:74:88:ed:36:a8:bf:9a:fe:b2: f3:fd:52:fc:1e:25:4f:3b:58:d1:43:50:6d:8b:02:dd:81:cd: 85:86:54:f6:31:14:74:a8:90:43:fc:f3:01:c0:c4:92:b6:4d: 87:df:e5:40:48:67:75:8f:dc:37:01:68:0e:e6:15:89:25:1c: 00:30:46:13:46:4c:3b:35:1e:f6:92:08:47:c9:a0:9d:4d:dd: 34:64:a1:a0:b6:43:ee:ee:31:65:e2:e6:6d:77:07:79:bf:e8: 1e:33:d7:13:63:6b:64:ec:e3:81:f2:1c:f2:4b:01:07:06:5e: 8c:ee:5e:75:1d:ff:ae:81:cc:11:9a:bb:4f:c1:79:6d:a5:ba: b7:3d:05:56:a2:96:18:fe:51:f1:4a:e1:1e:7d:50:75:4f:d0: 38:43:cf:5f:95:d0:43:93:e0:fd:1c:5e:a3:1a:30:21:92:79: 0b:75:fb:47:22:da:81:14:94:27:5d:35:40:41:46:44:62:79: c7:b2:6f:c4 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICELowDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNjAxMDEwMDQ1MDdaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjE1ODI2UkkxMTAvBgNVBAUTKDA0QzkwQjBGNkI2RTU5OTRG NjY1ODdFMzcwRjdGN0NCRTY2MTEyMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDhJyh08yl1HgNcHm3JRuTaEfwpj+OeAAzJjX4NpX1KSLEdiXbQfXXL EyZ0Vf3ZNlQsizPQF1Fvy2rm2sIbBTwD+ctlH8bxzxOaxAxp1BPGiCOqihCh7Nvm nYw4ZpwsnUr+s6up3cZ4uAkx3Tc1sZyUQizZlAMQXWYBx2qb6Q+DY/u6pTSpa5j7 T3/wofIGSI3YnR1p65PDSWd8HaDeI05E895ZBQsIvoyl+RBnItcda34wwpGvxUnY qum1o/tY8GsFUzHTFdUtg7xpxcV9Pea96YqRuTiPhXtKWYnoDYsenin04GP931P5 Kjn2MpQ/qEMSMqnbm4uyHVuqQBUTYYGbAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU BMkLD2tuWZT2ZYfjcPf3y+ZhEgcwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjE1ODI2LzQ0NTky NTFDRjA1NzExRUJBNUM4RDEzOEQ4QTAxNENFLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzYxNTgyNi80NDU5MjUxQ0YwNTcxMUVCQTVDOEQxMzhEOEEwMTRD RS9CTWtMRDJ0dVdaVDJaWWZqY1BmM3ktWmhFZ2MubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAUFgDMA0GCSqGSIb3DQEBCwUAA4IBAQAnlfREhPcayVSU fiX1u9ScL/LgK1RrpAiwm/esOmmD+X7uGPSaTBlNBx73xmWv4HTeoi95l3LX6VoO uH7ADaJ0iO02qL+a/rLz/VL8HiVPO1jRQ1BtiwLdgc2FhlT2MRR0qJBD/PMBwMSS tk2H3+VASGd1j9w3AWgO5hWJJRwAMEYTRkw7NR72kghHyaCdTd00ZKGgtkPu7jFl 4uZtdwd5v+geM9cTY2tk7OOB8hzySwEHBl6M7l51Hf+ugcwRmrtPwXltpbq3PQVW opYY/lHxSuEefVB1T9A4Q89fldBDk+D9HF6jGjAhknkLdftHItqBFJQnXTVAQUZE YnnHsm/E -----END CERTIFICATE-----Generated at Mon Jan 26 17:28:18 2026 by rpki-client