This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/a8q8TzeM0E56oT9j1SDUlbZiK-k.cer
File:                     a8q8TzeM0E56oT9j1SDUlbZiK-k.cer (raw, json)
Hash identifier:          BM0Bj2lMdsELgCHImhuNVciEFtit/H21SZ7ASB+/59U=
Subject key identifier:   6B:CA:BC:4F:37:8C:D0:4E:7A:A1:3F:63:D5:20:D4:95:B6:62:2B:E9
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1AD2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 07 Jan 2026 21:48:55 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 164.160.120.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6866 (0x1ad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  7 21:48:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F369B304AR, serialNumber=6BCABC4F378CD04E7AA13F63D520D495B6622BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:8d:7a:74:12:dd:85:ec:38:29:e5:46:8d:
                    d7:28:dd:17:cc:2e:4b:ea:81:1e:45:6e:81:bd:aa:
                    18:45:4f:ac:41:09:ca:0c:3d:a9:1b:37:3d:65:6f:
                    27:27:8a:5c:98:e3:a0:cb:76:b0:51:0e:f6:c7:80:
                    ba:03:b3:fb:43:f2:05:04:4d:9a:c4:a7:6d:8a:67:
                    ec:72:a6:a7:08:4a:47:9d:5f:8d:d9:8b:c2:e0:70:
                    69:6c:af:88:46:26:dc:2f:5e:ef:63:71:5e:c3:c7:
                    59:34:7e:c5:68:16:f8:39:dc:b0:4a:79:98:06:99:
                    7c:aa:72:7e:6a:22:9d:32:c7:6b:28:ba:42:f0:89:
                    a6:58:b9:b4:ad:b4:c1:ac:20:34:32:2a:b8:39:64:
                    84:e3:cd:59:14:63:32:6a:59:a4:af:f2:3e:c3:2f:
                    89:a6:0f:07:c0:18:44:47:bd:40:d5:cd:ee:85:1d:
                    0f:59:97:2e:a8:68:2d:e4:20:56:8f:d5:41:51:f6:
                    ac:d6:d4:b0:fb:ad:6a:f4:63:31:f3:6b:60:42:bc:
                    8f:f9:ae:b7:43:3c:c3:49:3b:05:cf:fa:cc:c6:91:
                    fd:2a:73:f4:c6:79:80:67:c9:20:5f:f2:52:08:45:
                    b1:b9:9a:d2:d8:c9:14:f9:15:fe:b5:45:22:9e:61:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CA:BC:4F:37:8C:D0:4E:7A:A1:3F:63:D5:20:D4:95:B6:62:2B:E9
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/A55DFDAEEC1211F0819B4CA0DAE4EC9C/a8q8TzeM0E56oT9j1SDUlbZiK-k.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:71:3a:e5:7e:f7:7d:2b:73:bf:ad:1c:39:5e:38:b2:73:84:
         cc:35:d1:b5:b1:48:23:b7:87:0b:6c:30:5d:ac:c9:9e:e3:66:
         cf:85:bf:64:dd:8d:c3:2f:26:10:ef:20:fe:84:90:78:d9:9a:
         de:8d:52:ee:bb:5e:49:01:ce:3d:a8:1e:db:b5:d9:ef:5b:09:
         65:07:b1:a5:a9:4f:5b:5d:b6:d0:fd:d2:6b:5c:4c:3d:d0:43:
         e3:14:8e:6e:34:c3:6d:0e:de:b8:fe:c6:c8:49:a7:f6:81:6b:
         01:63:5a:97:2b:2a:92:46:3b:29:06:67:91:b0:34:40:95:8f:
         20:57:e9:e5:e8:e3:10:4e:cd:d9:39:d5:93:e9:bf:4b:fb:a3:
         d9:66:e2:98:78:44:6e:a2:09:c4:0c:be:45:af:d1:d1:12:bc:
         82:4c:ea:ee:87:5f:4e:00:fe:38:6a:58:5f:41:7b:a1:30:b4:
         9a:64:42:61:0f:32:8d:f8:e1:33:20:af:fd:3c:50:51:3d:aa:
         d4:e7:f5:d5:6c:df:f2:54:96:19:04:06:70:02:c0:b6:65:1f:
         ee:4b:7c:83:0b:12:93:e8:c0:65:b8:dc:14:97:50:b1:7d:63:
         79:4a:30:bf:cb:0d:61:7f:b0:97:90:b0:80:40:4a:0c:1b:a4:
         b0:0a:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:12:06 2026 by rpki-client