This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer File: itr_GHci3uuw3c4Fe_PCmNAsfM4.cer (raw, json) Hash identifier: hklqLELxVk/GYkV8RcBmUiD3lp1+M3OeMc57P/OgQZA= Subject key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A1E Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:56:51 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 156.0.232.0/23 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 09 Feb 2026 00:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6686 (0x1a1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:56:51 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b6:3e:55:74:f3:9e:70:f4:2a:9c:43:bb:1b: 2a:61:7f:cb:6f:fc:cb:9d:0f:24:2e:f8:a9:ec:2a: 3b:91:29:55:f4:b2:00:1d:c3:0d:09:85:92:4c:aa: ba:57:96:3d:86:20:a6:93:e1:be:0c:a9:50:45:dd: 62:e7:5f:27:89:cb:4a:af:84:2e:97:10:49:e2:20: 6f:b6:8c:d9:7b:4b:8e:8a:c4:79:de:79:36:64:50: d1:71:a6:fa:81:60:e3:11:84:16:32:bf:d0:da:76: 6f:38:a3:f2:9f:aa:9f:ce:60:e9:a5:b0:8b:8e:63: 27:91:8a:36:50:33:4b:74:8d:c6:64:39:da:75:1a: 35:b3:59:d2:6d:58:07:c8:8b:22:20:8a:9e:4d:b7: 98:c1:36:6a:27:ee:b3:03:32:a1:7f:e0:65:95:f3: fe:05:dc:c4:dd:01:c6:8d:93:c8:72:f9:3d:4c:82: 23:fb:4e:da:ff:89:61:64:83:08:5c:f1:a4:bc:f9: 0c:3b:4d:47:19:87:32:53:71:cd:d1:2c:aa:03:7a: 6e:e8:32:60:19:59:83:73:be:50:4f:15:3d:c3:00: a3:c4:54:64:7c:77:cc:26:29:8c:01:87:59:33:da: 61:53:5c:8d:bd:f4:ff:74:a0:b7:4a:a0:fa:f1:25: c3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft sbgp-ipAddrBlock: critical IPv4: 156.0.232.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:90:09:31:75:fe:b5:08:7f:d5:85:ed:27:b5:09:08:eb:69: 69:7b:67:2f:ce:a4:87:2e:14:8a:62:5f:c9:7a:f4:5e:9d:e5: 96:6d:ed:3d:37:46:39:9a:f2:de:1b:69:de:60:f3:e3:70:3a: f6:15:8a:98:a6:9e:9e:7b:10:26:b2:7a:f2:54:44:6f:bf:91: fe:71:d6:8c:e6:e6:54:a0:50:f5:db:df:da:b0:c0:97:a5:f5: c1:ed:02:89:8c:74:95:fd:d4:d3:df:84:29:bb:fb:c6:65:82: 8f:2b:78:ed:85:e0:30:a9:84:52:94:3b:2c:53:85:3e:77:f2: 1b:cb:49:31:c5:78:8f:60:b4:e7:c2:fc:3a:15:11:35:ea:b0: 75:1b:bc:81:5c:93:00:62:bd:37:ac:bd:a6:72:c8:8d:00:74: 01:fb:ce:21:2f:c6:ca:05:fd:e2:00:e3:3d:3f:f4:ce:78:5b: 4b:c2:29:ee:57:64:85:36:e1:e1:69:9f:44:70:9c:55:e0:34: f5:d2:22:14:87:3d:2a:d6:81:fb:f8:67:0b:5d:79:1a:8a:9c: 3f:88:73:11:a9:9c:29:a5:30:00:21:14:2f:ea:da:53:de:0d: 0f:3d:b4:d0:c4:77:b7:f4:3d:4b:38:78:af:48:e2:67:9b:c8: 4f:0a:82:8f -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGh4wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDU2NTFaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjkzOUE2QVIxMTAvBgNVBAUTKDhBREFGRjE4NzcyMkRFRUJC MEREQ0UwNTdCRjNDMjk4RDAyQzdDQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDetj5VdPOecPQqnEO7Gyphf8tv/MudDyQu+KnsKjuRKVX0sgAdww0J hZJMqrpXlj2GIKaT4b4MqVBF3WLnXyeJy0qvhC6XEEniIG+2jNl7S46KxHneeTZk UNFxpvqBYOMRhBYyv9Dadm84o/Kfqp/OYOmlsIuOYyeRijZQM0t0jcZkOdp1GjWz WdJtWAfIiyIgip5Nt5jBNmon7rMDMqF/4GWV8/4F3MTdAcaNk8hy+T1MgiP7Ttr/ iWFkgwhc8aS8+Qw7TUcZhzJTcc3RLKoDem7oMmAZWYNzvlBPFT3DAKPEVGR8d8wm KYwBh1kz2mFTXI299P90oLdKoPrxJcOxAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU itr/GHci3uuw3c4Fe/PCmNAsfM4wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjkzOUE2L0FEOTRB QTIwQjVGRDExRURCRkJBNjNGMUYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY5MzlBNi9BRDk0QUEyMEI1RkQxMUVEQkZCQTYzRjFGMTIyMjQ2 OC9pdHJfR0hjaTN1dXczYzRGZV9QQ21OQXNmTTQubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBnADoMA0GCSqGSIb3DQEBCwUAA4IBAQAvkAkxdf61CH/V he0ntQkI62lpe2cvzqSHLhSKYl/JevReneWWbe09N0Y5mvLeG2neYPPjcDr2FYqY pp6eexAmsnryVERvv5H+cdaM5uZUoFD129/asMCXpfXB7QKJjHSV/dTT34Qpu/vG ZYKPK3jtheAwqYRSlDssU4U+d/Iby0kxxXiPYLTnwvw6FRE16rB1G7yBXJMAYr03 rL2mcsiNAHQB+84hL8bKBf3iAOM9P/TOeFtLwinuV2SFNuHhaZ9EcJxV4DT10iIU hz0q1oH7+GcLXXkaipw/iHMRqZwppTAAIRQv6tpT3g0PPbTQxHe39D1LOHivSOJn m8hPCoKP -----END CERTIFICATE-----Generated at Sat Feb 7 07:12:14 2026 by rpki-client