This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer File: bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer (raw, json) Hash identifier: H5zPcSMkZ12bqAuItDgZjHNE/r/mpi1ntbs8cEtW50k= Subject key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A7D Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:08:32 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.119.240.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 09 Feb 2026 00:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6781 (0x1a7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:08:32 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:4c:43:40:cb:f7:cd:de:14:4b:b7:ab:f1: 4c:e2:68:26:dc:8b:55:b8:50:8e:5f:7f:00:5a:87: f8:af:15:75:3f:94:e8:30:78:af:1e:9b:26:18:7a: 4f:36:4b:2b:2e:4b:a4:f7:38:83:2c:9e:f4:2a:a8: 5c:ea:c9:4d:36:0d:90:89:e9:7b:98:b7:0c:04:7a: 88:dc:23:b6:99:c5:f1:e5:4e:25:20:09:63:8c:f0: bb:0d:05:5a:fa:87:bf:69:1d:9c:bc:10:79:22:9b: 38:c7:69:db:d3:c2:f9:31:ae:41:dd:fa:f6:00:40: b4:71:d1:6c:11:90:2b:bd:b4:f5:ad:8a:4b:86:36: a4:56:ea:cb:94:3b:74:d8:73:67:a7:20:7a:a8:ab: db:f5:b9:02:b0:fb:f2:48:22:09:a4:6c:5d:02:0b: 90:c3:27:1c:f7:f0:a0:46:d2:92:0e:f2:0e:42:d3: 1d:b2:a5:03:b3:7a:31:3c:3e:8b:04:9f:0b:04:0a: 5a:d5:13:c9:3b:5b:17:2f:1a:d9:b1:d8:89:e0:72: 38:27:fd:fc:00:90:5a:62:09:4d:49:ee:cf:e6:ee: c2:53:68:12:0a:ab:d2:af:ac:26:17:a1:98:ab:30: 2b:20:57:b6:34:8d:28:94:1e:8c:dd:ff:0e:1d:99: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft sbgp-ipAddrBlock: critical IPv4: 160.119.240.0/22 Signature Algorithm: sha256WithRSAEncryption 27:b7:b0:05:89:21:4f:3c:88:b3:4f:90:66:91:82:02:1d:43: a7:20:a0:31:10:e7:05:39:90:d3:b1:f6:0f:ed:98:56:e3:bf: da:3b:6b:3a:78:cf:ea:d7:9a:94:a5:0c:ff:f0:f1:1b:76:84: 1d:3d:2a:d1:c6:a6:3d:e0:14:57:21:de:84:b8:12:20:7f:28: 8b:f5:87:13:d1:e0:23:e7:af:4c:ab:b6:e6:0c:b7:06:bd:f2: 0e:76:4b:37:05:eb:b6:89:30:53:93:98:ed:0d:f9:7a:52:b3: ab:98:7f:b0:5f:d1:5e:3c:f3:ef:c7:42:c0:f9:b4:3c:f5:1e: e6:4e:23:03:eb:91:16:fb:3d:8c:66:72:2d:e8:19:fa:8e:ee: b4:01:b2:ad:bd:d8:88:09:16:bf:63:21:46:01:d7:90:c5:e9: 67:d2:5c:5e:99:65:66:46:6d:42:eb:7f:08:51:c5:da:f5:fe: 4f:57:b4:fe:1e:50:88:6d:5b:a9:8e:0d:a1:1a:b6:a1:a7:13: b2:73:9f:df:86:a0:80:c2:f0:aa:7b:71:61:ab:b0:fc:ba:9f: c8:cc:e8:fe:8f:a1:ba:e7:eb:21:72:1a:78:b9:20:f7:4f:41: 54:c9:61:e3:7e:c6:21:ed:e3:4a:7f:9a:d7:36:de:f4:e6:d4: ff:70:73:a2 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGn0wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTA4MzJaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkM5NUYxQVIxMTAvBgNVBAUTKDZDNzM1MDc1QjI4NkVFNEFF Q0JDQzE4MTAzQjYwNkM0MEI3NkI0RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCvYUxDQMv3zd4US7er8UziaCbci1W4UI5ffwBah/ivFXU/lOgweK8e myYYek82SysuS6T3OIMsnvQqqFzqyU02DZCJ6XuYtwwEeojcI7aZxfHlTiUgCWOM 8LsNBVr6h79pHZy8EHkimzjHadvTwvkxrkHd+vYAQLRx0WwRkCu9tPWtikuGNqRW 6suUO3TYc2enIHqoq9v1uQKw+/JIIgmkbF0CC5DDJxz38KBG0pIO8g5C0x2ypQOz ejE8PosEnwsEClrVE8k7WxcvGtmx2Ingcjgn/fwAkFpiCU1J7s/m7sJTaBIKq9Kv rCYXoZirMCsgV7Y0jSiUHozd/w4dmfB1AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU bHNQdbKG7krsvMGBA7YGxAt2tOQwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkM5NUYxLzNBRjBC Njc0RjM5NjExRUJCMDRDREE0N0Q4QTAxNENFLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZDOTVGMS8zQUYwQjY3NEYzOTYxMUVCQjA0Q0RBNDdEOEEwMTRD RS9iSE5RZGJLRzdrcnN2TUdCQTdZR3hBdDJ0T1EubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCoHfwMA0GCSqGSIb3DQEBCwUAA4IBAQAnt7AFiSFPPIiz T5BmkYICHUOnIKAxEOcFOZDTsfYP7ZhW47/aO2s6eM/q15qUpQz/8PEbdoQdPSrR xqY94BRXId6EuBIgfyiL9YcT0eAj569Mq7bmDLcGvfIOdks3Beu2iTBTk5jtDfl6 UrOrmH+wX9FePPPvx0LA+bQ89R7mTiMD65EW+z2MZnIt6Bn6ju60AbKtvdiICRa/ YyFGAdeQxeln0lxemWVmRm1C638IUcXa9f5PV7T+HlCIbVupjg2hGrahpxOyc5/f hqCAwvCqe3Fhq7D8up/IzOj+j6G65+shchp4uSD3T0FUyWHjfsYh7eNKf5rXNt70 5tT/cHOi -----END CERTIFICATE-----Generated at Sat Feb 7 07:13:37 2026 by rpki-client