This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer
File:                     lyNg0Kyyz5cxmQW6RU7QdwiCLf0.cer (raw, json)
Hash identifier:          FPC79o1kJV5VOB+96Wg/K+39Cs5oBnraq/wUpaR3Qi4=
Subject key identifier:   97:23:60:D0:AC:B2:CF:97:31:99:05:BA:45:4E:D0:77:08:82:2D:FD
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       18F6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 15:44:57 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 156.0.0.0/18
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 09:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6390 (0x18f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Nov 12 15:44:57 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36FAE49AR, serialNumber=972360D0ACB2CF97319905BA454ED07708822DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:a5:69:cf:6e:32:a3:0a:f1:63:0f:ef:fc:
                    56:fc:28:20:76:02:39:98:c4:9f:75:b0:02:9c:14:
                    4d:bb:da:4d:f6:48:91:a0:d8:f3:85:de:83:b0:1c:
                    c0:e5:72:bb:da:65:4d:28:0f:36:8a:70:66:03:b2:
                    8f:8f:23:3f:f6:26:85:1e:31:b7:6f:f1:83:ad:f8:
                    5a:24:e7:1b:05:9c:13:28:54:26:15:bd:2a:f6:d4:
                    dc:8e:56:43:8e:c1:3e:66:21:e2:16:3a:27:df:2e:
                    df:1f:da:2a:87:e5:a1:ac:08:65:50:4c:8e:d6:8f:
                    49:d7:ff:e5:a8:06:80:08:28:b9:24:3d:c8:36:26:
                    df:1d:2c:3b:bf:cb:62:c5:09:02:57:ae:0c:ee:0c:
                    3f:63:ba:a7:8c:8f:c8:69:81:97:d2:5c:7d:8a:1f:
                    74:d0:6d:fb:b7:94:91:9b:12:73:30:d1:5d:b2:a7:
                    d2:00:07:54:de:9a:74:48:e1:25:a3:4d:3f:2e:09:
                    dc:51:d8:4a:ea:fa:fb:40:33:ce:79:94:de:50:1d:
                    41:bf:a8:18:09:55:78:58:66:5f:cb:dd:de:1a:7a:
                    a3:d4:fe:a3:3a:af:0a:ca:c1:e9:9b:ae:de:d2:07:
                    9a:65:b0:34:07:f8:33:01:81:3f:1e:1e:72:36:78:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:60:D0:AC:B2:CF:97:31:99:05:BA:45:4E:D0:77:08:82:2D:FD
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAE49/8523FFA8BFDE11F0B0A85DF5DAE4EC9C/lyNg0Kyyz5cxmQW6RU7QdwiCLf0.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9b:1b:d4:b3:30:14:88:67:61:60:bd:44:cd:12:d0:87:8f:10:
         49:6d:84:fe:a8:2e:7c:fd:21:52:03:85:98:a0:e4:27:1c:81:
         05:8d:cd:c2:ab:d7:eb:b9:66:a3:5e:46:a8:23:82:30:59:7c:
         6e:8c:80:d4:b4:8f:cb:6e:62:b8:4e:79:69:ab:f8:b3:a8:07:
         5b:80:90:b7:ae:21:9b:30:49:86:3b:64:b2:67:a5:0f:fc:e8:
         7a:25:8a:93:34:38:44:01:30:1b:54:0c:4f:fd:f6:8b:78:ec:
         b4:04:ff:a9:5c:7b:4a:58:29:4d:70:12:81:c1:36:99:ee:db:
         ab:79:03:4b:65:c7:66:c2:ce:da:a7:84:ba:67:de:28:50:af:
         63:41:8c:1c:0f:ec:e2:0f:5d:d7:be:05:21:55:93:8d:13:ba:
         fe:7e:a9:4b:fa:63:8b:20:fd:8c:38:88:ee:ea:21:d0:e9:fc:
         6d:30:7a:21:4c:f1:78:c2:e8:b6:c9:e2:ca:d4:05:4b:50:83:
         ef:52:4c:59:b8:2c:45:72:43:dd:33:ff:d5:40:a7:35:77:b4:
         55:48:9a:92:ba:67:b5:09:01:ca:d5:79:b1:f2:f8:94:e4:bc:
         67:62:d3:f1:96:3a:ca:f4:fb:a2:85:f3:c5:5f:ab:1e:71:4b:
         9b:2a:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----