This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer File: 3MPWc23vjmmxdsLjgI6oQGpetKE.cer (raw, json) Hash identifier: Z9a3Cg1zifmfzIOVhuJJvcHjMRxC3mKtYRU8JEfGzJk= Subject key identifier: DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A3A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:00:25 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 156.0.80.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6714 (0x1a3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:00:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A2F84AR, serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:4a:77:52:c1:28:64:03:81:7e:2c:d5:db: e0:38:a7:c5:84:76:64:f8:7e:5b:c6:0e:44:f4:b7: 15:34:20:a0:54:9b:cd:59:d9:40:f0:52:fa:89:6c: e1:b8:0a:0a:1e:b0:29:02:fc:7b:69:72:c4:10:ba: 07:33:c2:9a:fc:d5:0a:9f:4a:7c:da:de:62:0d:5a: 4a:28:ae:55:57:75:74:7e:ba:e2:d5:64:74:7e:96: ca:b0:3c:7c:ef:3d:49:c9:cd:ec:86:af:4c:9a:48: d7:65:2e:e8:d3:d4:e3:a2:44:6d:cd:89:dc:ee:b1: ca:9e:21:0f:82:9b:fb:f8:00:08:74:08:cd:b1:7d: 01:0a:2e:1d:5a:16:43:4a:7b:f0:d0:56:52:af:b2: 41:3c:56:41:86:e0:73:ea:1f:98:bf:bb:6b:42:30: 23:b3:e4:4d:18:4a:33:b5:43:4f:ad:25:a1:04:a2: a7:0e:57:ac:41:73:45:e9:41:6f:dc:a0:26:25:eb: 3f:1f:08:60:1c:fa:b2:5a:10:b2:7b:a1:cc:38:91: 2a:24:78:98:47:6b:5c:31:68:23:34:a6:b6:3c:d2: d7:b1:97:e8:31:4a:b8:63:a7:9b:69:62:7a:2d:30: eb:84:85:c7:d8:fb:29:e0:2b:9a:9f:94:6f:70:23: ab:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft sbgp-ipAddrBlock: critical IPv4: 156.0.80.0/22 Signature Algorithm: sha256WithRSAEncryption 33:a9:c6:1e:2a:82:f9:8e:f8:05:4a:d0:87:8b:7a:de:54:69: 8a:12:f0:14:63:31:f1:1a:0f:b1:3d:42:cd:e4:9c:4a:89:79: 84:29:13:28:bc:7d:b2:cd:7d:37:6e:e7:f9:aa:83:44:39:ec: 90:2d:a2:61:b8:ac:7f:6b:13:2c:39:9b:1b:eb:65:ec:2b:f4: ab:a6:e8:b2:0d:4f:3d:da:04:ad:6b:d6:45:1d:a8:1c:58:d6: 1a:51:3d:56:ee:f5:dc:05:ac:b8:a9:e0:5b:1d:0a:3d:a2:9a: b8:9f:e8:32:b3:8a:6f:43:70:9b:8f:5e:6b:e4:c6:0b:87:57: c8:7c:d9:d8:bf:12:da:f4:94:d6:6d:cd:29:90:0c:e6:83:6d: d0:a4:5c:54:fd:27:d6:5c:7c:7a:b3:5d:dd:f6:ce:54:7c:3d: 49:f7:44:01:04:6a:cf:8f:a8:c3:50:02:62:f2:08:9b:3f:eb: 2b:d2:47:a8:10:60:45:b8:4c:e0:fe:e6:2a:25:f1:0c:3c:cf: f3:00:1f:ae:aa:b8:eb:33:59:f8:c6:34:6a:89:12:e3:91:00: 7e:6e:65:7c:e4:83:a3:a0:cb:93:56:43:83:43:53:ae:60:3f: 5a:d1:9b:6b:6b:9a:46:89:ee:62:23:0b:39:1a:13:14:ed:4b: d4:ad:09:25 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGjowDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTAwMjVaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkEyRjg0QVIxMTAvBgNVBAUTKERDQzNENjczNkRFRjhFNjlC MTc2QzJFMzgwOEVBODQwNkE1RUI0QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDKz0p3UsEoZAOBfizV2+A4p8WEdmT4flvGDkT0txU0IKBUm81Z2UDw UvqJbOG4CgoesCkC/HtpcsQQugczwpr81QqfSnza3mINWkoorlVXdXR+uuLVZHR+ lsqwPHzvPUnJzeyGr0yaSNdlLujT1OOiRG3NidzuscqeIQ+Cm/v4AAh0CM2xfQEK Lh1aFkNKe/DQVlKvskE8VkGG4HPqH5i/u2tCMCOz5E0YSjO1Q0+tJaEEoqcOV6xB c0XpQW/coCYl6z8fCGAc+rJaELJ7ocw4kSokeJhHa1wxaCM0prY80texl+gxSrhj p5tpYnotMOuEhcfY+yngK5qflG9wI6ufAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU 3MPWc23vjmmxdsLjgI6oQGpetKEwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkEyRjg0LzkzNUJG MzUwRUVBRjExRUI5MUNDNkQyQUQ4QTAxNENFLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZBMkY4NC85MzVCRjM1MEVFQUYxMUVCOTFDQzZEMkFEOEEwMTRD RS8zTVBXYzIzdmptbXhkc0xqZ0k2b1FHcGV0S0UubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCnABQMA0GCSqGSIb3DQEBCwUAA4IBAQAzqcYeKoL5jvgF StCHi3reVGmKEvAUYzHxGg+xPULN5JxKiXmEKRMovH2yzX03buf5qoNEOeyQLaJh uKx/axMsOZsb62XsK/SrpuiyDU892gSta9ZFHagcWNYaUT1W7vXcBay4qeBbHQo9 opq4n+gys4pvQ3Cbj15r5MYLh1fIfNnYvxLa9JTWbc0pkAzmg23QpFxU/SfWXHx6 s13d9s5UfD1J90QBBGrPj6jDUAJi8gibP+sr0keoEGBFuEzg/uYqJfEMPM/zAB+u qrjrM1n4xjRqiRLjkQB+bmV85IOjoMuTVkODQ1OuYD9a0Ztra5pGie5iIws5GhMU 7UvUrQkl -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:47 2026 by rpki-client