This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
File:                     F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer (raw, json)
Hash identifier:          N7pD8Xxc/HrjZ9okJMwkV4QesKbBMRGI99wn1n0nqFM=
Subject key identifier:   17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A9F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:12:19 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 169.255.9.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6815 (0x1a9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:12:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36EC460AR, serialNumber=17CB1843BCA4722435288056070A067156077FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:41:a0:85:49:86:2e:d8:09:a4:a7:35:a9:
                    34:c5:a7:8e:53:5c:55:c5:f7:14:49:7b:a8:8a:c7:
                    8a:9f:b2:da:97:29:28:54:c9:d8:65:d1:47:9f:96:
                    41:9c:ae:27:a0:e0:bc:35:c7:d0:52:51:83:68:e1:
                    57:85:cb:7f:fb:bd:dc:2c:0d:7e:4b:ca:2a:f4:ea:
                    8a:e2:5e:92:74:74:cd:d4:51:57:44:a7:8d:c9:12:
                    04:f7:5f:3e:2d:d0:8e:bb:d3:f5:c4:9a:46:10:3d:
                    ed:07:cc:c6:c4:aa:9f:f1:df:44:fd:bd:a6:96:da:
                    fc:79:2f:12:a3:d4:46:d3:cf:30:ad:6c:e3:e9:3b:
                    66:56:25:fb:2a:68:40:5b:27:63:05:ce:84:1d:52:
                    35:e3:b9:4c:5a:0e:b0:a2:d1:4f:72:7f:28:b4:32:
                    ce:58:1f:fc:15:60:f4:ee:19:bb:19:f2:24:74:14:
                    85:b3:29:a2:dc:2b:c3:53:18:86:f9:f9:b0:bf:ac:
                    1c:8c:05:f5:9b:88:b4:9b:30:08:04:7b:ad:16:3b:
                    b0:37:3b:fc:17:d9:47:4a:ac:b7:33:86:91:c6:f7:
                    39:d1:11:82:0d:73:d9:32:b5:27:9b:ba:c8:58:d1:
                    72:f4:49:17:37:38:6d:93:c2:d3:d5:b0:b1:02:b5:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:09:30:02:5f:50:fc:af:eb:21:e3:4c:b7:85:09:db:12:
         c0:11:3e:01:2f:3d:a2:94:fa:4b:8e:2a:96:c9:cf:d3:02:ce:
         a3:51:5b:41:d1:73:ad:31:f6:ec:aa:07:51:1f:de:4b:50:9f:
         7b:1e:e0:6d:59:a7:1d:d2:1b:64:46:9d:2e:b1:98:59:c0:64:
         fd:cb:81:d6:23:ef:1d:25:d1:81:84:37:e4:49:1f:fd:35:4a:
         24:f0:17:03:9f:07:13:a6:a2:0e:e3:b8:52:22:d2:da:20:39:
         1f:35:d6:a7:77:cc:c2:58:37:c4:8d:7c:67:ed:28:b7:d8:74:
         80:09:e9:31:cb:24:d0:dd:99:3f:b6:48:a4:a8:f0:79:da:65:
         9a:b2:8e:bf:f0:9e:37:2e:80:b7:29:4e:eb:cf:b1:85:4e:c7:
         37:4e:8a:21:4d:07:4a:a9:f8:03:39:aa:74:11:b1:f7:8f:0a:
         59:51:3e:f1:8e:e7:79:7f:74:da:17:80:14:92:c8:ca:94:9f:
         10:b5:e3:98:92:ae:91:f9:20:16:0b:e0:89:f5:1a:56:78:f3:
         8a:c2:66:6b:2a:f8:f6:b6:68:79:d2:96:03:d0:cd:f4:84:c5:
         9f:1d:5d:a5:7f:94:82:40:c9:4c:47:8e:7a:d5:8d:df:a8:47:
         25:83:c1:27
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICGp8wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTEyMTlaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkVDNDYwQVIxMTAvBgNVBAUTKDE3Q0IxODQzQkNBNDcyMjQz
NTI4ODA1NjA3MEEwNjcxNTYwNzdGRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCz60GghUmGLtgJpKc1qTTFp45TXFXF9xRJe6iKx4qfstqXKShUydhl
0UeflkGcrieg4Lw1x9BSUYNo4VeFy3/7vdwsDX5Lyir06oriXpJ0dM3UUVdEp43J
EgT3Xz4t0I670/XEmkYQPe0HzMbEqp/x30T9vaaW2vx5LxKj1EbTzzCtbOPpO2ZW
JfsqaEBbJ2MFzoQdUjXjuUxaDrCi0U9yfyi0Ms5YH/wVYPTuGbsZ8iR0FIWzKaLc
K8NTGIb5+bC/rByMBfWbiLSbMAgEe60WO7A3O/wX2UdKrLczhpHG9znREYINc9ky
tSebushY0XL0SRc3OG2TwtPVsLECtRnhAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
F8sYQ7ykciQ1KIBWBwoGcVYHf/gwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkVDNDYwLzk4MjEw
N0I0ODk4MTExRUM5MDZEMDNCNDVBNDBENTc3LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZFQzQ2MC85ODIxMDdCNDg5ODExMUVDOTA2RDAzQjQ1QTQwRDU3
Ny9GOHNZUTd5a2NpUTFLSUJXQndvR2NWWUhmX2cubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAqf8JMA0GCSqGSIb3DQEBCwUAA4IBAQANSAkwAl9Q/K/r
IeNMt4UJ2xLAET4BLz2ilPpLjiqWyc/TAs6jUVtB0XOtMfbsqgdRH95LUJ97HuBt
Wacd0htkRp0usZhZwGT9y4HWI+8dJdGBhDfkSR/9NUok8BcDnwcTpqIO47hSItLa
IDkfNdand8zCWDfEjXxn7Si32HSACekxyyTQ3Zk/tkikqPB52mWaso6/8J43LoC3
KU7rz7GFTsc3ToohTQdKqfgDOap0EbH3jwpZUT7xjud5f3TaF4AUksjKlJ8QteOY
kq6R+SAWC+CJ9RpWePOKwmZrKvj2tmh50pYD0M30hMWfHV2lf5SCQMlMR4561Y3f
qEclg8En
-----END CERTIFICATE-----
Generated at Sat Feb 7 07:14:13 2026 by rpki-client