This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (raw, json)
Hash identifier:          IqULL+lG1Z5qhAnwhTtSEmsoGbxU4pT2kMU3GoeUntc=
Subject key identifier:   05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       10D2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:47:56 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 213.193.40.0 -- 213.193.63.255
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4306 (0x10d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jan  1 00:47:56 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:6f:e3:2e:19:3e:49:e5:49:52:e9:a0:55:
                    a3:de:54:75:1b:e6:70:41:f7:cf:08:34:bc:cb:8c:
                    b9:b8:31:6f:94:00:8f:78:07:a1:3c:c9:40:68:9e:
                    d7:79:17:16:b9:ef:99:3a:62:92:90:b6:46:ff:61:
                    91:3d:e0:ce:e5:23:10:d1:a3:03:a8:d5:8f:c4:ab:
                    cc:c6:c4:2b:3f:1d:e7:af:14:93:a7:13:8d:0e:c0:
                    65:ba:e4:f7:86:93:57:be:48:e2:9c:1e:cd:87:48:
                    e0:cb:44:65:b3:e2:2f:d6:22:54:32:9b:33:b2:fb:
                    06:86:44:80:4d:e7:a9:e9:82:8a:d0:c0:9e:10:01:
                    f8:40:cc:7e:ef:d5:85:4e:88:cf:20:2e:4c:fe:4c:
                    b6:4c:03:d6:f0:c0:16:23:08:9f:bd:9f:b3:9e:c2:
                    77:74:10:50:c7:16:2d:6f:06:ab:12:90:82:2d:4d:
                    3f:2d:96:83:4e:1e:c5:36:9a:5c:bc:4f:1f:b0:fb:
                    e5:7b:1f:4f:dd:4c:7b:5a:c0:1c:67:b6:77:ef:2d:
                    f5:52:0f:6b:40:c5:0c:2e:8f:50:b9:fb:c7:25:a8:
                    7a:ca:fe:8d:5c:66:0a:6f:e9:d9:00:35:af:8a:cf:
                    c5:7a:32:db:b9:06:13:be:e9:37:2e:09:4b:92:5d:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.193.40.0-213.193.63.255

    Signature Algorithm: sha256WithRSAEncryption
         c4:67:1d:be:a1:f5:7f:4f:b1:a5:9a:bb:4c:c7:9b:48:87:81:
         b2:5b:59:bc:90:db:f0:6f:cb:65:e9:b6:7f:55:4b:ab:0d:e2:
         d7:52:35:74:70:de:b2:ce:e9:e2:b9:e6:ad:64:3c:46:9a:b5:
         90:fc:8e:f4:af:ae:70:44:93:fa:4f:69:c3:2e:fe:c1:93:50:
         8f:2d:b5:77:d1:16:79:b7:9c:6d:f5:c9:c0:54:71:e5:a4:9d:
         1d:ac:63:b1:f8:bb:e0:9e:75:30:c2:4e:28:3e:29:88:68:e3:
         34:f2:63:ea:08:81:c3:e1:5c:03:ee:bd:4f:0c:8b:b5:7d:c3:
         29:e2:db:3d:09:87:83:68:b8:cf:ea:60:b3:c4:bb:7b:72:1f:
         9c:3a:af:cf:0b:85:d3:5e:9b:1b:d7:da:a6:45:74:c3:ce:85:
         e7:ae:12:c6:94:e1:99:63:e1:54:cd:fd:cd:2d:8b:67:7d:af:
         a2:69:be:9f:6b:76:8e:cf:18:93:25:67:a2:fd:33:49:22:b3:
         27:2e:b4:e6:29:5b:15:10:2a:af:8b:67:ff:9e:b6:f7:dc:a0:
         20:65:ec:2a:4c:49:d8:53:a5:80:52:b2:ac:b2:74:65:fc:cf:
         10:df:6f:10:e6:80:b5:0a:57:48:c2:1d:49:60:6e:dc:2b:6a:
         26:58:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:29:01 2026 by rpki-client