This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
File: rHWTnKcrl03kXiFyCNngbn4brAI.cer (raw, json)
Hash identifier: UY2NdtkxhfMWZEim+sXUjUpQ9xwWZwRgf+m1alP9dTk=
Subject key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1A8B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:10:07 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 168.253.216.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Feb 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6795 (0x1a8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Validity
Not Before: Jan 1 01:10:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:cf:dd:58:33:27:55:ed:71:fa:84:58:2e:
2d:71:06:66:f8:5b:82:36:aa:8b:a6:93:18:34:8c:
c9:b1:95:31:3c:ea:fd:2f:a3:fa:1f:c2:50:38:e8:
ad:67:8b:ee:05:98:0c:12:29:62:03:8e:af:a3:bc:
27:be:3a:fb:b3:53:b9:2b:3b:01:92:a8:4f:68:bc:
72:50:66:1c:bb:62:58:09:30:97:3d:0f:1f:66:d2:
c9:70:e4:82:f4:39:bc:f4:f1:bc:9f:9e:8a:45:ec:
07:df:03:18:7c:92:84:fa:31:df:b6:54:e4:f8:45:
65:c0:bd:41:f1:a0:ae:ff:f7:b1:be:41:2f:bf:f1:
55:57:4c:9a:8c:21:1a:44:e7:06:94:96:5d:03:4c:
e4:25:bb:c8:3a:55:ac:96:2a:c7:28:71:9c:c2:84:
82:59:85:f3:cb:5b:f2:75:6c:93:45:9a:c5:dc:47:
62:81:8b:d1:15:13:c5:0b:e9:0c:85:c0:79:01:24:
07:72:5b:fe:4f:fb:54:6c:1b:6d:68:37:c9:74:7e:
1f:50:c4:71:ad:4d:24:fc:3e:5d:91:14:aa:b7:f2:
e0:d5:40:29:6d:97:c1:6d:07:e7:6b:76:58:f0:8e:
b1:4b:53:83:5b:56:f8:d5:22:c2:39:a4:96:70:84:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
sbgp-ipAddrBlock: critical
IPv4:
168.253.216.0/21
Signature Algorithm: sha256WithRSAEncryption
24:c4:89:f3:0c:85:3d:57:17:c2:dd:e8:39:73:26:84:18:08:
ae:15:65:e1:84:3d:28:ac:0c:38:ca:1e:3e:e7:30:51:14:2e:
20:fa:55:43:3b:81:e8:8f:eb:ac:5d:e1:5f:00:47:7b:08:c1:
4d:4f:ac:33:f4:0b:8b:af:11:71:02:00:0a:93:d5:a2:dc:46:
3b:95:83:61:da:db:05:71:b4:13:d2:9c:82:cb:bd:59:ed:8a:
60:8c:31:f1:47:2b:f2:08:63:a5:17:e9:95:ff:b2:7e:f8:80:
f7:37:74:28:bd:80:6e:8f:ec:74:f6:19:19:e7:44:4f:91:b0:
68:0c:7f:09:c2:ba:6e:ff:67:3d:cf:da:1d:f1:83:35:4e:44:
b4:cf:13:02:9c:a9:13:5a:ee:53:08:37:fd:41:ba:6a:54:8e:
15:9c:19:a4:19:51:c7:7f:42:fc:11:83:62:1d:20:e2:ab:c2:
09:97:da:58:5c:c6:c1:59:f3:d4:c5:0b:55:48:15:9c:37:13:
a7:08:23:69:79:8f:3f:63:7b:5e:6b:3d:a7:7e:a9:73:31:3e:
94:e5:41:db:f1:75:63:4b:88:ce:5f:cd:81:27:26:e9:33:61:
5d:92:f3:6b:2f:12:6a:cf:b2:d2:cf:17:ad:76:0e:58:f9:2c:
66:86:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:18:13 2026 by rpki-client