This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer File: xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer (raw, json) Hash identifier: iYzf7IzMaOE9YlrG4mH4c1smORiD0nacv0K7jiwvOiY= Subject key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A32 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:59:21 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 168.253.120.0/21 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 09 Feb 2026 00:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6706 (0x1a32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:59:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:4a:e7:21:1b:a4:48:9c:ca:5b:0f:a4:a2: 24:c3:0a:3d:9a:3c:05:32:80:ff:f2:c0:da:53:98: 90:ff:6e:63:5b:a7:f7:c9:14:e1:a6:04:c1:c5:8d: db:9a:de:2d:bf:d0:36:12:c0:cb:d7:b8:44:35:b8: f6:4f:5c:b7:fc:41:ca:14:61:e8:d1:8d:4e:67:0a: 96:b8:0c:ed:f0:41:4c:97:91:6d:5b:99:74:ae:4d: e9:a5:33:88:7d:c6:62:ca:c1:cc:fe:b7:8e:c5:5f: 30:86:ac:cc:51:b4:68:ad:e7:cc:0c:2f:8c:d1:5b: ff:e7:72:1a:9d:d6:a1:4c:15:5b:30:c0:15:68:62: 6c:26:f1:ae:94:68:2a:3a:8f:cd:e6:1d:85:02:8b: ed:b3:13:f0:12:58:e6:78:77:3c:c1:d2:03:9d:9c: 6a:e7:23:a8:e8:f0:22:2a:9e:46:58:db:56:2e:9a: 48:1d:b4:a5:eb:ec:0b:18:47:9a:9a:26:be:17:6d: 92:21:3c:74:80:6d:7a:d9:f9:10:ea:dd:bc:4a:24: c5:bd:94:b0:e3:c8:18:53:99:83:db:ae:c0:30:f6: 8f:a4:30:83:0d:b1:cb:d3:ac:39:01:c6:97:0a:7a: fa:e2:76:bc:b6:4d:aa:d3:4c:98:2f:09:ee:41:c1: dd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft sbgp-ipAddrBlock: critical IPv4: 168.253.120.0/21 Signature Algorithm: sha256WithRSAEncryption 31:5b:8c:28:22:44:19:45:11:f2:1e:67:41:f0:75:1c:19:86: 6a:66:f2:75:c6:21:fc:29:92:b5:a0:3b:0c:35:fa:39:a7:fc: 79:69:44:ca:42:cd:eb:5f:f9:3b:74:1e:44:74:28:ca:8b:5c: 64:b0:fa:18:54:75:a8:20:50:20:e1:2e:da:50:c4:9c:7f:68: 43:75:f3:e3:91:6a:7f:86:cb:44:83:11:11:53:d9:b0:18:13: d5:ba:c8:c9:31:e0:ff:04:b2:f2:8a:f1:a4:b4:c4:ed:54:bc: 23:f1:c3:f4:13:e3:7d:75:79:83:1b:a0:f9:e0:96:a8:b8:5d: 41:1d:2a:ba:0e:a5:4c:a7:2b:94:ab:33:99:11:a1:6a:f0:0d: c6:f1:98:1e:c5:35:c6:5b:71:6d:f1:6a:ab:45:e0:06:1c:f3: 5a:61:a7:a2:02:5b:f6:45:54:37:a6:50:98:ba:84:09:eb:bc: ab:09:bf:e8:ab:06:1a:ce:c4:76:40:f0:53:68:67:8f:f4:5f: 80:06:95:b6:c3:14:11:bb:66:f7:d5:87:5a:a0:01:3f:e2:69: 2e:15:d3:1c:f0:a7:d5:92:50:23:56:84:d1:6e:0f:18:7f:af: a1:e2:9d:56:60:6d:e7:ee:50:e5:38:b0:49:cd:2e:ef:26:15: c6:cb:90:72 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGjIwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDU5MjFaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjlGQTM2QVIxMTAvBgNVBAUTKEM1Rjg2MTQ4QTQ0MTE2QTYy OTJDMDA4QTA5QjRFNzVCOEJEOURBMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC2k0rnIRukSJzKWw+koiTDCj2aPAUygP/ywNpTmJD/bmNbp/fJFOGm BMHFjdua3i2/0DYSwMvXuEQ1uPZPXLf8QcoUYejRjU5nCpa4DO3wQUyXkW1bmXSu TemlM4h9xmLKwcz+t47FXzCGrMxRtGit58wML4zRW//nchqd1qFMFVswwBVoYmwm 8a6UaCo6j83mHYUCi+2zE/ASWOZ4dzzB0gOdnGrnI6jo8CIqnkZY21YumkgdtKXr 7AsYR5qaJr4XbZIhPHSAbXrZ+RDq3bxKJMW9lLDjyBhTmYPbrsAw9o+kMIMNscvT rDkBxpcKevridry2TarTTJgvCe5Bwd3BAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU xfhhSKRBFqYpLACKCbTnW4vZ2h0wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjlGQTM2L0FENDNG OTA2ODEzOTExRTk5MjhCMzgxQUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY5RkEzNi9BRDQzRjkwNjgxMzkxMUU5OTI4QjM4MUFGOEFFQTIy OC94ZmhoU0tSQkZxWXBMQUNLQ2JUblc0dloyaDAubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQDqP14MA0GCSqGSIb3DQEBCwUAA4IBAQAxW4woIkQZRRHy HmdB8HUcGYZqZvJ1xiH8KZK1oDsMNfo5p/x5aUTKQs3rX/k7dB5EdCjKi1xksPoY VHWoIFAg4S7aUMScf2hDdfPjkWp/hstEgxERU9mwGBPVusjJMeD/BLLyivGktMTt VLwj8cP0E+N9dXmDG6D54JaouF1BHSq6DqVMpyuUqzOZEaFq8A3G8ZgexTXGW3Ft 8WqrReAGHPNaYaeiAlv2RVQ3plCYuoQJ67yrCb/oqwYazsR2QPBTaGeP9F+ABpW2 wxQRu2b31YdaoAE/4mkuFdMc8KfVklAjVoTRbg8Yf6+h4p1WYG3n7lDlOLBJzS7v JhXGy5By -----END CERTIFICATE-----Generated at Sat Feb 7 07:13:44 2026 by rpki-client