This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer
File:                     lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer (raw, json)
Hash identifier:          Cs0AyAZdeJ/pNjmzmoEZQpXEzn+5MVNJ7Mng1nffeFk=
Subject key identifier:   97:23:60:D0:AC:B2:CF:97:31:99:05:BA:45:4E:D0:77:08:82:2D:FD
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1AC1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:16:44 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 156.0.0.0/18
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6849 (0x1ac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:16:44 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36FAE49AR, serialNumber=972360D0ACB2CF97319905BA454ED07708822DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:a5:69:cf:6e:32:a3:0a:f1:63:0f:ef:fc:
                    56:fc:28:20:76:02:39:98:c4:9f:75:b0:02:9c:14:
                    4d:bb:da:4d:f6:48:91:a0:d8:f3:85:de:83:b0:1c:
                    c0:e5:72:bb:da:65:4d:28:0f:36:8a:70:66:03:b2:
                    8f:8f:23:3f:f6:26:85:1e:31:b7:6f:f1:83:ad:f8:
                    5a:24:e7:1b:05:9c:13:28:54:26:15:bd:2a:f6:d4:
                    dc:8e:56:43:8e:c1:3e:66:21:e2:16:3a:27:df:2e:
                    df:1f:da:2a:87:e5:a1:ac:08:65:50:4c:8e:d6:8f:
                    49:d7:ff:e5:a8:06:80:08:28:b9:24:3d:c8:36:26:
                    df:1d:2c:3b:bf:cb:62:c5:09:02:57:ae:0c:ee:0c:
                    3f:63:ba:a7:8c:8f:c8:69:81:97:d2:5c:7d:8a:1f:
                    74:d0:6d:fb:b7:94:91:9b:12:73:30:d1:5d:b2:a7:
                    d2:00:07:54:de:9a:74:48:e1:25:a3:4d:3f:2e:09:
                    dc:51:d8:4a:ea:fa:fb:40:33:ce:79:94:de:50:1d:
                    41:bf:a8:18:09:55:78:58:66:5f:cb:dd:de:1a:7a:
                    a3:d4:fe:a3:3a:af:0a:ca:c1:e9:9b:ae:de:d2:07:
                    9a:65:b0:34:07:f8:33:01:81:3f:1e:1e:72:36:78:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:60:D0:AC:B2:CF:97:31:99:05:BA:45:4E:D0:77:08:82:2D:FD
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ae:d9:e5:85:11:06:55:97:c9:e8:95:2c:8a:1a:1f:d2:f6:2e:
         1e:26:27:67:83:a4:97:ba:2b:35:03:1f:32:7b:d3:21:95:74:
         cc:c4:57:e6:a9:29:50:7e:0b:bf:b0:96:5a:80:26:12:52:63:
         ee:5c:d8:ce:8d:77:aa:54:e2:51:6a:4a:ac:c0:fd:48:ac:f2:
         b9:8b:9d:35:af:d5:7a:72:f6:70:25:a0:fb:0c:22:60:e0:a6:
         a6:ce:6a:72:59:d5:b4:e2:4e:82:17:34:b3:eb:6c:b6:4d:24:
         94:eb:8b:b1:7a:a6:e0:a1:09:d1:f2:68:6d:e3:c8:1f:4c:2c:
         5e:a7:5c:f2:bd:70:50:ad:32:77:b1:b1:d3:d9:1d:89:a6:f1:
         49:73:45:3d:bb:9e:2a:21:72:43:19:53:22:1a:3d:d1:c5:bc:
         90:3a:e9:2d:f5:b0:f9:0a:b0:c7:b7:2d:e6:1f:54:ef:4d:d3:
         c6:6f:6e:27:93:0c:73:cf:f3:d2:a1:56:5b:db:50:2a:20:c5:
         3c:4c:f6:60:ec:81:9f:e6:9a:6c:a8:e4:6b:8e:d0:5e:87:5f:
         49:87:50:8d:f9:5a:77:69:a1:18:3d:b6:d3:84:05:39:78:e0:
         8f:74:47:47:26:f8:07:9a:4e:f4:a3:21:b0:b3:0b:ae:21:63:
         98:6c:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:18:12 2026 by rpki-client