This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
File:                     rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer (raw, json)
Hash identifier:          ED1KjwzMegqNbtgvUbPbQguDq74t/Dpwu0VeVpfA4hM=
Subject key identifier:   AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1916
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sun 07 Dec 2025 11:11:10 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 45.96.0.0/12
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6422 (0x1916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Dec  7 11:11:10 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:9c:f6:17:fa:ab:f4:61:ac:e2:d1:81:64:
                    61:00:1c:8f:e9:32:9f:cf:de:8c:1c:c1:8e:44:8a:
                    98:0e:be:d6:fb:ff:b1:94:b3:c5:c4:33:37:ed:8a:
                    b9:a4:21:60:94:2d:22:d7:28:6e:d5:de:90:12:f8:
                    ea:bf:fc:8e:77:d1:b1:1e:87:4d:23:62:80:54:6c:
                    e1:8e:6f:08:6f:67:9b:c9:d2:1d:54:60:4f:ff:a2:
                    e4:31:45:bc:31:1f:26:e7:e5:05:34:55:e1:8a:85:
                    ac:66:98:24:5a:0e:ae:ec:e7:61:90:09:6e:24:e9:
                    fb:14:17:9a:8d:d4:c0:c1:0f:9e:ed:db:d5:91:d9:
                    13:a1:28:c5:02:89:28:64:cc:65:59:35:2d:03:a4:
                    de:55:7e:0f:13:7c:fc:28:5d:98:86:06:32:66:9d:
                    d7:2b:32:33:f9:29:8a:1c:7d:97:38:c5:84:ec:49:
                    7f:fd:2f:73:5d:a5:2a:61:ed:73:3d:f8:71:c0:fa:
                    f5:62:cc:fa:79:a5:45:d4:8a:1b:c2:65:e2:06:f6:
                    5a:4e:27:3d:b6:bc:38:7d:c1:b8:2b:94:7f:c1:eb:
                    be:f4:c2:0f:be:3d:e9:d7:58:03:8e:89:2b:ca:fc:
                    b0:97:11:cf:e5:cc:1c:b8:87:a4:be:9f:2f:6e:9d:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.96.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         52:9f:8b:b7:c8:48:7d:61:51:4d:8a:03:5a:5b:26:1b:7e:ea:
         6b:af:db:32:a7:e7:fa:5c:fd:98:86:0d:c5:cf:96:e2:cf:f9:
         26:0b:cd:84:71:d2:47:de:37:57:9e:52:9b:5d:37:d5:97:bf:
         7f:18:f4:61:fd:e1:fa:90:f7:5a:86:f7:df:dc:34:68:7a:7d:
         af:9f:7d:8a:08:ad:db:6b:1e:7f:4a:fc:b7:cc:dc:37:0f:b8:
         3b:5e:5a:aa:56:93:33:00:ca:11:8a:62:4f:df:58:56:85:96:
         38:e4:fe:61:1a:86:09:3b:eb:e2:f1:a4:e9:cb:4b:a9:44:ca:
         86:ff:0e:f0:80:5a:d5:4b:59:bc:59:19:82:db:17:8a:7c:8a:
         78:24:47:b7:ab:15:44:84:47:95:f8:3a:ed:cb:71:f6:c3:08:
         45:52:3d:30:93:8d:1b:a8:be:69:4b:ee:ac:e0:b8:c8:34:2f:
         a6:60:b6:e2:a2:3d:cb:58:b9:f6:db:c7:9c:c0:b5:88:b9:38:
         93:04:ef:ae:0e:52:58:20:c0:28:47:52:0e:25:e6:4c:61:b3:
         ae:f7:4e:d7:1c:fb:c5:af:80:60:01:2d:de:86:88:a3:9c:39:
         6d:c4:ed:78:85:a3:c6:d1:f7:69:f7:9c:4a:83:1e:aa:36:ed:
         c6:8a:f0:e4
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgICGRYwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTEyMDcxMTExMTBaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjdDQzY4QVIxMTAvBgNVBAUTKEFDQTlDOUJFQkJFOEQwOTk3
QzA2NEUyRkIzOEZGRTI5QjM5OTA3M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC375z2F/qr9GGs4tGBZGEAHI/pMp/P3owcwY5EipgOvtb7/7GUs8XE
MzftirmkIWCULSLXKG7V3pAS+Oq//I530bEeh00jYoBUbOGObwhvZ5vJ0h1UYE//
ouQxRbwxHybn5QU0VeGKhaxmmCRaDq7s52GQCW4k6fsUF5qN1MDBD57t29WR2ROh
KMUCiShkzGVZNS0DpN5Vfg8TfPwoXZiGBjJmndcrMjP5KYocfZc4xYTsSX/9L3Nd
pSph7XM9+HHA+vVizPp5pUXUihvCZeIG9lpOJz22vDh9wbgrlH/B6770wg++PenX
WAOOiSvK/LCXEc/lzBy4h6S+ny9unbCLAgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU
rKnJvrvo0Jl8Bk4vs4/+KbOZBz0wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjdDQzY4LzZBN0Iw
MTY0RDM1RDExRjA4OTlFQTU5N0RBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY3Q0M2OC82QTdCMDE2NEQzNUQxMUYwODk5RUE1OTdEQUU0RUM5
Qy9yS25KdnJ2bzBKbDhCazR2czRfLUtiT1pCejAubWZ0MB4GCCsGAQUFBwEHAQH/
BA8wDTALBAIAATAFAwMELWAwDQYJKoZIhvcNAQELBQADggEBAFKfi7fISH1hUU2K
A1pbJht+6muv2zKn5/pc/ZiGDcXPluLP+SYLzYRx0kfeN1eeUptdN9WXv38Y9GH9
4fqQ91qG99/cNGh6fa+ffYoIrdtrHn9K/LfM3DcPuDteWqpWkzMAyhGKYk/fWFaF
ljjk/mEahgk76+LxpOnLS6lEyob/DvCAWtVLWbxZGYLbF4p8ingkR7erFUSER5X4
Ou3LcfbDCEVSPTCTjRuovmlL7qzguMg0L6ZgtuKiPctYufbbx5zAtYi5OJME764O
UlggwChHUg4l5kxhs673Ttcc+8WvgGABLd6GiKOcOW3E7XiFo8bR92n3nEqDHqo2
7caK8OQ=
-----END CERTIFICATE-----
Generated at Fri Dec 12 11:29:44 2025 by rpki-client