This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
File:                     bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer (raw, json)
Hash identifier:          OSdz+0xmYiKvXi4aRvEpA19LNhxUQWvnD3uJ/qlPmgU=
Subject key identifier:   6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       197A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:33:45 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 156.160.0.0/11
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6522 (0x197a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:33:45 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36432B6AR, serialNumber=6EA98013EE10BFB53A30273B6C4CFB5ECE74618B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:d1:ba:c4:55:ea:b5:c0:b1:80:6c:be:a5:
                    77:98:75:86:9a:9f:da:d6:0e:ce:2e:ad:f7:c3:d6:
                    c3:c3:57:ca:23:8c:6f:ed:55:2f:70:d8:9f:c0:3d:
                    f8:21:9d:f1:8c:17:33:d9:0d:7c:82:08:7c:bc:08:
                    51:5a:ca:f6:58:b9:05:b9:52:f6:a8:67:31:ed:71:
                    f7:98:10:ea:03:df:dc:9c:7e:0e:85:c4:a3:df:a4:
                    4f:49:91:98:41:90:a7:c1:a5:ee:51:ee:7b:e7:29:
                    55:68:72:88:b7:b3:cc:c5:bf:66:60:94:2a:85:9b:
                    11:88:35:1a:e2:f6:7c:42:0d:cc:12:bf:93:96:c8:
                    47:f5:41:6c:f6:26:3c:61:90:ea:c5:50:90:8d:0a:
                    9d:fd:90:93:b7:ac:04:a4:a8:0b:ea:db:10:71:02:
                    3d:47:dd:7e:79:19:36:98:a2:a7:4b:ff:74:e2:76:
                    16:e4:0c:6e:9d:1b:67:1a:bc:46:67:b8:94:ac:f8:
                    09:d0:ba:96:1b:08:4f:e7:35:71:69:74:f0:57:53:
                    07:83:c1:f2:4c:ee:5d:15:f8:15:22:89:2f:cd:d2:
                    d2:fc:26:19:13:d3:43:bb:a2:c6:88:14:43:a2:d4:
                    5d:fc:89:bb:4b:ac:d3:86:88:23:d0:90:0e:fa:d9:
                    48:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.160.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         62:6f:e1:b6:a3:b6:b6:f0:c8:25:0d:18:b8:47:31:9b:b3:ab:
         ca:4a:c7:f9:dc:26:a2:b8:d4:48:1d:4e:f5:13:cc:ae:2f:10:
         c5:fb:e1:b0:b7:92:38:6c:2a:26:4b:c6:70:5a:1f:c3:e3:d5:
         d3:13:ad:84:9e:6e:c4:6e:55:75:f4:f1:dc:0c:fa:1d:5a:0f:
         cc:ca:e7:95:8e:96:0a:8f:e7:db:34:92:d2:a5:51:23:0a:b6:
         49:63:49:0e:5c:31:59:a2:0d:0e:fe:dd:41:fa:7b:96:2a:ce:
         e5:9a:a7:95:ca:6f:af:3a:19:fc:f0:b5:d5:fb:6e:c5:96:4e:
         05:5c:26:22:5b:36:46:96:7d:5b:c1:af:65:ea:5d:83:83:05:
         c6:84:2d:e3:26:0a:f6:0c:a8:b3:da:30:17:6b:2d:56:3f:fc:
         eb:3d:ef:96:67:74:88:ea:89:88:44:4e:78:e9:fd:7c:ea:59:
         05:6d:43:05:8b:14:eb:76:31:aa:30:eb:4f:cc:38:d1:74:7d:
         9b:fc:5c:63:13:05:d1:b2:2c:68:8a:ec:f1:d0:e8:3e:a0:94:
         0b:2f:96:ac:44:5e:6c:33:5f:74:e6:45:8f:2f:58:5d:4b:05:
         ff:09:97:c7:ba:cf:78:e5:33:3c:26:4e:80:da:62:09:d1:fb:
         a6:62:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:13:36 2026 by rpki-client