This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.cer (raw, json)
Hash identifier:          UY2NdtkxhfMWZEim+sXUjUpQ9xwWZwRgf+m1alP9dTk=
Subject key identifier:   AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A8B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:10:07 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 168.253.216.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6795 (0x1a8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:10:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:cf:dd:58:33:27:55:ed:71:fa:84:58:2e:
                    2d:71:06:66:f8:5b:82:36:aa:8b:a6:93:18:34:8c:
                    c9:b1:95:31:3c:ea:fd:2f:a3:fa:1f:c2:50:38:e8:
                    ad:67:8b:ee:05:98:0c:12:29:62:03:8e:af:a3:bc:
                    27:be:3a:fb:b3:53:b9:2b:3b:01:92:a8:4f:68:bc:
                    72:50:66:1c:bb:62:58:09:30:97:3d:0f:1f:66:d2:
                    c9:70:e4:82:f4:39:bc:f4:f1:bc:9f:9e:8a:45:ec:
                    07:df:03:18:7c:92:84:fa:31:df:b6:54:e4:f8:45:
                    65:c0:bd:41:f1:a0:ae:ff:f7:b1:be:41:2f:bf:f1:
                    55:57:4c:9a:8c:21:1a:44:e7:06:94:96:5d:03:4c:
                    e4:25:bb:c8:3a:55:ac:96:2a:c7:28:71:9c:c2:84:
                    82:59:85:f3:cb:5b:f2:75:6c:93:45:9a:c5:dc:47:
                    62:81:8b:d1:15:13:c5:0b:e9:0c:85:c0:79:01:24:
                    07:72:5b:fe:4f:fb:54:6c:1b:6d:68:37:c9:74:7e:
                    1f:50:c4:71:ad:4d:24:fc:3e:5d:91:14:aa:b7:f2:
                    e0:d5:40:29:6d:97:c1:6d:07:e7:6b:76:58:f0:8e:
                    b1:4b:53:83:5b:56:f8:d5:22:c2:39:a4:96:70:84:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.253.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:c4:89:f3:0c:85:3d:57:17:c2:dd:e8:39:73:26:84:18:08:
         ae:15:65:e1:84:3d:28:ac:0c:38:ca:1e:3e:e7:30:51:14:2e:
         20:fa:55:43:3b:81:e8:8f:eb:ac:5d:e1:5f:00:47:7b:08:c1:
         4d:4f:ac:33:f4:0b:8b:af:11:71:02:00:0a:93:d5:a2:dc:46:
         3b:95:83:61:da:db:05:71:b4:13:d2:9c:82:cb:bd:59:ed:8a:
         60:8c:31:f1:47:2b:f2:08:63:a5:17:e9:95:ff:b2:7e:f8:80:
         f7:37:74:28:bd:80:6e:8f:ec:74:f6:19:19:e7:44:4f:91:b0:
         68:0c:7f:09:c2:ba:6e:ff:67:3d:cf:da:1d:f1:83:35:4e:44:
         b4:cf:13:02:9c:a9:13:5a:ee:53:08:37:fd:41:ba:6a:54:8e:
         15:9c:19:a4:19:51:c7:7f:42:fc:11:83:62:1d:20:e2:ab:c2:
         09:97:da:58:5c:c6:c1:59:f3:d4:c5:0b:55:48:15:9c:37:13:
         a7:08:23:69:79:8f:3f:63:7b:5e:6b:3d:a7:7e:a9:73:31:3e:
         94:e5:41:db:f1:75:63:4b:88:ce:5f:cd:81:27:26:e9:33:61:
         5d:92:f3:6b:2f:12:6a:cf:b2:d2:cf:17:ad:76:0e:58:f9:2c:
         66:86:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:18:13 2026 by rpki-client