This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer
File:                     tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer (raw, json)
Hash identifier:          pweAwToapexb4LaUBJqz1g4A5rUQaQbcyVuEmDQ1fBs=
Subject key identifier:   B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       193C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:26:28 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 164.160.20.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6460 (0x193c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:26:28 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F361A501AR, serialNumber=B600796DC250C874AC571D323D014B8876243C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:66:1e:a6:06:ca:dc:a8:6a:16:a2:4a:36:d9:
                    bd:48:1f:bb:a3:80:d1:06:94:39:2a:fb:5f:04:22:
                    09:d2:d1:ff:bc:f0:b6:c2:70:77:65:72:df:bb:b2:
                    e7:32:87:cd:da:c6:05:35:a4:af:da:26:25:b8:72:
                    c7:a9:32:92:ee:7c:c6:02:cf:de:81:83:85:48:d9:
                    45:27:16:13:c9:cb:b5:6e:a7:95:3a:f9:a4:98:8d:
                    62:db:1c:c8:b8:0b:89:72:6d:91:fc:14:ca:32:97:
                    3a:05:bf:8d:0d:4f:4e:05:8e:c7:43:39:98:a6:3c:
                    8a:aa:06:d7:8e:dd:4d:f5:2b:8e:4c:50:62:4a:2e:
                    c2:78:91:fb:2f:fa:a4:55:f7:0e:d9:0e:c8:1f:9c:
                    c2:16:63:92:eb:f9:f9:f4:af:74:8d:72:ef:52:6d:
                    71:6c:f5:67:77:f5:9e:84:0d:59:0f:58:57:c1:b8:
                    82:31:12:17:52:e2:4f:4c:89:fa:e3:23:20:a3:c3:
                    23:ae:15:9c:d6:97:28:44:97:32:d8:cd:83:3d:58:
                    b4:2d:dc:27:a7:8f:6e:1b:dd:65:d2:11:17:f2:36:
                    28:55:28:f9:73:5d:bf:b8:fd:7d:b0:79:76:b7:33:
                    41:2d:8b:92:e3:95:59:2a:a7:95:4c:8a:63:5b:ff:
                    a6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:50:53:da:f7:58:44:8b:40:66:de:24:ab:b9:c9:5c:e4:e5:
         84:00:9e:19:ca:5e:1e:5c:46:ef:09:dc:1b:ea:f5:e9:d7:28:
         5d:9b:0c:68:65:3f:0c:ae:bb:40:9e:4e:ce:4b:b2:c7:de:35:
         42:dd:83:0e:31:0f:26:23:53:07:7d:40:0f:de:32:ad:4a:60:
         90:93:63:7f:b5:23:4e:c1:f9:f9:76:0b:ae:04:ea:62:e6:45:
         07:f6:94:94:53:62:b2:41:46:67:b2:69:2a:5b:49:e4:ee:a7:
         bb:b7:2d:00:75:59:44:d7:af:fb:98:45:47:b8:a0:a5:ae:56:
         4d:6e:9f:92:d4:5d:12:e2:73:e5:b9:3d:74:ac:2d:85:8a:89:
         07:3f:7e:32:10:64:4e:35:37:1c:04:39:03:c4:99:e2:80:b0:
         c6:95:79:0c:62:3f:e8:a2:e6:59:6d:af:42:c9:87:eb:42:46:
         0a:1a:92:9a:c8:af:78:9e:06:c9:3f:cc:e7:ba:0a:fa:3b:20:
         41:2f:d7:76:6d:21:90:7c:af:73:d2:2f:b1:cc:f9:d7:53:0d:
         ea:0f:1d:38:bb:10:e8:21:67:e9:41:45:fb:9e:41:bd:ac:27:
         7c:8d:4f:a0:a2:e5:82:f0:01:04:03:09:15:71:39:54:2d:20:
         bb:1c:54:05
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICGTwwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDI2MjhaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjFBNTAxQVIxMTAvBgNVBAUTKEI2MDA3OTZEQzI1MEM4NzRB
QzU3MUQzMjNEMDE0Qjg4NzYyNDNDNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQD5Zh6mBsrcqGoWoko22b1IH7ujgNEGlDkq+18EIgnS0f+88LbCcHdl
ct+7sucyh83axgU1pK/aJiW4csepMpLufMYCz96Bg4VI2UUnFhPJy7Vup5U6+aSY
jWLbHMi4C4lybZH8FMoylzoFv40NT04FjsdDOZimPIqqBteO3U31K45MUGJKLsJ4
kfsv+qRV9w7ZDsgfnMIWY5Lr+fn0r3SNcu9SbXFs9Wd39Z6EDVkPWFfBuIIxEhdS
4k9MifrjIyCjwyOuFZzWlyhElzLYzYM9WLQt3Cenj24b3WXSERfyNihVKPlzXb+4
/X2weXa3M0Eti5LjlVkqp5VMimNb/6ZtAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
tgB5bcJQyHSsVx0yPQFLiHYkPF4wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjFBNTAxLzg3OTdE
MTlBMTNGRDExRUU5NEMzREIyNDRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYxQTUwMS84Nzk3RDE5QTEzRkQxMUVFOTRDM0RCMjQ0QUQ5RTZG
Qy90Z0I1YmNKUXlIU3NWeDB5UFFGTGlIWWtQRjQubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCpKAUMA0GCSqGSIb3DQEBCwUAA4IBAQADUFPa91hEi0Bm
3iSruclc5OWEAJ4Zyl4eXEbvCdwb6vXp1yhdmwxoZT8MrrtAnk7OS7LH3jVC3YMO
MQ8mI1MHfUAP3jKtSmCQk2N/tSNOwfn5dguuBOpi5kUH9pSUU2KyQUZnsmkqW0nk
7qe7ty0AdVlE16/7mEVHuKClrlZNbp+S1F0S4nPluT10rC2FiokHP34yEGRONTcc
BDkDxJnigLDGlXkMYj/oouZZba9CyYfrQkYKGpKayK94ngbJP8znugr6OyBBL9d2
bSGQfK9z0i+xzPnXUw3qDx04uxDoIWfpQUX7nkG9rCd8jU+gouWC8AEEAwkVcTlU
LSC7HFQF
-----END CERTIFICATE-----
Generated at Sat Feb 7 07:15:04 2026 by rpki-client