This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
File:                     xcFCD1BxamsUb136joK_0eTdmRA.cer (raw, json)
Hash identifier:          HoXVLuT1Oy32H0ZD1393itkxr58mpjpwISHyxFVkmQM=
Subject key identifier:   C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A81
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:09:00 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.226.184.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6785 (0x1a81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:09:00 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:52:cf:0f:77:f0:3e:f6:aa:e5:3c:30:c3:
                    60:86:4c:0e:24:1c:77:ae:ae:9d:09:0b:58:cb:1b:
                    36:c0:37:47:86:0f:8d:1d:97:1b:cd:2e:0c:a9:f7:
                    3f:98:50:91:c2:fb:c3:ae:06:6f:ec:ae:40:14:4a:
                    e4:87:e9:47:aa:cd:b1:66:2f:d4:54:5e:05:45:9e:
                    46:ff:8a:17:1e:20:ac:24:eb:f2:8f:3a:95:ea:e6:
                    d5:7d:f4:d2:2c:21:30:c5:6c:e3:f4:fa:7e:23:7a:
                    cf:45:e3:99:a8:cb:33:6c:ea:3a:3f:3a:9e:28:58:
                    eb:12:8c:fb:a7:8c:d6:75:21:7c:6b:2f:4f:cd:e2:
                    f8:5c:5d:46:b7:76:d0:66:a7:4a:c0:b4:a5:fc:80:
                    82:b1:97:c5:2b:c8:a4:19:d7:f0:2f:a5:71:72:60:
                    76:52:eb:cd:98:02:86:ba:2b:8f:92:6c:32:55:81:
                    d7:b5:36:09:5a:6d:fa:1d:79:73:69:5e:53:20:9b:
                    fc:11:91:cc:7b:ac:9a:66:70:9e:eb:3d:f6:9e:05:
                    b4:2f:fb:5b:c3:ed:90:a3:c0:27:49:bb:ec:2f:60:
                    5a:4c:c9:bf:87:3d:b7:5b:f3:88:b1:14:f5:5d:c5:
                    99:3a:0b:fa:e7:c7:9e:1e:87:8e:1a:f9:ba:1e:bd:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.226.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:a1:6d:2b:91:58:75:53:a4:59:16:e6:20:7e:8d:2f:ae:91:
         7b:17:87:26:26:00:a5:40:a8:74:9d:31:a1:22:21:64:c8:44:
         4f:a3:52:1f:e0:3c:a4:ac:1d:99:f9:5a:78:b2:6b:de:6b:73:
         6b:0e:29:fb:36:ee:7b:1c:5f:86:83:f7:17:97:3a:04:7c:8a:
         0b:f3:ea:76:33:cd:74:44:ab:f7:05:5b:a1:46:0a:8c:8f:04:
         d7:9d:cf:36:eb:05:42:46:a4:a1:2d:cd:55:eb:e1:83:cf:dd:
         b4:a9:c1:a0:1e:08:b8:d1:79:e2:8d:e4:51:69:40:eb:f8:0b:
         6b:74:e7:21:59:9a:af:89:82:0b:33:84:44:35:4d:4e:4f:3a:
         65:53:79:77:26:d9:16:94:cc:5a:0e:94:db:63:71:40:2e:9d:
         e2:b3:b3:41:54:fc:30:a9:b2:f4:4f:82:bc:5a:f4:d7:d6:5e:
         3a:09:97:6b:d1:4b:86:4f:7c:dd:a8:08:7b:7c:25:5b:50:04:
         d9:4e:91:7d:c0:fe:6b:a3:4f:c5:ec:ab:77:ba:53:49:cd:f6:
         98:76:ed:a0:64:f2:80:1e:70:db:c5:e8:a3:e5:42:6f:56:f7:
         f4:35:d4:72:0b:84:3e:c4:2f:32:b5:00:8e:4a:14:78:75:aa:
         05:84:8e:be
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICGoEwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTA5MDBaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkNGQkIwQVIxMTAvBgNVBAUTKEM1QzE0MjBGNTA3MTZBNkIx
NDZGNURGQThFODJCRkQxRTRERDk5MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDIbVLPD3fwPvaq5Twww2CGTA4kHHeurp0JC1jLGzbAN0eGD40dlxvN
Lgyp9z+YUJHC+8OuBm/srkAUSuSH6UeqzbFmL9RUXgVFnkb/ihceIKwk6/KPOpXq
5tV99NIsITDFbOP0+n4jes9F45moyzNs6jo/Op4oWOsSjPunjNZ1IXxrL0/N4vhc
XUa3dtBmp0rAtKX8gIKxl8UryKQZ1/AvpXFyYHZS682YAoa6K4+SbDJVgde1Ngla
bfodeXNpXlMgm/wRkcx7rJpmcJ7rPfaeBbQv+1vD7ZCjwCdJu+wvYFpMyb+HPbdb
84ixFPVdxZk6C/rnx54eh44a+boevb5VAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
xcFCD1BxamsUb136joK/0eTdmRAwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkNGQkIwLzM1MDNE
OUY4RDQ1MjExRUZCMjM4NDhCMTc2MkU5NTFBLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZDRkJCMC8zNTAzRDlGOEQ0NTIxMUVGQjIzODQ4QjE3NjJFOTUx
QS94Y0ZDRDFCeGFtc1ViMTM2am9LXzBlVGRtUkEubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCoOK4MA0GCSqGSIb3DQEBCwUAA4IBAQCgoW0rkVh1U6RZ
FuYgfo0vrpF7F4cmJgClQKh0nTGhIiFkyERPo1If4DykrB2Z+Vp4smvea3NrDin7
Nu57HF+Gg/cXlzoEfIoL8+p2M810RKv3BVuhRgqMjwTXnc826wVCRqShLc1V6+GD
z920qcGgHgi40XnijeRRaUDr+AtrdOchWZqviYILM4RENU1OTzplU3l3JtkWlMxa
DpTbY3FALp3is7NBVPwwqbL0T4K8WvTX1l46CZdr0UuGT3zdqAh7fCVbUATZTpF9
wP5ro0/F7Kt3ulNJzfaYdu2gZPKAHnDbxeij5UJvVvf0NdRyC4Q+xC8ytQCOShR4
daoFhI6+
-----END CERTIFICATE-----
Generated at Sat Feb 7 07:12:50 2026 by rpki-client