This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
File:                     mpAdFskLYBlnVD3tV83q800LJz4.cer (raw, json)
Hash identifier:          IxXeuJq6b8HgTd5BQ0tZ1S9lI+sSvvKTIyag85EPiXQ=
Subject key identifier:   9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A6D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:06:45 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 155.239.0.0/16
                          IP: 165.143.0.0 -- 165.149.255.255
                          IP: 165.165.0.0/16
                          IP: 198.54.202.0 -- 198.54.209.255
                          IP: 198.54.247.0 -- 198.54.248.255
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6765 (0x1a6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:06:45 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:95:44:7f:b0:68:1c:9a:06:ba:77:33:f4:
                    16:9c:41:4d:a0:72:c5:00:fb:a3:c2:cf:ed:da:83:
                    0b:1b:c2:eb:ed:23:8f:47:3d:bd:a7:25:38:40:ee:
                    f8:05:8e:60:5c:52:4a:e6:14:7c:9b:f3:71:82:37:
                    43:a8:91:0e:7b:27:ae:52:42:52:81:c0:68:90:c6:
                    dd:0f:69:ff:d7:fe:f7:4a:ab:e9:fe:f9:73:ab:ac:
                    63:fe:5c:96:63:2b:be:57:34:a9:9c:77:83:a3:1a:
                    4d:4a:0e:2e:27:ab:10:09:fa:fa:3f:48:f6:3b:ce:
                    27:66:f7:1c:04:bd:75:fb:59:e3:c9:22:bf:7d:a1:
                    5a:b9:ad:19:2f:2b:7b:af:94:6a:5e:16:9b:d5:d3:
                    e6:4c:ab:d6:d8:b1:ed:4d:49:ac:33:a6:29:81:2b:
                    67:fd:b3:a1:88:79:46:98:d3:85:50:a2:cc:48:c1:
                    8b:2b:2b:de:3a:66:ac:ce:4e:24:71:e2:37:65:f1:
                    da:38:cf:4f:5e:8e:a3:2a:0f:2b:02:c1:1f:f7:9a:
                    1b:2e:fb:7e:19:ee:0d:af:e6:80:fb:b7:6a:d4:f2:
                    b3:7e:29:82:c2:5e:5f:c4:1f:90:09:7e:37:94:0b:
                    8c:47:be:30:ec:19:46:fa:b5:d3:7b:75:3e:ca:53:
                    a7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.239.0.0/16
                  165.143.0.0-165.149.255.255
                  165.165.0.0/16
                  198.54.202.0-198.54.209.255
                  198.54.247.0-198.54.248.255

    Signature Algorithm: sha256WithRSAEncryption
         38:ef:fd:9b:f2:a9:c7:ef:96:a3:3a:9a:54:4c:03:ed:6a:f7:
         8b:47:70:cd:fe:4e:36:94:0e:68:f3:62:36:5e:df:e1:39:2f:
         07:42:6e:cd:9e:2c:bb:ab:2f:d2:40:b8:f7:4d:c3:5f:18:63:
         8a:ec:6b:9c:09:ac:e7:bf:a1:7d:36:05:b8:20:9e:f3:c3:2d:
         b1:fe:28:6a:c1:f8:8e:61:20:c8:44:36:06:40:dd:c3:d2:8c:
         74:cb:96:c7:14:16:00:0d:3c:1e:20:8d:8f:9a:fd:2a:0c:bf:
         16:6d:04:54:80:87:af:24:aa:ae:91:e6:66:3a:b8:92:0a:51:
         c3:9f:a5:90:b3:38:ab:c2:26:57:a7:0d:e0:95:0d:8e:ed:1f:
         a4:71:10:f9:e0:46:7f:d7:14:ca:71:50:51:a2:90:39:0e:c2:
         79:18:f8:31:21:da:8c:72:d3:d1:a9:44:ee:88:9f:ca:7f:9b:
         fe:96:94:25:b0:39:74:eb:a4:0c:fb:61:64:b3:97:e8:90:cd:
         f3:23:f2:4e:1a:3e:29:66:42:07:5e:74:f2:e3:e9:16:7d:fa:
         b7:d7:b9:02:da:95:6e:12:02:4f:55:b9:64:62:84:f2:06:e7:
         10:74:7e:9c:f7:70:03:43:05:f0:75:53:03:53:ef:fb:5c:11:
         b0:f6:b2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:18:13 2026 by rpki-client