This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer File: xkc2Jerv1nNskH0jHdnF29ufXqs.cer (raw, json) Hash identifier: fkDNCHFxqwN/ZB3mrCkledsImpQ3q+qmlK9TVfOl36E= Subject key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1AB7 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:15:17 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.120.0.0/16 IP: 160.154.0.0/15 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 23 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6839 (0x1ab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:15:17 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:aa:a0:f0:db:3c:79:bd:80:07:ac:19:aa: 15:b8:c1:36:dd:94:81:3e:7f:42:a2:20:7e:43:2c: ca:08:cf:54:9f:55:a6:af:39:21:9f:d5:1a:b5:d7: aa:10:16:fa:a1:88:25:e0:81:96:d0:d7:b0:c8:ef: 1c:90:e4:ca:9f:bb:b6:e8:f5:73:55:95:40:6c:51: 89:fd:6c:ad:a1:53:81:4b:76:03:25:61:38:51:8b: 85:06:22:95:30:1a:0b:2f:c5:35:2d:02:9f:42:1b: 82:95:c8:22:b0:b6:89:75:10:28:43:04:0f:7f:1d: c4:8d:8d:c3:9b:29:a6:4b:9c:f1:d5:6d:3f:66:54: 80:2d:51:28:df:ec:4c:2f:17:d0:61:f3:49:f8:8b: c3:3a:68:eb:ad:41:f2:1a:84:33:96:31:0b:79:1a: 60:5b:a0:49:3f:0d:1b:0f:7c:34:dc:fc:22:3b:05: 00:09:7b:01:22:0a:17:0f:ce:43:fe:d8:c3:ab:eb: ea:7a:8f:ec:5b:e9:be:9a:24:fa:fa:a0:2d:7d:6a: 9d:86:8c:73:c6:81:4f:df:90:a7:c7:4f:b4:a2:04: 3b:72:32:d6:82:2b:78:01:61:c5:ba:6b:44:2e:ba: 44:8a:d1:01:59:16:38:a9:14:36:6f:5f:59:d9:43: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft sbgp-ipAddrBlock: critical IPv4: 160.120.0.0/16 160.154.0.0/15 Signature Algorithm: sha256WithRSAEncryption 86:d0:97:5e:4f:19:91:b2:10:b6:68:2e:59:48:e8:e4:ae:68: 57:97:85:65:e2:c8:c6:14:2b:5d:f1:c4:1e:ce:ce:94:41:73: bc:e0:ef:28:d0:7c:41:e0:83:0a:bc:d4:3b:40:d6:37:39:70: 23:28:01:e3:46:77:20:2c:39:7d:d7:15:49:04:b1:e5:95:6b: 6d:2f:06:cf:c6:a4:b0:e1:d9:59:c5:da:f1:65:1e:cf:1a:64: 89:8b:9e:07:8b:58:a7:01:a5:88:0d:33:24:7c:5c:1a:01:63: 74:ef:a0:0d:e1:aa:c3:03:34:7c:66:1d:6c:75:9c:d7:82:a8: 24:ad:9f:9a:60:21:86:58:41:c8:d2:7e:b4:e4:a7:c8:66:0a: 23:ef:01:d2:e7:54:20:de:e6:67:3c:11:00:2a:33:3f:f2:6c: 8f:11:31:5a:1f:cf:4a:92:32:ec:54:9c:0c:3a:d0:75:e0:aa: 56:e4:69:fe:a7:b3:bd:99:de:af:c4:11:95:81:da:9b:9b:35: 2e:df:3a:9d:b6:7b:e0:69:cd:49:9a:a9:70:5f:1c:d3:30:ce: 7e:68:65:61:e8:f3:a3:56:f7:e2:d1:7b:74:3f:39:d9:a3:fd: 80:3e:45:a6:b3:30:a9:82:a1:ff:80:89:d6:35:29:66:30:aa: d1:78:42:28 -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgICGrcwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTE1MTdaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkY3MzFGQVIxMTAvBgNVBAUTKEM2NDczNjI1RUFFRkQ2NzM2 QzkwN0QyMzFERDlDNURCREI5RjVFQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDeAqqg8Ns8eb2AB6wZqhW4wTbdlIE+f0KiIH5DLMoIz1SfVaavOSGf 1Rq116oQFvqhiCXggZbQ17DI7xyQ5Mqfu7bo9XNVlUBsUYn9bK2hU4FLdgMlYThR i4UGIpUwGgsvxTUtAp9CG4KVyCKwtol1EChDBA9/HcSNjcObKaZLnPHVbT9mVIAt USjf7EwvF9Bh80n4i8M6aOutQfIahDOWMQt5GmBboEk/DRsPfDTc/CI7BQAJewEi ChcPzkP+2MOr6+p6j+xb6b6aJPr6oC19ap2GjHPGgU/fkKfHT7SiBDtyMtaCK3gB YcW6a0QuukSK0QFZFjipFDZvX1nZQ6WVAgMBAAGjggL1MIIC8TAdBgNVHQ4EFgQU xkc2Jerv1nNskH0jHdnF29ufXqswHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkY3MzFGLzkzNDBE ODI2Mzc5NzExRUU5NkZCN0EzMTRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZGNzMxRi85MzQwRDgyNjM3OTcxMUVFOTZGQjdBMzE0QUQ5RTZG Qy94a2MySmVydjFuTnNrSDBqSGRuRjI5dWZYcXMubWZ0MCMGCCsGAQUFBwEHAQH/ BBQwEjAQBAIAATAKAwMAoHgDAwGgmjANBgkqhkiG9w0BAQsFAAOCAQEAhtCXXk8Z kbIQtmguWUjo5K5oV5eFZeLIxhQrXfHEHs7OlEFzvODvKNB8QeCDCrzUO0DWNzlw IygB40Z3ICw5fdcVSQSx5ZVrbS8Gz8aksOHZWcXa8WUezxpkiYueB4tYpwGliA0z JHxcGgFjdO+gDeGqwwM0fGYdbHWc14KoJK2fmmAhhlhByNJ+tOSnyGYKI+8B0udU IN7mZzwRACozP/JsjxExWh/PSpIy7FScDDrQdeCqVuRp/qezvZner8QRlYHam5s1 Lt86nbZ74GnNSZqpcF8c0zDOfmhlYejzo1b34tF7dD852aP9gD5FprMwqYKh/4CJ 1jUpZjCq0XhCKA== -----END CERTIFICATE-----Generated at Wed Jan 21 22:43:10 2026 by rpki-client