This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer File: 3IJjhe1IHHwjMIBE24nEU5kq3E8.cer (raw, json) Hash identifier: ygnzSJnu6abJLrXb3yRJHS7YbHQsLRWzOubQYpY9Iww= Subject key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 19AA Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:39:49 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.255.128.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6570 (0x19aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:39:49 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F365E0EFAR, serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:aa:a7:3f:df:7b:95:53:df:75:a1:5a:1c: 5e:62:25:29:88:4a:bc:0d:b8:56:48:66:95:46:fb: 22:12:ca:8e:d8:7e:56:0c:01:c5:95:3e:ad:8c:bb: ec:eb:2f:d7:77:cc:7d:93:0c:7e:cd:d2:e4:73:31: be:2e:98:9b:20:f0:62:29:b9:88:77:81:5b:64:fc: fa:51:82:ff:92:e4:f3:d4:26:0a:38:ca:91:fa:85: 5b:69:37:f4:a9:70:5f:1e:fa:c7:97:88:2a:ff:0d: 86:c7:5f:bc:6f:2e:e2:9c:2b:7c:24:4c:b2:ea:43: 8f:2e:cb:07:ff:a3:71:f9:3b:5e:16:6d:6a:44:74: 28:c4:34:5c:42:52:80:9e:de:45:4f:4e:b9:3b:b5: fa:21:a9:88:2d:51:05:0c:36:b6:04:31:e2:ee:c8: 13:5c:4f:e2:e1:a8:d4:74:98:3d:2e:9d:84:88:1c: 71:2e:d2:2b:e2:af:ab:95:58:44:60:29:1b:6f:bd: eb:ba:61:fb:e2:d8:13:7e:70:e1:76:69:73:d2:df: 43:81:a1:cc:a6:9b:8e:a7:a7:f3:e2:e3:ee:e8:c5: 63:42:ba:b8:62:eb:62:ad:70:d6:a7:4f:52:90:92: ff:4a:f5:82:7b:3b:81:10:8c:4e:c5:45:f0:d6:36: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft sbgp-ipAddrBlock: critical IPv4: 169.255.128.0/22 Signature Algorithm: sha256WithRSAEncryption 30:f0:7e:40:3c:34:21:1a:82:69:87:88:a8:d4:7e:25:21:d4: fd:26:4d:46:cc:50:ea:41:e5:de:15:4e:6e:6d:04:3e:c8:8a: 8d:a8:f4:79:32:41:08:25:a5:23:6f:d3:9e:98:bb:a0:16:34: 79:e0:c1:2c:5f:1a:ef:bb:1e:2c:20:88:bc:7d:13:52:60:4d: 3c:ea:b0:92:98:0f:06:67:52:32:2f:24:8b:64:5e:d3:6f:b0: 29:a7:0b:61:62:9f:2a:46:3d:ba:f4:23:7c:bd:96:4f:d7:c2: 90:c0:d8:fa:6f:20:75:9c:02:05:fb:1b:5f:0b:d1:5b:f9:c8: 15:7f:1f:70:78:1d:18:e2:ca:c2:87:cb:64:e2:7f:8d:d6:da: b9:01:0b:89:55:80:8f:ca:4e:e4:ba:5d:73:2d:a1:52:85:84: f6:ea:dc:1a:09:f5:7e:0e:40:e0:bd:7f:80:ac:e2:fb:e0:f0: 7d:b3:29:fc:30:15:d6:b9:6c:80:08:00:08:21:06:77:1c:c3: 11:80:f3:e4:f0:5d:3a:d7:2d:77:41:af:f5:6d:4e:10:96:30: 90:45:62:d9:80:e0:8a:ba:bc:85:ca:a3:7e:d0:eb:af:b0:e8: 1b:ec:83:87:b7:07:37:22:87:5a:70:2e:ce:b7:a9:c2:cf:6d: 4b:0c:84:01 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGaowDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDM5NDlaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjVFMEVGQVIxMTAvBgNVBAUTKERDODI2Mzg1RUQ0ODFDN0My MzMwODA0NERCODlDNDUzOTkyQURDNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDBuqqnP997lVPfdaFaHF5iJSmISrwNuFZIZpVG+yISyo7YflYMAcWV Pq2Mu+zrL9d3zH2TDH7N0uRzMb4umJsg8GIpuYh3gVtk/PpRgv+S5PPUJgo4ypH6 hVtpN/SpcF8e+seXiCr/DYbHX7xvLuKcK3wkTLLqQ48uywf/o3H5O14WbWpEdCjE NFxCUoCe3kVPTrk7tfohqYgtUQUMNrYEMeLuyBNcT+LhqNR0mD0unYSIHHEu0ivi r6uVWERgKRtvveu6Yfvi2BN+cOF2aXPS30OBocymm46np/Pi4+7oxWNCurhi62Kt cNanT1KQkv9K9YJ7O4EQjE7FRfDWNuIdAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU 3IJjhe1IHHwjMIBE24nEU5kq3E8wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjVFMEVGLzRBRkY5 NEQ2REFBRTExRUM5OEI4RjBEM0YxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY1RTBFRi80QUZGOTRENkRBQUUxMUVDOThCOEYwRDNGMTIyMjQ2 OC8zSUpqaGUxSUhId2pNSUJFMjRuRVU1a3EzRTgubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqf+AMA0GCSqGSIb3DQEBCwUAA4IBAQAw8H5APDQhGoJp h4io1H4lIdT9Jk1GzFDqQeXeFU5ubQQ+yIqNqPR5MkEIJaUjb9OemLugFjR54MEs Xxrvux4sIIi8fRNSYE086rCSmA8GZ1IyLySLZF7Tb7AppwthYp8qRj269CN8vZZP 18KQwNj6byB1nAIF+xtfC9Fb+cgVfx9weB0Y4srCh8tk4n+N1tq5AQuJVYCPyk7k ul1zLaFShYT26twaCfV+DkDgvX+ArOL74PB9syn8MBXWuWyACAAIIQZ3HMMRgPPk 8F061y13Qa/1bU4QljCQRWLZgOCKuryFyqN+0OuvsOgb7IOHtwc3IodacC7Ot6nC z21LDIQB -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:24 2026 by rpki-client