This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer File: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer (raw, json) Hash identifier: 0VrT/VLuLJ5L9pnEEn3ftLZEcDsLa1X1UwMawUUxpsw= Subject key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1ABF Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:16:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 45.221.192.0/21 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 09 Feb 2026 00:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6847 (0x1abf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:16:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:68:22:15:76:0e:87:41:bc:8f:a1:f4:5d: d1:4c:a3:c1:16:1a:90:f1:99:30:1d:5f:78:9a:6e: 89:09:45:c4:15:d7:90:e2:86:13:5a:ce:48:39:66: 7d:90:08:32:42:c8:f9:d9:00:55:10:5f:62:0f:a1: 8c:bf:51:2b:9a:76:5e:b8:a2:29:3e:73:d8:83:a3: dd:ac:3a:d9:7c:25:7e:70:c0:53:95:a1:88:e5:8d: 2e:7c:9d:66:0a:57:1f:0f:f0:c6:3c:a3:be:23:bc: 56:46:2d:67:d0:d8:cb:94:ad:46:12:4e:d5:fa:97: 99:67:0e:ff:c8:48:5b:33:f9:a8:f4:56:84:e5:f9: c7:75:4b:b4:eb:e6:3f:87:5e:09:08:86:a9:61:71: 46:f9:4d:5a:b6:0c:f7:85:33:63:10:de:d6:fb:62: 76:7a:df:db:85:ac:02:10:06:ed:ee:2d:2e:9b:db: 5a:82:fa:ab:e8:3c:e6:eb:6c:08:9c:69:2d:b3:47: 66:de:d2:15:a0:e0:a4:78:46:1c:8d:69:37:7d:14: fc:96:34:94:91:26:82:eb:c5:5a:89:2f:72:bf:6f: fc:33:c8:f9:ab:38:02:a9:bd:54:fe:27:c2:02:a6: 14:98:1b:18:7c:8a:5c:f8:7c:06:96:a0:ff:32:05: 6f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft sbgp-ipAddrBlock: critical IPv4: 45.221.192.0/21 Signature Algorithm: sha256WithRSAEncryption 01:3e:7a:89:33:0a:92:6f:25:ac:55:6d:dc:98:37:d7:c3:3f: f3:08:73:2e:e2:60:f3:0a:45:d0:37:a1:e4:1f:ce:ba:dc:8e: 0d:c4:c4:d2:56:c5:c6:97:90:40:bc:08:e8:4d:25:43:90:f6: 40:3e:11:77:61:2e:d7:8f:10:58:da:e7:6c:e5:da:73:5b:7d: 1f:aa:3f:a2:6f:97:38:07:63:7a:90:5a:7c:4e:b3:92:27:11: ce:ef:fe:64:22:32:8f:41:4a:c8:1e:b7:05:8e:b6:96:9b:84: c1:fa:55:b7:7d:6d:fa:b2:96:bb:0a:e4:2f:9b:62:bf:7b:db: a7:3a:91:f7:0f:91:7c:d2:c0:92:03:ca:4a:00:c6:94:03:f0: b0:1f:86:ab:1c:e9:7e:3e:2a:71:cf:a6:d3:5b:27:23:04:ef: 31:7d:93:79:72:60:57:10:ca:f4:95:3a:d3:c3:ff:14:8d:a8: 02:8b:11:fc:31:d9:f2:2e:0a:ed:66:3c:6b:8f:5b:45:48:00: a6:70:a8:92:5d:28:ab:22:e6:a3:e5:82:99:f7:15:b5:43:7a: f7:01:a6:5b:a3:96:ca:19:41:ad:8d:2e:b3:8d:af:16:f0:90: 18:69:65:55:ee:9f:b3:f9:4c:da:05:78:60:28:9a:f6:8e:3d: 69:22:69:2b -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGr8wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTE2MjdaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkZBNUVBQVIxMTAvBgNVBAUTKDk0NzdGMEU0NzVBNzQ3Rjk2 QzU2MTYyMTY3RjBDMTZGOTlDNDgzQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDb3WgiFXYOh0G8j6H0XdFMo8EWGpDxmTAdX3iabokJRcQV15DihhNa zkg5Zn2QCDJCyPnZAFUQX2IPoYy/USuadl64oik+c9iDo92sOtl8JX5wwFOVoYjl jS58nWYKVx8P8MY8o74jvFZGLWfQ2MuUrUYSTtX6l5lnDv/ISFsz+aj0VoTl+cd1 S7Tr5j+HXgkIhqlhcUb5TVq2DPeFM2MQ3tb7YnZ639uFrAIQBu3uLS6b21qC+qvo PObrbAicaS2zR2be0hWg4KR4RhyNaTd9FPyWNJSRJoLrxVqJL3K/b/wzyPmrOAKp vVT+J8ICphSYGxh8ilz4fAaWoP8yBW+TAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU lHfw5HWnR/lsVhYhZ/DBb5nEg7swHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkZBNUVBLzIwOTg5 MzBDMzhCMjExRUQ5MERCMkVEQ0YxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZGQTVFQS8yMDk4OTMwQzM4QjIxMUVEOTBEQjJFRENGMTIyMjQ2 OC9sSGZ3NUhXblJfbHNWaFloWl9EQmI1bkVnN3MubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQDLd3AMA0GCSqGSIb3DQEBCwUAA4IBAQABPnqJMwqSbyWs VW3cmDfXwz/zCHMu4mDzCkXQN6HkH8663I4NxMTSVsXGl5BAvAjoTSVDkPZAPhF3 YS7XjxBY2uds5dpzW30fqj+ib5c4B2N6kFp8TrOSJxHO7/5kIjKPQUrIHrcFjraW m4TB+lW3fW36spa7CuQvm2K/e9unOpH3D5F80sCSA8pKAMaUA/CwH4arHOl+Pipx z6bTWycjBO8xfZN5cmBXEMr0lTrTw/8UjagCixH8MdnyLgrtZjxrj1tFSACmcKiS XSirIuaj5YKZ9xW1Q3r3AaZbo5bKGUGtjS6zja8W8JAYaWVV7p+z+UzaBXhgKJr2 jj1pImkr -----END CERTIFICATE-----Generated at Sat Feb 7 07:14:13 2026 by rpki-client