This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer File: wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer (raw, json) Hash identifier: 0Qu/WhiFaF0UkAqN2ciihsd0a1XbIULq2HaYd8rPizg= Subject key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66 Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545 Certificate serial: 107F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Sun 09 Nov 2025 20:25:16 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 62.68.224.0/19 IP: 62.240.96.0/19 IP: 82.129.128.0/17 IP: 213.212.192.0/18 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 12 Dec 2025 00:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4223 (0x107f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545 Validity Not Before: Nov 9 20:25:16 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:22:2c:8b:47:8c:79:87:4a:61:d5:33:0f: 36:4d:b5:7c:56:f8:5e:ae:f8:3a:ee:93:69:13:e3: 04:40:f0:8d:d9:1f:2e:9f:19:9f:4a:58:28:18:6b: fe:65:84:6c:10:ff:b8:50:88:b9:21:2e:4d:49:06: 0c:5d:b9:04:d7:36:9e:a7:e2:d6:52:5c:39:a3:c5: c3:67:09:2d:db:8c:5e:e4:17:41:9f:aa:b9:b5:44: a7:da:e4:45:39:1f:2f:e9:36:a9:1c:05:fb:b8:e1: 61:1d:ed:e8:72:b4:d8:90:15:df:16:82:19:ad:74: 97:a4:f1:64:da:99:0c:ca:63:ee:b7:00:c4:e0:67: 42:4b:f7:1c:92:62:68:2b:04:5a:17:4e:c1:b5:4e: 42:6a:d8:f9:75:67:8a:1b:06:87:09:8a:02:f6:67: 9d:e7:39:24:ef:40:6a:76:91:2a:b1:ca:32:7a:85: 10:4f:c3:09:c1:f7:be:2c:cd:ac:5d:bd:ac:e8:9e: ff:d1:c9:e5:47:a5:ab:de:88:53:eb:86:54:94:29: d9:e9:9b:f1:1f:0b:f3:f5:6f:36:53:11:2d:81:9e: c2:0e:34:5a:e2:68:dd:fd:5b:c2:b7:75:c5:39:1b: 84:8f:99:61:ae:f5:83:0c:8d:ff:8e:79:f1:80:e6: 2b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66 X509v3 Authority Key Identifier: keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft sbgp-ipAddrBlock: critical IPv4: 62.68.224.0/19 62.240.96.0/19 82.129.128.0/17 213.212.192.0/18 Signature Algorithm: sha256WithRSAEncryption 40:5b:a1:d0:4c:d9:0e:ac:1f:52:74:44:9f:5d:3e:46:7a:15: 3c:f2:ed:e8:3b:2b:2b:45:cc:22:8e:51:c0:9a:3e:54:10:2e: 8e:23:9d:af:5d:25:3f:97:85:86:14:ac:f4:bf:a3:ad:19:73: b9:05:59:27:62:b4:73:09:97:0e:68:b5:e8:56:bd:5b:ef:c9: 92:de:42:8f:32:2e:9d:a3:a3:50:22:87:f9:18:b3:c5:df:17: 5d:a7:f9:fe:33:ea:5d:cc:60:fd:7b:07:72:ab:26:ad:0b:70: e8:94:47:b7:7c:cb:c5:bb:b6:f8:82:56:ce:e7:6e:de:71:0a: 14:f2:20:ba:b4:c7:fd:e2:b4:be:27:27:2b:64:95:79:32:9f: 2b:26:49:15:dc:22:f4:66:b5:97:a0:13:61:48:93:84:22:a0: c8:40:67:d3:05:48:46:1f:82:38:8d:05:3a:7f:b5:9d:d9:f2: e3:46:e9:ac:81:1c:c9:b7:23:6c:38:f3:ae:4d:ff:c0:6a:31: 44:92:5f:43:43:75:5a:06:9a:57:6a:4d:a2:9b:6b:cc:32:e6: 3b:35:5f:b4:93:8f:bf:b5:8a:d6:7f:11:cb:5a:ee:da:cb:db: 22:ec:58:42:ae:df:ba:69:c3:97:8e:f6:fa:2c:12:55:4e:a2: 2f:d6:0a:c6 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgICEH8wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNUklQ RVRPQUZSSU5JQzExMC8GA1UEBRMoN0Y3QUMxODA4OTc5ODNFMjlFOTM3QzBBMTg3 ODAzQzA3Mjc1NTU0NTAeFw0yNTExMDkyMDI1MTZaFw0yNjAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjI1RDdCUkkxMTAvBgNVBAUTKEMzMjQ5N0IyQTI1N0ZBNjcy NkZEOUUwNjlGMDU4MjVBREE3MEY5NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDL5yIsi0eMeYdKYdUzDzZNtXxW+F6u+Druk2kT4wRA8I3ZHy6fGZ9K WCgYa/5lhGwQ/7hQiLkhLk1JBgxduQTXNp6n4tZSXDmjxcNnCS3bjF7kF0Gfqrm1 RKfa5EU5Hy/pNqkcBfu44WEd7ehytNiQFd8WghmtdJek8WTamQzKY+63AMTgZ0JL 9xySYmgrBFoXTsG1TkJq2Pl1Z4obBocJigL2Z53nOSTvQGp2kSqxyjJ6hRBPwwnB 974szaxdvazonv/RyeVHpaveiFPrhlSUKdnpm/EfC/P1bzZTES2BnsIONFriaN39 W8K3dcU5G4SPmWGu9YMMjf+OefGA5ivxAgMBAAGjggMDMIIC/zAdBgNVHQ4EFgQU wySXsqJX+mcm/Z4GnwWCWtpw+WYwHwYDVR0jBBgwFoAUf3rBgIl5g+Kek3wKGHgD wHJ1VUUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvcmlw ZS9mM3JCZ0lsNWctS2VrM3dLR0hnRHdISjFWVVUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvcmlwZS10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjI1RDdCLzJBRDI5 Q0ZDQkRBQTExRjA4OTMxMjk3RkRBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzYyNUQ3Qi8yQUQyOUNGQ0JEQUExMUYwODkzMTI5N0ZEQUU0RUM5 Qy93eVNYc3FKWC1tY21fWjRHbndXQ1d0cHctV1kubWZ0MDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQFPkTgAwQFPvBgAwQHUoGAAwQG1dTAMA0GCSqGSIb3DQEB CwUAA4IBAQBAW6HQTNkOrB9SdESfXT5GehU88u3oOysrRcwijlHAmj5UEC6OI52v XSU/l4WGFKz0v6OtGXO5BVknYrRzCZcOaLXoVr1b78mS3kKPMi6do6NQIof5GLPF 3xddp/n+M+pdzGD9ewdyqyatC3DolEe3fMvFu7b4glbO527ecQoU8iC6tMf94rS+ JycrZJV5Mp8rJkkV3CL0ZrWXoBNhSJOEIqDIQGfTBUhGH4I4jQU6f7Wd2fLjRums gRzJtyNsOPOuTf/AajFEkl9DQ3VaBppXak2im2vMMuY7NV+0k4+/tYrWfxHLWu7a y9si7FhCrt+6acOXjvb6LBJVTqIv1grG -----END CERTIFICATE-----Generated at Wed Dec 10 22:32:54 2025 by rpki-client