This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
File:                     _zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer (raw, json)
Hash identifier:          iZBZ9R/VVTfIZdaFBrs6miPYdzwaRE2b0P/DB7Cwjfc=
Subject key identifier:   FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       196A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:31:49 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 45.221.12.0/22
                          IP: 169.255.216.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6506 (0x196a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:31:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F363C3E1AR, serialNumber=FF3363B1229D1BD9A944947D4DBBDD9E7E8249AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:ad:2c:4f:86:a5:91:8e:b5:2a:d7:e3:4c:
                    e2:35:c8:57:b8:80:bc:7d:af:30:c7:2f:1e:72:24:
                    4d:8e:0a:29:6a:cc:02:f3:39:f2:a2:8b:28:27:ba:
                    9b:4f:34:ff:e8:27:46:34:76:8d:e1:38:aa:9b:84:
                    fb:cc:56:95:e8:65:b7:8e:8c:2e:94:62:5a:34:41:
                    14:5c:09:32:60:7b:b0:6a:a1:c2:3c:39:b4:84:a3:
                    a0:68:ec:05:37:27:f0:46:d4:d2:5f:6d:9f:5f:56:
                    62:f1:3d:a2:21:d8:e1:b3:7a:72:9b:64:67:75:cf:
                    cf:8f:84:e1:4c:43:f2:2e:4c:eb:15:1e:10:99:80:
                    ea:53:3a:4d:0f:44:d8:85:c4:35:80:2e:c1:e3:9b:
                    6b:c8:18:97:c6:89:4a:88:99:46:12:cd:b6:c7:d1:
                    2b:55:31:a5:e1:b5:3a:2a:0f:cf:08:b2:2b:06:8f:
                    4a:3c:ed:d7:6a:74:c7:7e:80:71:c3:e1:cd:69:32:
                    24:2e:47:d7:4e:99:1a:4f:bb:da:b7:69:20:a2:15:
                    ac:db:ca:63:c8:f2:94:05:e6:a8:34:19:f0:98:cf:
                    a8:aa:81:8f:59:45:cc:db:8d:ea:c2:bf:61:3f:76:
                    29:11:df:47:1c:c2:4c:bc:80:1b:a9:1d:90:40:9f:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.12.0/22
                  169.255.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:14:71:5a:b3:f0:e1:17:eb:85:2a:ea:7b:d0:f4:18:2c:6b:
         bf:01:02:14:b8:71:bb:96:7a:07:00:a4:e9:3f:bf:8a:6e:12:
         01:3c:01:a0:59:77:4f:cb:cc:c3:0d:f4:b6:13:c3:9b:d0:f9:
         c2:d0:e9:ff:02:cb:f1:32:70:54:cc:ce:a5:8e:51:a5:11:fb:
         bf:86:1e:9f:e6:f2:ea:85:89:95:e0:4e:c4:64:b2:e9:12:f9:
         e1:89:64:7d:ff:30:d9:2d:7c:4e:d4:de:9a:a9:0a:82:a0:64:
         b2:91:ac:a9:64:e8:52:73:f7:86:01:1e:13:fe:b7:05:59:a4:
         c2:dc:5e:2d:79:9d:39:f4:d2:8d:16:f3:81:34:b6:46:84:0b:
         e1:bc:ed:45:d1:44:89:b2:65:7c:b4:18:a3:7b:bf:61:55:af:
         d8:a2:55:ae:64:71:7f:42:ba:ca:b9:a6:95:5d:90:e4:95:6e:
         d5:6b:75:72:8e:51:fb:82:73:86:a8:c1:d2:3a:b3:d6:c1:5f:
         b9:0b:fb:30:ed:d8:43:24:2c:7f:f1:c8:a2:5b:63:58:bc:7b:
         18:fe:58:43:91:6c:8f:2b:88:2b:d7:46:6d:c0:12:f5:35:f2:
         19:d6:f8:32:45:3d:7d:9a:6e:78:16:40:ce:87:b0:a8:02:c4:
         50:86:f0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:12:58 2026 by rpki-client