This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
File:                     MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer (raw, json)
Hash identifier:          PXqeTpJuW2aLyIRxrGakHFNgy0X32ek01TVYCuSN4f8=
Subject key identifier:   33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A1C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:56:36 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 164.88.0.0/16
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6684 (0x1a1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:56:36 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3691854AR, serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:29:b2:17:55:1e:f4:df:05:32:d8:d8:2a:
                    97:45:2f:7c:ce:31:43:ae:8f:ef:cd:21:90:10:3e:
                    33:1e:0a:c8:ea:bb:97:c8:a3:86:a1:8e:90:48:9d:
                    d7:b1:45:59:a3:b9:4f:f2:27:f5:73:08:91:c5:5f:
                    36:69:d2:7e:9a:70:37:51:0f:64:81:f4:1e:fe:c0:
                    05:21:6c:6a:37:d2:07:bb:1e:ce:42:ef:23:19:81:
                    b6:0d:d6:d5:73:5b:74:8c:fd:45:d7:7e:15:ee:0b:
                    f2:96:44:92:21:a8:67:78:30:76:14:39:3f:e3:8e:
                    fe:2e:53:1f:ca:62:20:8d:09:95:bf:f4:e8:d5:ec:
                    90:16:8e:04:f2:7a:5f:b1:f8:4f:d5:76:69:6b:fd:
                    29:4d:17:04:53:00:00:b6:fe:b6:7a:84:19:02:bc:
                    85:3e:e9:f2:c4:de:84:97:e4:72:22:29:11:28:b1:
                    4e:ae:a5:b1:8c:63:91:bd:77:aa:08:16:db:a6:b8:
                    2d:09:e6:75:25:7e:4d:b6:48:71:dd:1f:03:2a:fb:
                    08:37:eb:61:fe:c5:b9:78:d6:16:61:77:c2:4c:c2:
                    0f:61:19:e1:5f:48:89:14:6d:b8:60:69:90:b5:e4:
                    9b:39:4b:4a:2c:ea:20:a6:8a:c8:a4:08:22:a5:75:
                    b4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:08:1e:a2:a8:6e:b5:f0:8f:06:bf:53:21:16:a3:6b:ca:b5:
         42:a1:73:1b:ee:10:85:82:62:f3:2e:e2:2e:a6:6e:1b:d7:5e:
         5d:0d:f3:61:4a:bc:18:0d:f6:15:74:ca:cf:7d:60:51:78:5d:
         97:0b:d7:a4:7e:05:a1:00:15:9f:1b:8b:fa:c0:00:ef:6c:db:
         03:5a:61:52:5c:fe:99:90:68:90:3c:6f:e9:af:f5:60:d4:9f:
         8b:94:35:de:32:88:0f:b0:ab:17:90:c4:a9:0f:a7:84:9a:b7:
         39:02:48:16:f8:56:f1:74:01:b4:18:51:36:fc:16:7c:1c:3d:
         38:a6:b0:7f:bb:9f:ea:a5:1f:b6:a7:73:a6:d5:14:9b:d2:cb:
         23:5a:72:19:a0:d4:34:38:06:d2:9d:9e:bb:65:e4:60:6b:fc:
         94:35:15:0b:c3:1d:7f:a7:c0:63:83:54:a3:12:a3:84:bc:b7:
         de:3b:69:50:85:62:38:04:57:f7:ed:5c:4f:4a:ed:47:17:83:
         47:03:4a:3a:49:02:18:a2:b9:a0:42:00:83:69:d3:6a:8d:6b:
         80:de:01:dc:fe:3b:c7:d5:52:bb:51:c7:d2:b3:08:ba:16:4c:
         ee:a2:59:10:15:d3:60:cf:c1:50:b2:a7:0c:47:ea:80:33:4c:
         e9:1c:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:14:14 2026 by rpki-client