This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/H_M-JaMrRpH3I_hQENNsHRmtJhM.cer
File:                     H_M-JaMrRpH3I_hQENNsHRmtJhM.cer (raw, json)
Hash identifier:          svmJm6crwYMUjZDSe3c6+7SVeFXlZf8rPtEC0Rp6GUQ=
Subject key identifier:   1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A79
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:08:04 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 45.220.0.0/19
                          IP: 169.255.196.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6777 (0x1a79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:08:04 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36C65C6AR, serialNumber=1FF33E25A32B4691F723F85010D36C1D19AD2613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:45:fc:a8:12:28:18:5d:2f:86:e1:81:ff:
                    df:35:7c:30:3c:b6:82:be:90:c3:c4:20:f2:73:cf:
                    db:ff:fb:11:dd:fc:2a:c4:43:0f:f7:aa:07:11:a2:
                    94:47:ca:75:8e:ce:05:79:28:ac:b4:ec:94:ec:38:
                    37:38:a7:55:20:5f:8c:b8:f1:02:4d:de:f9:6d:28:
                    a4:d3:6c:67:ca:41:b6:4d:51:67:20:39:74:be:d3:
                    e3:a2:18:c8:3e:79:44:7f:24:c0:1c:b0:7e:ad:cd:
                    92:1c:d1:5c:21:b5:37:70:15:e2:5c:a9:0d:ad:03:
                    29:88:26:82:bb:74:d6:93:b1:51:ab:46:b2:6c:98:
                    98:42:00:94:e8:8b:1c:4a:9a:c4:ec:5b:6b:51:ed:
                    a3:24:3d:73:7a:ff:a1:91:32:b1:8b:b0:49:9e:b7:
                    6f:4c:39:0e:b3:80:7e:16:41:6b:94:ac:c2:38:c9:
                    ce:de:42:7f:b8:68:5e:61:c9:96:a8:c8:9e:69:5a:
                    9d:d4:8e:b2:4f:57:3a:01:ad:8b:25:c2:e8:77:f8:
                    af:12:e1:23:7f:75:25:65:f7:dd:3b:62:4e:8a:2b:
                    3a:55:46:d4:b1:63:d7:7d:4e:d6:c0:77:7a:98:01:
                    71:16:a1:2c:77:ad:93:7c:45:70:97:39:4a:2b:bf:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F3:3E:25:A3:2B:46:91:F7:23:F8:50:10:D3:6C:1D:19:AD:26:13
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/11FF6652CF5B11EBB4B3CE16F8AEA228/H_M-JaMrRpH3I_hQENNsHRmtJhM.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.220.0.0/19
                  169.255.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:79:3a:d3:22:dc:bc:b9:82:4d:72:26:ed:ae:67:66:e1:91:
         69:24:ea:54:ac:65:49:45:c9:0f:f6:5f:39:68:58:f8:6b:db:
         26:ad:3e:96:76:1c:fa:77:72:d9:07:e0:de:f1:54:a8:e7:5e:
         4c:85:e1:7f:0a:c7:65:c3:66:e5:2e:e6:91:33:d1:51:25:d4:
         0c:b0:a2:db:70:58:60:24:4e:0b:5e:22:c1:25:7e:cb:83:98:
         82:37:b9:e9:1c:97:7b:12:ad:e1:29:d1:b8:ab:98:6e:ee:04:
         11:09:73:fa:07:2a:27:46:16:df:46:c0:e7:44:7c:20:54:55:
         a6:0c:c1:68:33:78:d5:49:cd:63:4b:cb:89:cf:b5:a5:16:66:
         14:8b:f4:47:78:ea:55:6b:2f:82:16:66:a4:69:48:d4:a9:8c:
         26:8f:54:4e:0f:4c:53:55:d8:02:6e:ee:ee:5e:5f:43:b0:98:
         be:46:35:8f:a1:67:03:f0:6e:72:ff:07:cb:e5:27:c8:14:a5:
         28:04:a2:5c:be:60:4d:80:af:53:4a:5d:b0:84:42:9a:89:c6:
         92:e7:a2:5e:79:23:3c:8a:f1:52:d6:b4:68:48:25:bb:1d:80:
         1c:33:08:77:b3:06:2a:50:4e:05:61:1f:b0:b7:85:89:73:40:
         41:a1:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:13:48 2026 by rpki-client