This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
File:                     16R0hb-cpGerJ5HbX06JVar0dkA.cer (raw, json)
Hash identifier:          GpSzyUuxC18wkdemNbHke85K7DTQ7+YkANpff06Nnmg=
Subject key identifier:   D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1932
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:25:18 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 45.222.104.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6450 (0x1932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:25:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3614F54AR, serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:1b:4b:48:45:87:d2:a4:46:cb:b6:be:1e:
                    a1:6d:48:bd:65:56:49:4b:af:d5:fb:8d:fc:24:b7:
                    13:b3:ca:41:df:c1:71:dc:31:39:46:8f:e4:6e:9c:
                    8a:a2:59:3d:d3:98:ad:b4:68:16:7f:3e:c0:6a:b6:
                    7f:66:58:a7:79:19:cc:f2:c1:36:82:56:6b:c0:3f:
                    59:b8:28:8e:40:94:85:fe:69:d0:9e:2f:46:cd:f9:
                    92:eb:4c:3f:76:6d:9d:6c:7f:d7:f3:ce:7f:51:95:
                    54:e3:bc:e0:92:21:3a:24:c3:99:aa:2a:bb:af:5c:
                    3e:65:01:34:73:13:1c:c3:90:9e:0a:0e:8a:98:05:
                    3e:6d:84:9a:a7:18:15:18:36:30:e5:62:b4:c9:9b:
                    ff:20:38:93:21:eb:b3:27:9f:ef:2d:bd:c7:8b:06:
                    83:68:f9:ea:89:59:52:e8:9d:96:e1:a1:82:9b:2e:
                    1d:d6:c7:48:01:2c:74:36:fc:d8:c1:21:03:a3:17:
                    14:18:32:21:7b:0c:d3:ba:05:d2:b3:9f:33:1c:59:
                    03:8e:3d:2a:3a:85:a2:d7:0a:d1:42:33:aa:2f:e5:
                    c2:cf:f0:e1:e3:cd:b1:e5:2c:8c:b8:89:74:05:9a:
                    08:a3:f1:30:c0:90:33:69:c7:ff:62:69:37:f1:e1:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.222.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:3a:b8:3d:86:c9:d9:e6:5b:b0:95:4e:e6:c6:6e:91:94:b9:
         fb:08:24:2f:09:a8:5f:b0:82:47:98:82:a7:2a:cf:20:67:00:
         9b:38:57:e7:e8:5d:f2:53:8d:95:be:b4:bf:e4:e1:ca:07:bd:
         3e:a9:14:87:75:bf:cb:6f:8e:83:7a:b4:da:75:f5:d8:37:b9:
         bf:17:35:08:ba:30:ea:ec:06:3c:4a:7b:71:06:9d:cf:5f:4c:
         3d:79:ab:0f:02:1a:af:a5:4a:6a:5f:aa:6c:f4:05:02:85:ad:
         06:0d:51:24:62:30:24:57:38:4a:9f:8c:ed:ef:46:b1:fd:f0:
         27:c0:aa:35:c9:7b:40:14:be:0a:e1:74:60:05:f4:df:4d:3d:
         1f:dd:9a:cf:7e:cf:09:f9:61:ca:9d:aa:4c:e4:14:b2:fe:93:
         67:92:06:73:8a:22:b0:63:3a:20:2b:9d:79:4f:3b:b8:45:ba:
         e5:f4:ff:04:a6:2d:a4:49:4a:de:9b:94:e1:4c:50:ae:ce:eb:
         0e:a6:99:f3:9b:71:3c:f6:bf:eb:16:2f:5b:7d:fc:58:1d:0a:
         28:78:8b:49:23:b5:8a:20:b8:f0:26:01:d9:cc:a2:53:12:a5:
         78:54:ef:ae:53:dd:83:e5:1c:9a:b2:76:0e:0a:c5:13:2c:3c:
         ba:73:cc:41
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICGTIwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDI1MThaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjE0RjU0QVIxMTAvBgNVBAUTKEQ3QTQ3NDg1QkY5Q0E0NjdB
QjI3OTFEQjVGNEU4OTU1QUFGNDc2NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCx1RtLSEWH0qRGy7a+HqFtSL1lVklLr9X7jfwktxOzykHfwXHcMTlG
j+RunIqiWT3TmK20aBZ/PsBqtn9mWKd5GczywTaCVmvAP1m4KI5AlIX+adCeL0bN
+ZLrTD92bZ1sf9fzzn9RlVTjvOCSITokw5mqKruvXD5lATRzExzDkJ4KDoqYBT5t
hJqnGBUYNjDlYrTJm/8gOJMh67Mnn+8tvceLBoNo+eqJWVLonZbhoYKbLh3Wx0gB
LHQ2/NjBIQOjFxQYMiF7DNO6BdKznzMcWQOOPSo6haLXCtFCM6ov5cLP8OHjzbHl
LIy4iXQFmgij8TDAkDNpx/9iaTfx4RB1AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
16R0hb+cpGerJ5HbX06JVar0dkAwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjE0RjU0L0ZBMDlG
RTFBRTE1RjExRUI4OTJFQzY1MUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYxNEY1NC9GQTA5RkUxQUUxNUYxMUVCODkyRUM2NTFGOEFFQTIy
OC8xNlIwaGItY3BHZXJKNUhiWDA2SlZhcjBka0EubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDLd5oMA0GCSqGSIb3DQEBCwUAA4IBAQCsOrg9hsnZ5luw
lU7mxm6RlLn7CCQvCahfsIJHmIKnKs8gZwCbOFfn6F3yU42VvrS/5OHKB70+qRSH
db/Lb46DerTadfXYN7m/FzUIujDq7AY8SntxBp3PX0w9easPAhqvpUpqX6ps9AUC
ha0GDVEkYjAkVzhKn4zt70ax/fAnwKo1yXtAFL4K4XRgBfTfTT0f3ZrPfs8J+WHK
napM5BSy/pNnkgZziiKwYzogK515Tzu4Rbrl9P8Epi2kSUrem5ThTFCuzusOppnz
m3E89r/rFi9bffxYHQooeItJI7WKILjwJgHZzKJTEqV4VO+uU92D5RyasnYOCsUT
LDy6c8xB
-----END CERTIFICATE-----
Generated at Sat Feb 7 07:12:16 2026 by rpki-client