This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer (raw, json)
Hash identifier:          O4iKCzh+bu2DWHuYxjMwX9l8GgyowS2rof4zk8YbhSc=
Subject key identifier:   97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A0A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:54:21 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 169.239.212.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6666 (0x1a0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:54:21 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:c5:09:4e:d1:5d:f6:60:a6:d4:2d:f1:9d:
                    5a:fc:79:8a:fa:88:69:20:29:2b:cc:d1:42:26:55:
                    59:3f:58:cc:dd:22:ff:33:de:bd:00:3a:56:1a:b4:
                    2c:cd:a4:c5:0f:3c:94:21:6f:4b:64:74:79:53:16:
                    aa:db:f2:de:48:cd:88:05:99:f2:fe:85:b7:04:a6:
                    fb:35:13:64:1a:bf:6c:65:7c:c2:00:13:91:62:4f:
                    6d:6b:00:8f:32:83:3a:f4:00:44:06:98:ef:52:17:
                    4b:89:34:6b:5b:27:59:e9:a7:0d:ef:96:31:59:46:
                    20:9b:cf:8f:57:2f:e2:56:9f:4b:e5:5c:6e:ca:f8:
                    1e:e6:3e:a9:17:1a:5d:77:b2:80:87:40:5d:0a:8d:
                    59:e2:76:99:75:ba:f1:62:16:ba:75:31:67:cc:ae:
                    12:44:89:cf:1f:df:0f:5e:88:65:40:36:e7:9a:8a:
                    06:0e:37:51:8e:95:a7:95:13:39:de:78:fb:19:05:
                    c2:4b:ef:12:f9:15:80:12:b1:4b:b2:19:6f:6c:c6:
                    58:25:a3:15:e8:eb:6d:01:21:70:a9:c6:e5:ad:51:
                    5a:61:95:e0:40:f5:48:85:bd:f3:22:9c:ee:1d:3a:
                    1a:fe:8b:56:80:94:83:70:a5:c6:e7:6f:60:9f:c8:
                    4a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:c6:b9:49:33:d3:3d:74:22:92:e1:b4:e0:db:42:de:91:4b:
         76:2a:a5:37:67:f4:ae:59:84:d8:7a:85:f9:fe:19:c1:03:f7:
         f0:3c:8d:77:6a:86:69:6b:a9:55:b6:e9:90:b3:1e:ce:37:63:
         44:18:69:a4:92:bc:f9:8c:62:7a:60:71:1b:8e:01:68:48:26:
         ef:c2:63:e1:80:74:db:25:38:1b:e5:ad:45:fb:b5:42:3e:8d:
         9c:e0:da:f5:9e:53:3a:92:f2:ed:a4:a6:b9:1b:38:aa:08:64:
         83:76:fb:f4:89:a7:98:99:48:c6:fb:88:d0:8c:39:bc:50:57:
         aa:7f:05:32:a9:14:75:b9:41:88:7a:ff:b0:a2:b1:2e:e9:a9:
         cc:a1:05:50:59:25:e9:a0:e5:94:2d:50:0b:cd:b7:68:a1:c6:
         44:43:89:10:c2:ac:8f:76:5e:f9:b9:cb:d9:11:21:43:a9:1e:
         f2:be:84:5a:c7:f9:93:f5:20:df:c5:4f:62:31:ed:d3:9e:63:
         85:70:8b:26:4b:1a:ec:9c:1e:61:56:db:9b:b0:0a:cb:62:cf:
         9b:7c:ac:45:e0:89:1c:f7:92:ed:43:a5:52:6f:ee:e9:3f:03:
         49:d7:50:50:79:ec:42:31:2d:a5:28:66:6a:57:c1:c3:c5:3f:
         ad:c3:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:18:13 2026 by rpki-client