This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer
File: AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer (raw, json)
Hash identifier: B/bEeIIuZnIhNRE/JHpINgycGY5xSxPjxRX1eKOYkY4=
Subject key identifier: 02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1AAF
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:14:11 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 156.38.8.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Feb 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6831 (0x1aaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Validity
Not Before: Jan 1 01:14:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36F5D39AR, serialNumber=020A4AF0D0FE11B703D11F397A5363CD0FBA13A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:b5:75:8e:42:16:70:88:20:df:5c:26:d0:
e5:83:b6:6b:21:7e:93:35:22:b5:5d:ca:6b:52:f7:
89:81:e8:c0:7b:ae:8d:f5:23:18:9b:a3:73:1e:3d:
e4:96:0d:6a:97:02:f9:8a:5a:a4:48:af:8c:d3:a7:
8d:e8:a2:ed:da:c4:94:0d:ff:14:ef:d7:af:b8:95:
bc:f3:fe:f8:7e:f7:1e:1e:65:dc:86:3e:56:5c:29:
b7:23:63:c4:e3:a3:74:5d:4a:d2:35:f6:c0:2f:f7:
d7:6c:50:a7:19:63:81:d9:4f:58:2a:11:c6:3a:a3:
70:9b:3b:c0:8a:39:08:ad:c3:2f:ad:b6:42:93:c7:
77:59:6d:09:5f:2d:08:ce:39:14:4c:11:c8:87:f1:
04:87:60:bc:45:59:ed:fb:b1:67:52:85:ab:5d:04:
37:b7:bf:93:1b:d7:7e:db:cc:a2:2d:72:b2:a7:2c:
fb:d9:c0:ca:c8:ce:50:21:07:0a:06:29:fa:71:81:
b5:e7:8b:71:e4:b2:19:ec:5a:e2:7f:fe:79:ee:54:
e0:21:f6:e0:df:ea:ac:df:fb:6b:dd:ce:c8:cf:f1:
fc:03:8e:95:80:f8:91:01:dd:fc:6b:70:2d:24:52:
d2:9e:08:f4:fa:6b:cb:fa:10:75:c8:b7:14:6f:4b:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
sbgp-ipAddrBlock: critical
IPv4:
156.38.8.0/21
Signature Algorithm: sha256WithRSAEncryption
14:5d:74:79:ab:98:45:e6:82:a4:73:7d:75:db:8c:74:64:fd:
44:16:19:97:b6:5f:3b:ad:e0:c9:a8:a0:ab:a4:14:b2:c7:b1:
e1:42:d9:74:49:e7:28:d1:cc:c5:2a:b8:6f:7f:a9:a4:84:92:
29:39:f3:b3:52:60:f8:25:a5:86:9a:87:5d:9d:95:e5:ab:56:
6e:8e:d9:04:75:e1:bb:f4:50:d1:00:69:d4:73:f1:be:bd:68:
05:a0:00:1f:dc:61:7f:93:92:96:78:bb:37:db:ee:ba:40:5c:
4a:e9:20:87:ad:d0:69:fe:d6:ab:0c:00:d3:e0:ae:a7:cb:54:
b6:8d:08:ce:f6:a0:db:1f:0b:0a:c0:46:14:af:87:c1:77:41:
eb:40:e3:d1:ab:a1:c4:0a:2a:f7:96:0c:ab:86:32:3e:63:66:
23:8f:d8:12:f4:8d:72:67:77:dd:77:89:3c:c0:ab:c5:c1:32:
8b:6d:2e:50:c9:07:0c:e7:c3:6f:17:0d:d2:12:ec:bb:01:bd:
19:23:3a:0a:df:36:d4:95:aa:52:0a:1b:f8:b7:d1:e1:7d:d4:
09:74:1d:98:83:c6:06:e4:6d:45:3c:d1:b4:6d:cc:89:7b:b9:
5f:c2:f8:34:bd:ab:91:f5:56:d1:75:fd:2c:4e:86:e8:d0:38:
c8:01:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:14:16 2026 by rpki-client