This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
File:                     YAxslYLhTzef1aWysY2CLjZRry4.cer (raw, json)
Hash identifier:          Jy9cmu4Y8UOLbUTimddnucFMBH6mS2qnAnyyzqMYoaE=
Subject key identifier:   60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1968
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:31:34 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 45.221.64.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6504 (0x1968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:31:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:b2:2b:e7:77:6c:50:a2:30:1b:43:b5:6d:
                    55:db:bb:96:30:f2:60:1f:05:25:62:f9:5f:6d:0f:
                    72:3f:5e:13:0c:1b:b6:e6:26:57:e3:39:57:22:0d:
                    e7:f5:d5:55:30:0d:d6:86:9a:bf:dd:d1:dd:16:7f:
                    74:ae:0a:78:5d:b1:0d:b3:e6:74:c1:59:f8:47:8b:
                    a7:60:73:15:76:09:11:2d:8b:1a:c4:20:79:2d:be:
                    c3:10:c4:99:3f:97:28:16:e3:b1:97:b2:7e:a9:c9:
                    64:d4:40:46:7d:ff:ee:2d:d9:84:8f:87:f9:9f:6d:
                    2b:d0:75:4e:ac:b2:8f:bc:6e:82:e8:9f:a7:9d:8f:
                    68:ce:b0:65:4d:84:dc:f2:2f:69:86:72:96:24:57:
                    70:eb:5a:cf:03:85:4c:28:4d:c7:29:fe:3b:b0:cc:
                    26:d6:67:c4:82:a0:4d:9e:d9:a0:06:bf:5a:27:4a:
                    8b:5f:b0:72:80:b2:42:ac:00:14:43:1d:76:e2:53:
                    ca:95:f0:81:0a:90:e6:3d:65:ff:c9:29:d5:30:70:
                    01:6d:f9:8e:32:a8:7d:34:ae:22:fb:ce:32:24:88:
                    b9:df:e9:aa:ca:bb:5c:73:16:c7:ea:7a:07:69:dd:
                    56:ab:4e:3f:ab:b5:4e:ed:00:a6:f6:68:eb:af:f7:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:0b:25:01:ff:bf:47:45:fe:08:72:33:0d:ca:2c:52:43:13:
         8a:d6:0f:e6:8a:3a:19:fa:00:ef:83:26:60:17:78:60:1f:9f:
         66:f1:87:1e:d7:5a:80:2b:d0:4c:36:52:98:41:79:83:0e:ee:
         82:a2:f3:70:2a:db:98:3b:9b:82:32:0d:6e:2a:50:03:27:6e:
         48:96:fb:36:41:85:99:9e:30:a1:28:30:e1:69:f2:7c:c3:94:
         f3:a2:9e:bf:27:f1:eb:91:a1:b5:d6:d1:9f:61:32:55:85:cb:
         a9:17:21:e2:6d:e8:40:67:29:3e:b8:cc:45:2d:91:a2:a5:3b:
         55:29:4a:08:44:41:f0:f8:c0:20:45:81:63:56:49:8e:ce:32:
         fa:41:74:69:33:b1:bd:62:4f:96:bb:dc:6e:f0:9a:05:be:e5:
         48:66:cd:ae:3d:32:36:27:4a:6e:3a:dc:65:dd:3c:a5:cf:eb:
         ae:e7:49:e2:66:d9:0c:7c:4a:9d:60:a1:1e:55:11:91:b4:52:
         88:71:64:b2:5a:33:10:69:84:7b:74:02:e3:8d:19:b3:f5:4f:
         4b:9c:eb:31:c8:91:73:26:0b:a3:3a:bb:93:55:72:6c:d8:bf:
         8b:e7:f3:6c:9b:32:29:1b:1f:6f:dc:40:3b:25:1c:38:fd:91:
         4f:df:5d:25
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICGWgwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDMxMzRaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjNCQTE5QVIxMTAvBgNVBAUTKDYwMEM2Qzk1ODJFMTRGMzc5
RkQ1QTVCMkIxOEQ4MjJFMzY1MUFGMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDVr7Ir53dsUKIwG0O1bVXbu5Yw8mAfBSVi+V9tD3I/XhMMG7bmJlfj
OVciDef11VUwDdaGmr/d0d0Wf3SuCnhdsQ2z5nTBWfhHi6dgcxV2CREtixrEIHkt
vsMQxJk/lygW47GXsn6pyWTUQEZ9/+4t2YSPh/mfbSvQdU6sso+8boLon6edj2jO
sGVNhNzyL2mGcpYkV3DrWs8DhUwoTccp/juwzCbWZ8SCoE2e2aAGv1onSotfsHKA
skKsABRDHXbiU8qV8IEKkOY9Zf/JKdUwcAFt+Y4yqH00riL7zjIkiLnf6arKu1xz
Fsfqegdp3VarTj+rtU7tAKb2aOuv9/fZAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
YAxslYLhTzef1aWysY2CLjZRry4wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3
M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYzQkExOS9GQkNDNzNCNjk2MjkxMUVDOTVCN0IxRTA1QTQwRDU3
Ny9ZQXhzbFlMaFR6ZWYxYVd5c1kyQ0xqWlJyeTQubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDLd1AMA0GCSqGSIb3DQEBCwUAA4IBAQBbCyUB/79HRf4I
cjMNyixSQxOK1g/mijoZ+gDvgyZgF3hgH59m8Yce11qAK9BMNlKYQXmDDu6CovNw
KtuYO5uCMg1uKlADJ25Ilvs2QYWZnjChKDDhafJ8w5Tzop6/J/HrkaG11tGfYTJV
hcupFyHibehAZyk+uMxFLZGipTtVKUoIREHw+MAgRYFjVkmOzjL6QXRpM7G9Yk+W
u9xu8JoFvuVIZs2uPTI2J0puOtxl3Tylz+uu50niZtkMfEqdYKEeVRGRtFKIcWSy
WjMQaYR7dALjjRmz9U9LnOsxyJFzJgujOruTVXJs2L+L5/NsmzIpGx9v3EA7JRw4
/ZFP310l
-----END CERTIFICATE-----
Generated at Wed Jan 21 06:51:31 2026 by rpki-client