This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer File: HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer (raw, json) Hash identifier: 8rL5sPygWqbDN9oj7HTh2oMQWKj7MGekl/zbWbxMvC8= Subject key identifier: 1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 18F9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 13 Nov 2025 07:17:06 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 165.90.240.0/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 06 Dec 2025 09:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6393 (0x18f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Nov 13 07:17:06 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=F362D462AR, serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:aa:04:ef:44:7e:14:d8:99:71:70:0c:6d: 2a:eb:66:a3:4a:60:8e:6e:29:6e:0c:79:9b:76:cd: b2:d4:8f:3d:06:4d:f7:08:66:a2:a5:81:02:d9:65: 86:a3:ea:10:66:76:40:74:0e:74:86:39:83:66:3f: c8:37:ab:72:91:31:3b:f4:56:8d:46:58:ea:c1:e0: ba:2d:31:cc:9c:fd:af:98:f6:9a:a4:d4:14:fd:de: e7:bd:18:4b:9a:57:8c:52:ed:ba:da:2c:de:ba:48: 3a:59:5d:e7:a1:11:64:98:97:81:56:d5:6b:48:6f: fb:b7:b2:44:19:ab:57:0c:2e:f7:3b:25:0e:66:a7: 0d:55:52:af:b7:f8:59:bb:c7:86:16:49:22:54:d2: d9:b2:93:fd:cd:d7:9e:a9:c9:04:96:34:69:57:5c: 59:df:4a:7e:66:c0:1a:ee:b5:9f:cb:61:4b:6a:04: f3:08:36:55:d7:a5:e1:51:81:c0:9c:91:d4:43:7d: d1:8d:28:53:ff:ec:dd:a9:3a:90:3e:17:5e:e4:04: a5:5d:c3:bb:e3:6e:21:c4:60:ee:90:6c:cc:d2:9f: ec:0a:64:47:17:74:77:e0:6c:12:30:c7:80:ba:84: 00:14:42:be:80:e4:d4:72:1b:10:81:41:e2:98:36: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft sbgp-ipAddrBlock: critical IPv4: 165.90.240.0/20 Signature Algorithm: sha256WithRSAEncryption 17:5c:cf:62:7b:9d:7f:02:18:8b:20:e5:ce:53:cf:07:24:56: 62:3f:22:8d:2a:75:3f:81:f1:13:db:51:14:97:fe:98:3c:6a: 06:ea:7d:65:e0:2f:9b:90:1e:c9:12:94:70:c5:af:f0:3f:50: cf:34:7c:98:76:db:81:3d:74:fd:6c:6e:59:5b:a9:01:bf:77: 18:27:7b:d4:9b:17:7e:1a:05:4d:62:64:40:b1:c8:82:36:b7: aa:5f:07:d9:b4:96:89:5a:ef:d6:02:ad:a3:b3:95:50:32:27: 32:bd:42:8f:a4:bd:83:c3:31:58:67:fd:ae:15:1d:e5:fd:07: 10:79:49:ea:68:2e:24:5d:41:1e:14:7a:c4:35:c6:6a:c2:84: 94:86:c3:49:7e:03:61:65:07:5b:da:5e:46:10:1b:81:fe:ff: 2d:32:b2:e3:4c:64:ca:b6:70:72:ee:f0:ef:3a:fb:5e:f3:3e: 39:f1:42:1e:1a:97:35:3d:b6:af:ba:b8:59:63:b4:85:56:6a: 34:78:4c:3d:28:db:e6:25:f5:dd:2c:19:b9:e0:60:92:d7:7f: ef:06:69:91:e8:15:8f:80:34:1c:b3:d4:c1:65:58:1c:2c:02: 70:15:f3:48:91:4a:89:d2:36:e9:8c:ed:a3:36:ec:cf:86:af: 0e:cf:88:c0 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGPkwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNTExMTMwNzE3MDZaFw0yNjAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjJENDYyQVIxMTAvBgNVBAUTKDFFNTNBOUNEQkZFNUMyNTI2 MzU4MkZCQjAyNkIwNEQwMjA0QjYwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC3n6oE70R+FNiZcXAMbSrrZqNKYI5uKW4MeZt2zbLUjz0GTfcIZqKl gQLZZYaj6hBmdkB0DnSGOYNmP8g3q3KRMTv0Vo1GWOrB4LotMcyc/a+Y9pqk1BT9 3ue9GEuaV4xS7braLN66SDpZXeehEWSYl4FW1WtIb/u3skQZq1cMLvc7JQ5mpw1V Uq+3+Fm7x4YWSSJU0tmyk/3N156pyQSWNGlXXFnfSn5mwBrutZ/LYUtqBPMINlXX peFRgcCckdRDfdGNKFP/7N2pOpA+F17kBKVdw7vjbiHEYO6QbMzSn+wKZEcXdHfg bBIwx4C6hAAUQr6A5NRyGxCBQeKYNkcLAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU HlOpzb/lwlJjWC+7AmsE0CBLYAkwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjJENDYyL0JENjY4 NDA4QzA2MDExRjBBMTQ5N0NCOURBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzYyRDQ2Mi9CRDY2ODQwOEMwNjAxMUYwQTE0OTdDQjlEQUU0RUM5 Qy9IbE9wemJfbHdsSmpXQy03QW1zRTBDQkxZQWsubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQEpVrwMA0GCSqGSIb3DQEBCwUAA4IBAQAXXM9ie51/AhiL IOXOU88HJFZiPyKNKnU/gfET21EUl/6YPGoG6n1l4C+bkB7JEpRwxa/wP1DPNHyY dtuBPXT9bG5ZW6kBv3cYJ3vUmxd+GgVNYmRAsciCNreqXwfZtJaJWu/WAq2js5VQ MicyvUKPpL2DwzFYZ/2uFR3l/QcQeUnqaC4kXUEeFHrENcZqwoSUhsNJfgNhZQdb 2l5GEBuB/v8tMrLjTGTKtnBy7vDvOvte8z458UIeGpc1PbavurhZY7SFVmo0eEw9 KNvmJfXdLBm54GCS13/vBmmR6BWPgDQcs9TBZVgcLAJwFfNIkUqJ0jbpjO2jNuzP hq8Oz4jA -----END CERTIFICATE-----Generated at Thu Dec 4 22:52:53 2025 by rpki-client