This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer
File:                     W6zoN39KxIJPmq_HsThFyWtgsko.cer (raw, json)
Hash identifier:          d6rCeiMK5u8dGznbaI3NOcXcGGTjpxiTYq4lXGLW1RE=
Subject key identifier:   5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1970
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:32:32 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 165.16.224.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6512 (0x1970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:32:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F363E214AR, serialNumber=5BACE8377F4AC4824F9AAFC7B13845C96B60B24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:3e:39:eb:0e:ee:1f:a3:3f:c3:ee:62:56:
                    e9:94:83:5d:fc:44:91:2a:0a:7a:7c:b5:89:48:7b:
                    60:b7:b7:1d:fe:1c:9f:81:fc:90:c5:d1:fb:c6:a7:
                    5f:b8:d4:46:23:e9:4e:10:e6:f9:d9:0a:dc:01:ef:
                    a4:e7:ac:68:0d:62:ec:13:09:bd:aa:d6:92:ea:87:
                    3a:6f:ef:26:72:6d:96:92:de:f4:1b:25:58:39:11:
                    40:21:cd:00:b6:c4:52:45:bd:e7:9c:45:36:b8:84:
                    68:67:1a:e1:22:db:c2:22:72:ef:c5:be:88:50:95:
                    cd:b8:56:5d:52:be:0c:75:95:cd:b8:2a:95:20:fe:
                    f8:60:db:3c:0f:19:7a:b6:ab:80:79:0b:68:5a:98:
                    a0:67:0d:b7:b3:84:04:a0:db:0d:7f:d3:17:b1:ce:
                    80:2a:46:cd:ea:05:28:b5:b7:4d:aa:b1:5d:f8:1b:
                    f3:31:ac:48:41:2e:04:59:dd:dc:c8:f9:bf:3a:ff:
                    e5:74:d7:89:8e:2c:42:83:2a:bf:ef:64:2f:38:77:
                    96:0c:1d:17:6b:86:e0:b0:d2:c8:e3:da:d7:f6:ea:
                    b6:98:5e:81:c9:af:45:40:6e:8e:71:07:46:cc:3d:
                    ff:26:d8:16:aa:b3:37:11:94:49:ae:0b:b7:ae:d2:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:03:77:5f:83:6d:25:87:9f:ea:03:b7:51:f0:98:10:52:ad:
         f5:bd:96:2e:c0:a3:18:19:fa:8e:58:f6:af:0b:f0:c4:b5:c9:
         04:f6:c5:7b:b7:38:ee:e3:65:0f:04:d7:93:8b:e6:c9:9e:fc:
         ad:33:1d:0f:a5:f5:0c:90:11:e4:47:fc:c9:21:7d:ea:be:dc:
         09:7f:5f:f9:96:fd:26:3b:57:63:95:49:ac:c3:d0:9c:85:96:
         83:c0:46:df:c6:f9:91:f3:55:ee:67:4c:0e:ec:f3:90:3e:20:
         9c:c7:ff:b4:95:3d:fa:72:36:46:0a:8f:35:16:20:c8:45:55:
         8a:25:de:8c:b5:4e:b0:6c:4b:de:3d:27:c4:36:35:0f:92:d2:
         13:a9:1b:a2:96:36:ff:e4:f2:33:68:30:31:1d:96:8f:bc:c4:
         7b:d6:2d:eb:35:46:5c:5b:68:28:e6:a4:8c:dd:51:e9:e6:d3:
         f9:57:3b:38:ef:2d:24:95:3d:99:35:93:92:c4:b5:7b:7f:cb:
         07:5d:6d:58:7f:b9:51:5f:25:c7:c6:64:52:4e:c6:49:b1:29:
         08:55:77:9f:8e:b8:6d:cf:63:5c:5e:ec:41:36:a5:a4:62:15:
         26:cd:86:50:49:cd:02:6a:ab:1f:5a:c9:96:90:8d:07:bf:6c:
         b5:f4:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:15:04 2026 by rpki-client