This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/jINMiRsip8xdph6P5KcT-Iaqv80.cer
File:                     jINMiRsip8xdph6P5KcT-Iaqv80.cer (raw, json)
Hash identifier:          OCKWBdhdi1iM2XuCGGSY2SxB9954/kBjAJnwPBDQwE8=
Subject key identifier:   8C:83:4C:89:1B:22:A7:CC:5D:A6:1E:8F:E4:A7:13:F8:86:AA:BF:CD
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1988
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/jINMiRsip8xdph6P5KcT-Iaqv80.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:35:26 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 45.216.0.0/14
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6536 (0x1988)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:35:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F364AE44AR, serialNumber=8C834C891B22A7CC5DA61E8FE4A713F886AABFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:be:24:67:72:90:74:88:4e:44:c2:cf:4d:c6:
                    69:91:f8:c3:3e:89:95:2d:e9:d2:b4:8a:44:3f:f7:
                    ce:bf:bc:f3:7a:ec:07:9f:a9:fe:7d:48:6e:e1:d9:
                    e0:99:11:3e:3c:76:37:6b:42:e8:e6:d2:f8:65:7e:
                    ac:97:45:d1:75:39:40:a9:99:c8:74:f2:5e:03:7c:
                    ed:18:45:9d:a3:b7:ea:3f:83:27:fe:b1:53:4c:ef:
                    cd:64:d8:58:c7:68:ee:41:f8:4e:9a:63:1f:f9:18:
                    64:2d:71:fd:7a:10:3b:0d:c7:9c:05:ab:1b:ee:39:
                    29:68:a4:45:f8:7e:2e:7c:75:82:3c:59:9a:29:12:
                    c8:6c:17:5a:8b:4d:83:eb:cb:87:ea:18:00:b1:ce:
                    1f:d5:1f:20:6c:11:18:d1:35:37:2e:ab:7b:30:27:
                    d9:07:50:fa:4f:af:82:28:7e:d0:54:82:42:3d:c9:
                    9e:0e:b5:3d:47:dd:a4:0a:c9:4e:11:cd:0d:7c:ce:
                    39:d1:05:77:ce:a9:fe:01:b3:2b:18:8c:13:4d:97:
                    77:22:c4:31:28:f4:75:66:a2:b4:27:a5:4e:28:9c:
                    ac:e6:f8:81:48:22:15:cb:86:2c:89:2b:b5:82:db:
                    a1:0c:e5:8d:ca:86:3c:37:08:21:08:f1:24:47:ca:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:83:4C:89:1B:22:A7:CC:5D:A6:1E:8F:E4:A7:13:F8:86:AA:BF:CD
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/jINMiRsip8xdph6P5KcT-Iaqv80.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.216.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         01:90:94:44:53:9b:90:e9:a6:11:f1:e9:30:fb:4d:75:d5:c4:
         47:bf:60:58:ce:d4:3d:8a:d2:af:7c:da:7d:66:28:8a:0c:8b:
         26:bd:d7:99:8d:00:72:a3:67:56:9f:ac:9b:84:dd:13:8f:8b:
         3e:18:92:9d:8a:2a:12:83:ad:6a:05:3e:63:8f:1b:63:96:96:
         e4:35:54:2a:a9:6a:f8:40:7c:db:ab:f1:cb:f8:14:fa:a3:c3:
         72:6d:82:3a:30:ac:a8:ae:43:00:49:f7:3f:b0:ac:b6:d6:0f:
         91:aa:35:09:e9:64:65:f3:6c:43:5a:73:a8:0e:5a:21:dd:bc:
         ae:49:f0:5b:c6:3a:90:e4:2c:5b:07:9b:93:7b:76:89:67:17:
         68:3f:53:7f:41:a1:22:5a:63:c9:85:7b:3b:55:c0:62:4f:f4:
         ba:06:47:82:51:21:72:cc:f1:27:29:bf:0b:ac:13:0e:9f:ea:
         90:1f:c5:87:de:bb:9f:3f:3f:e5:e5:30:23:f4:d6:ea:b3:5b:
         d7:e2:f9:59:ec:eb:36:a3:10:46:aa:64:1a:55:91:f9:4f:8e:
         5e:e4:9d:64:f9:f2:94:39:a8:6d:10:53:dd:f8:8a:51:68:6c:
         df:6c:ad:4d:63:85:20:36:bd:f1:d7:e5:c0:95:99:80:33:ef:
         ba:2d:0d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:13:50 2026 by rpki-client