This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.cer (raw, json)
Hash identifier:          7WKsxmi1dABPKsh/96drjFzQYvIfrVUCXa1ioN1dec8=
Subject key identifier:   92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1AA1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:12:32 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 129.205.96.0/19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6817 (0x1aa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:12:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36ECAA2AR, serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:f7:d7:84:37:41:15:30:e8:8d:8c:c1:ac:
                    62:ed:4e:69:d5:2c:f4:57:61:3d:a8:7a:d2:71:c2:
                    b5:2e:59:d5:a7:e6:27:f9:4c:61:0f:e2:88:41:6d:
                    d6:b3:a2:2b:b3:78:8a:7e:06:19:db:b6:0c:9e:50:
                    de:41:f1:12:4e:16:60:3a:ff:4f:46:57:2c:c5:73:
                    20:22:ad:e8:d3:63:e1:6a:04:ce:26:b6:70:8e:69:
                    f8:88:9f:16:b8:cf:e2:4f:e6:89:85:8a:82:67:2f:
                    95:45:c9:05:cf:e9:be:86:de:2f:a6:cc:61:a0:39:
                    f3:10:8f:37:b8:34:99:8e:05:36:ec:e7:a7:5b:66:
                    69:72:5f:f3:e3:14:fb:cd:30:2c:3a:25:6c:0c:64:
                    56:bf:68:4e:b0:fc:06:7e:48:19:3a:d9:80:4f:e6:
                    7f:4b:f8:b2:5c:cb:50:1c:54:02:46:3e:f2:90:70:
                    c6:f2:a4:0b:a2:53:aa:19:9e:38:ad:99:47:9f:64:
                    cd:71:78:88:a0:2d:c3:94:eb:83:19:0e:65:f6:11:
                    63:38:c8:0b:e5:eb:e5:8e:97:6f:c9:d0:ec:42:a2:
                    21:66:07:dc:06:84:ea:84:b5:ca:d7:50:fd:6b:01:
                    13:5b:b8:0b:80:3f:e7:ed:0b:75:25:00:c9:ff:60:
                    09:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.205.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:71:51:da:2b:74:89:6c:22:59:21:f9:e3:1d:c6:89:a4:
         53:45:c8:64:18:99:8c:2b:26:69:b9:da:5c:53:f4:6e:23:9a:
         dd:08:0f:a1:fe:f0:85:c6:09:51:07:ba:0b:ef:fb:ad:a4:50:
         f2:25:39:38:ee:50:1d:f5:74:7f:63:e4:eb:5b:d6:b8:d2:b8:
         26:b9:f3:4e:77:e8:7c:fd:23:5d:11:0a:9e:ce:03:ec:33:9c:
         3b:ca:bf:cf:5d:6c:ca:b1:f5:8a:1c:58:62:e4:16:91:b7:18:
         81:07:55:3a:5b:20:12:ca:4a:30:c7:87:68:45:61:43:43:42:
         cb:0f:2f:f0:49:6d:83:7d:47:10:94:5d:78:3a:25:d1:b9:c6:
         19:b9:ff:91:7a:86:e4:09:84:66:cf:fa:02:38:70:d1:69:5e:
         eb:42:54:29:e8:cc:4f:bd:ea:58:99:f7:d3:40:94:9a:6a:65:
         9f:26:ab:ac:db:26:9f:aa:cc:2b:8c:69:58:1b:77:94:54:d3:
         e8:b4:a5:d4:ad:59:30:24:81:bb:05:96:eb:e3:73:e4:cb:86:
         f3:6a:08:8f:cc:7e:c5:ea:a3:a7:74:0b:70:e4:86:dc:2a:20:
         31:7f:5a:45:68:2b:bf:fe:80:30:e1:1d:17:c8:eb:dd:42:0e:
         48:ef:00:11
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICGqEwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTEyMzJaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkVDQUEyQVIxMTAvBgNVBAUTKDkyNDJDNjA5MkZFMjIzOUFD
RDMwQzQ4RjM1QUMxQkM0RERGNURDQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDL9vfXhDdBFTDojYzBrGLtTmnVLPRXYT2oetJxwrUuWdWn5if5TGEP
4ohBbdazoiuzeIp+BhnbtgyeUN5B8RJOFmA6/09GVyzFcyAirejTY+FqBM4mtnCO
afiInxa4z+JP5omFioJnL5VFyQXP6b6G3i+mzGGgOfMQjze4NJmOBTbs56dbZmly
X/PjFPvNMCw6JWwMZFa/aE6w/AZ+SBk62YBP5n9L+LJcy1AcVAJGPvKQcMbypAui
U6oZnjitmUefZM1xeIigLcOU64MZDmX2EWM4yAvl6+WOl2/J0OxCoiFmB9wGhOqE
tcrXUP1rARNbuAuAP+ftC3UlAMn/YAkXAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
kkLGCS/iI5rNMMSPNawbxN313L4wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkVDQUEyLzNDNUUw
QTYyQTYwOTExRURBMkU3OTJCOUYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZFQ0FBMi8zQzVFMEE2MkE2MDkxMUVEQTJFNzkyQjlGMTIyMjQ2
OC9ra0xHQ1NfaUk1ck5NTVNQTmF3YnhOMzEzTDQubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQFgc1gMA0GCSqGSIb3DQEBCwUAA4IBAQBm93FR2it0iWwi
WSH54x3GiaRTRchkGJmMKyZpudpcU/RuI5rdCA+h/vCFxglRB7oL7/utpFDyJTk4
7lAd9XR/Y+TrW9a40rgmufNOd+h8/SNdEQqezgPsM5w7yr/PXWzKsfWKHFhi5BaR
txiBB1U6WyASykowx4doRWFDQ0LLDy/wSW2DfUcQlF14OiXRucYZuf+ReobkCYRm
z/oCOHDRaV7rQlQp6MxPvepYmffTQJSaamWfJqus2yafqswrjGlYG3eUVNPotKXU
rVkwJIG7BZbr43Pky4bzagiPzH7F6qOndAtw5IbcKiAxf1pFaCu//oAw4R0XyOvd
Qg5I7wAR
-----END CERTIFICATE-----
Generated at Sat Feb 7 05:44:50 2026 by rpki-client