This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
File:                     GS9iV_wr5XP3WbXyvfg9aar_ouc.cer (raw, json)
Hash identifier:          4HBUcA1CpbDzU62fRdtvQz90hY84AgW4GjKEF1s53zM=
Subject key identifier:   19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1936
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:25:45 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.119.192.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6454 (0x1936)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:25:45 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3615A48AR, serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:b5:5d:ee:b8:a9:fa:a8:51:9f:cb:f8:ee:
                    0f:dd:b0:2b:a4:ba:ca:d5:d9:6d:6e:15:d3:cf:a7:
                    17:fc:61:be:27:24:f2:64:d6:79:59:83:17:bb:c1:
                    a2:e4:5d:74:d3:25:0d:13:32:7d:83:1c:9c:d6:e4:
                    32:e7:71:1c:1b:6b:b6:a3:c0:e4:d4:34:99:2d:b0:
                    81:44:e8:5e:88:66:c8:e7:9a:e9:a5:6c:61:34:92:
                    87:9b:fd:fa:e5:fe:fc:36:fe:8a:b0:95:a8:ef:92:
                    fd:81:ce:13:f9:59:ef:8a:36:29:a0:92:6e:90:36:
                    92:6c:6d:98:59:76:f7:3f:93:2b:cf:86:a8:e0:0c:
                    30:6d:c7:89:ce:e9:3c:5d:7a:7f:6e:fb:72:f8:73:
                    4d:7e:87:8a:51:67:e2:24:ae:30:7e:d6:71:79:e0:
                    b4:4d:8c:23:54:65:87:f6:0a:71:57:06:8c:1d:16:
                    d2:12:cc:cb:c6:4b:c2:0d:f1:ce:0f:ad:79:ab:69:
                    e2:2a:72:db:9d:7b:05:56:93:8d:4a:77:6c:3c:0a:
                    14:c7:2b:50:5d:1a:52:f4:20:d8:1f:eb:d4:44:88:
                    63:3d:1b:90:73:73:4f:aa:27:ac:85:63:80:59:f0:
                    9c:33:22:b2:e3:d1:eb:07:a3:da:30:c3:97:94:42:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:12:05:4b:18:64:6f:5a:d0:f8:a8:17:bf:b4:f8:71:af:
         ec:83:47:9c:68:e5:fc:9c:3e:bb:b8:55:68:1b:81:f1:84:fd:
         df:60:42:7b:08:34:c8:c9:f7:67:4a:92:20:cd:a7:42:f3:aa:
         13:67:ca:3e:a5:05:16:d2:ce:35:41:7a:35:c9:1a:34:a3:94:
         b2:17:77:4d:21:1a:56:79:5d:3b:b4:df:25:db:e5:7f:d3:45:
         e0:c5:c6:9c:5a:68:18:0a:02:ef:fe:7d:8c:4c:60:44:51:b6:
         a6:1d:25:71:d5:70:b8:89:33:89:42:6b:bb:9e:ec:6f:45:d6:
         b9:89:ed:3c:04:41:ef:89:da:18:07:7c:1d:6d:c3:39:a0:62:
         3c:02:47:07:5b:fb:50:30:43:91:e7:71:bc:69:7e:3e:35:5b:
         7a:49:ca:85:80:03:61:f8:f0:07:3c:e5:da:b0:12:f5:a6:0e:
         3d:ab:4a:40:b4:3b:24:a3:56:ff:c0:db:90:77:ae:18:8c:e2:
         af:10:2a:96:3a:4b:23:00:5e:ef:9f:a3:87:62:5d:fa:db:04:
         26:6d:90:0d:19:af:d7:a3:f6:79:01:b2:01:f4:43:91:95:ba:
         fe:ed:4f:ee:d0:46:b4:ea:f5:37:d1:3a:dc:f9:07:e1:27:72:
         21:16:e2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:13:32 2026 by rpki-client