This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer File: YgYKORQeYf1_hIcoAdkqSoCYD2o.cer (raw, json) Hash identifier: STTNJ7l3r7UAQxxGA89yc3KrrmdAe6EHC3VShBLH4Bo= Subject key identifier: 62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A75 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:07:36 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 137.158.0.0/16 IP: 192.48.253.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 09 Feb 2026 00:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6773 (0x1a75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:07:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36C4E2CAR, serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:fc:fd:9e:b7:e8:3f:c9:1a:ef:49:91:8f: 43:55:2b:08:c7:df:4b:1f:d0:9c:95:6e:17:55:92: 57:45:e7:0c:31:ea:d3:e1:8f:c1:89:8c:50:31:36: b2:09:8d:ca:f4:ab:46:14:b8:25:07:de:47:75:8d: 8c:8e:1a:a8:33:29:99:7d:26:ff:a9:28:0a:23:c7: df:05:52:53:7e:f0:02:ff:d1:df:8e:6e:d0:66:39: b8:3f:05:2c:fd:b0:ba:56:54:d8:6f:16:2a:39:fe: fb:18:67:e3:f1:b6:d4:f2:e2:0a:5a:a6:18:f1:c3: 25:1b:3d:bf:de:6b:28:7e:55:6c:a0:00:aa:82:c9: 3d:a0:db:64:d0:26:40:c4:c8:50:4d:e3:b8:e4:02: 28:52:58:db:ea:d1:ab:84:7f:8e:14:cc:72:65:8f: a0:ba:aa:fd:ee:8c:22:02:03:f9:38:81:1e:21:16: 1a:85:b5:ea:76:fc:c4:4a:ce:e5:70:04:d8:33:fb: fe:6d:d4:ca:f9:a4:ce:81:15:5b:80:f8:2c:7c:fe: de:a9:b0:89:24:ec:62:f3:92:7f:07:b6:fd:d5:aa: de:34:1f:ab:00:37:88:e6:95:d4:b6:ca:35:37:76: 8f:19:d7:35:0a:fc:35:d6:84:ba:c5:ec:74:f1:8b: 8a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft sbgp-ipAddrBlock: critical IPv4: 137.158.0.0/16 192.48.253.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:a8:ab:fe:53:a7:df:32:26:1f:65:9b:72:ae:c4:32:17:2e: 1d:94:37:bb:4f:ef:cd:06:e2:85:ba:5d:58:01:59:52:b6:90: 60:05:06:54:7e:7b:ed:a5:75:c4:ac:86:d9:37:7a:51:b2:85: cf:67:ee:be:52:37:82:96:3a:8b:e2:15:40:d4:64:3b:61:19: 2a:32:f4:ce:0c:48:3a:9e:3c:c8:de:89:89:e2:92:03:fb:73: 85:b7:94:ac:32:c0:fd:3c:e1:5e:a1:06:ae:bb:75:72:b5:60: f1:93:a6:7f:f0:46:3c:e0:d9:27:71:59:60:b7:38:60:b8:2d: eb:ca:57:bf:8f:56:4c:2f:78:cd:b0:3e:09:d6:80:5a:57:d9: b1:e7:94:f4:16:5f:41:b1:83:8d:c9:3d:ce:02:d7:e0:b8:df: 50:eb:d8:de:da:5c:95:93:75:60:05:57:7a:66:ae:b4:67:e2: 3f:3d:ba:db:78:bf:9d:ee:ee:05:16:94:12:90:93:48:86:71: 8f:49:95:5c:1b:65:7a:2c:cf:8f:e3:bf:7b:40:b4:58:84:0b: e2:3e:a7:ce:e3:08:ff:84:85:00:fa:6b:55:ec:b1:17:b0:0c: c0:f7:d1:df:39:58:b9:e5:e6:0a:92:bf:e0:09:01:29:dd:cf: e3:5f:fa:c8 -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgICGnUwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTA3MzZaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkM0RTJDQVIxMTAvBgNVBAUTKDYyMDYwQTM5MTQxRTYxRkQ3 Rjg0ODcyODAxRDkyQTRBODA5ODBGNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDaAvz9nrfoP8ka70mRj0NVKwjH30sf0JyVbhdVkldF5wwx6tPhj8GJ jFAxNrIJjcr0q0YUuCUH3kd1jYyOGqgzKZl9Jv+pKAojx98FUlN+8AL/0d+ObtBm Obg/BSz9sLpWVNhvFio5/vsYZ+PxttTy4gpaphjxwyUbPb/eayh+VWygAKqCyT2g 22TQJkDEyFBN47jkAihSWNvq0auEf44UzHJlj6C6qv3ujCICA/k4gR4hFhqFtep2 /MRKzuVwBNgz+/5t1Mr5pM6BFVuA+Cx8/t6psIkk7GLzkn8Htv3Vqt40H6sAN4jm ldS2yjU3do8Z1zUK/DXWhLrF7HTxi4rfAgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQU YgYKORQeYf1/hIcoAdkqSoCYD2owHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkM0RTJDL0Y0Qjg3 RDM4RkQ2NTExRUNCRTFFMDJFMkYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZDNEUyQy9GNEI4N0QzOEZENjUxMUVDQkUxRTAyRTJGMTIyMjQ2 OC9ZZ1lLT1JRZVlmMV9oSWNvQWRrcVNvQ1lEMm8ubWZ0MCQGCCsGAQUFBwEHAQH/ BBUwEzARBAIAATALAwMAiZ4DBADAMP0wDQYJKoZIhvcNAQELBQADggEBAFyoq/5T p98yJh9lm3KuxDIXLh2UN7tP780G4oW6XVgBWVK2kGAFBlR+e+2ldcSshtk3elGy hc9n7r5SN4KWOoviFUDUZDthGSoy9M4MSDqePMjeiYnikgP7c4W3lKwywP084V6h Bq67dXK1YPGTpn/wRjzg2SdxWWC3OGC4LevKV7+PVkwveM2wPgnWgFpX2bHnlPQW X0Gxg43JPc4C1+C431Dr2N7aXJWTdWAFV3pmrrRn4j89utt4v53u7gUWlBKQk0iG cY9JlVwbZXosz4/jv3tAtFiEC+I+p87jCP+EhQD6a1XssRewDMD30d85WLnl5gqS v+AJASndz+Nf+sg= -----END CERTIFICATE-----Generated at Sat Feb 7 07:13:47 2026 by rpki-client