This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
File:                     h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer (raw, json)
Hash identifier:          udv89M6g01PBDqL6jA6nK7o9ISkQkciCJNVZGSB/ous=
Subject key identifier:   87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       19A2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:38:50 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 165.90.0.0/19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6562 (0x19a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:38:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3658AF9AR, serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:f7:ce:d2:86:e7:0e:d6:10:71:cc:da:4f:
                    60:3f:b6:83:93:77:26:60:ae:4a:9c:db:0b:ef:34:
                    04:a5:b1:27:b0:c6:00:e4:ab:2d:d6:29:ae:23:ad:
                    c4:fa:d8:b5:02:22:48:52:33:f7:8e:02:89:3b:91:
                    aa:ed:e3:ba:39:19:1d:f0:fa:13:7d:90:19:3b:34:
                    3c:b3:40:bb:58:2c:04:11:9d:31:48:09:eb:49:18:
                    db:d2:4e:7d:ed:1c:3e:6c:86:ca:15:d0:95:b5:3c:
                    61:30:d6:54:f6:4f:77:8a:05:16:04:e2:9c:24:f0:
                    fa:71:19:24:f7:22:59:ba:e5:28:22:98:7e:42:7d:
                    b2:e2:89:a8:65:ff:4e:ae:30:47:35:3c:49:bb:e4:
                    8c:66:19:77:f6:75:3c:d2:9b:c1:68:fa:d0:ab:36:
                    c6:2b:99:bd:28:d1:75:4c:69:c8:54:00:14:c1:62:
                    fc:46:73:aa:4d:02:8b:f9:29:b5:64:4a:2c:10:06:
                    f4:89:08:f6:28:67:42:0a:0e:65:6f:19:88:23:db:
                    58:96:9e:b8:30:c1:43:49:36:37:68:1a:79:78:2f:
                    c8:54:be:17:df:2e:5c:20:4f:d1:27:80:ad:d9:1b:
                    cf:f3:1b:9d:c0:94:46:cb:8c:2c:eb:7c:7a:d0:83:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.90.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b2:b0:53:d8:5f:0e:5d:96:be:32:0c:2d:7f:85:59:a4:fd:64:
         be:13:cd:23:ab:05:9d:d7:72:7e:d7:9d:37:95:02:98:ce:2f:
         4a:b3:4c:91:22:e9:f6:d4:88:f6:fe:3d:a4:bd:3f:cd:12:7d:
         07:7d:e6:43:21:8a:d7:b6:06:33:43:2e:80:69:fd:c8:a2:e4:
         d9:98:a7:ea:32:21:a9:01:e7:8b:0e:26:22:f6:cb:09:bf:b3:
         f6:e6:a4:b6:f9:b8:1a:61:fa:23:76:fb:00:6b:68:7a:5b:05:
         7b:73:e0:df:79:ac:0e:12:75:8c:0e:3c:8f:c9:1e:00:61:db:
         55:2b:c4:e7:88:26:db:7c:b8:d8:c0:3b:6f:01:05:ef:cd:28:
         9c:b8:ac:29:fc:27:20:58:35:bf:fb:37:5d:e3:6e:3d:a8:d1:
         ce:ac:95:1d:6e:4a:18:7c:60:c4:97:79:07:91:4c:40:f2:df:
         4c:8d:fe:e3:48:20:4c:5b:e0:6f:90:04:6e:94:da:7a:69:dd:
         5f:33:d6:40:e5:ca:bd:4e:45:fa:81:4d:0f:d8:5f:1a:bf:fe:
         b9:4c:e4:71:56:b4:cb:2d:8d:00:f4:43:4a:0a:a3:f3:70:a1:
         bf:b7:c8:b4:7a:f4:72:c0:64:c1:35:d0:9f:cd:f9:6e:00:aa:
         06:49:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:15:00 2026 by rpki-client