This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer File: 3e9RyKD_hVBdng5v-gInbCpVrug.cer (raw, json) Hash identifier: Ihfh5RE7wFQ7vEzn8HAGMrCGT1/8CqQHx3KYaHnycUM= Subject key identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1AC3 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:17:00 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.239.12.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6851 (0x1ac3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:17:00 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FBB68AR, serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:2f:0a:2b:2b:ab:31:76:07:d1:45:35:a1: 33:05:20:f0:b4:7f:db:38:94:96:b7:03:22:6d:82: 05:04:2f:08:3f:3b:1f:d3:96:2c:f5:36:12:74:d3: e8:46:03:c5:9b:f6:ee:5f:b9:f6:cf:a6:92:ca:51: 66:f7:15:d1:72:b9:bd:c7:0e:b2:95:e9:91:b9:05: 3d:fa:83:50:d4:0d:8e:8b:ec:51:dc:f2:74:b4:21: 9e:f4:68:80:af:38:12:83:2e:52:d2:91:03:1d:e0: 7b:e6:f0:cf:c2:d4:69:61:a4:ea:2e:3d:49:6d:fc: 79:6b:b0:96:c9:05:c9:4b:5f:f1:c8:55:e5:6e:14: 17:45:67:16:cd:fd:ff:d1:ae:66:50:6b:3b:1b:bb: 0e:ad:cf:af:57:5b:33:ec:c8:1f:3e:75:23:8d:70: 67:24:77:dc:e5:ce:f2:f9:13:5f:44:47:86:60:31: 5a:7d:c0:f1:55:9c:af:1a:1a:1d:f7:47:f1:0c:6d: f6:1b:23:d7:fc:f5:36:b6:0d:99:35:be:1d:ae:63: 1b:e4:f1:d9:f7:7a:d0:d7:f2:ca:5c:ac:a7:ee:aa: dd:1e:df:17:b2:f3:19:af:0f:63:25:85:56:b7:53: 26:d3:d7:9a:79:13:c3:bf:20:30:b8:2e:98:ce:60: eb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft sbgp-ipAddrBlock: critical IPv4: 169.239.12.0/22 Signature Algorithm: sha256WithRSAEncryption 40:2b:c2:94:45:97:9b:5d:dd:af:90:f6:02:73:76:fd:7e:1f: aa:c5:40:2f:44:95:db:a6:01:70:22:d2:db:71:24:8b:dd:bc: f6:89:2f:ae:75:8c:dc:c7:9d:08:1a:4a:41:c5:c8:fc:dc:a2: 01:11:7a:f7:b9:9f:d8:43:c4:25:f5:da:07:7e:eb:ea:72:9b: 78:cf:5a:87:51:9f:a5:87:49:bf:6c:c1:e9:60:0e:7b:a8:e0: 11:59:78:86:bb:38:b1:71:f6:be:9e:60:ff:86:d8:54:d3:1a: d5:03:1c:c8:05:77:1c:b1:81:d5:c5:e1:15:83:44:55:c4:71: d7:48:9f:98:e6:91:d3:8f:07:1f:8c:e7:04:62:d5:f2:2a:25: 59:97:dc:fd:b3:d9:8e:87:49:0d:34:78:71:2f:dd:b8:9d:cc: 66:57:93:0d:78:0a:b6:5b:78:27:47:79:68:27:04:31:d9:54: 07:ee:45:03:62:59:bc:e0:c2:4d:4f:39:fb:cb:0a:58:d4:f0: f3:c6:c4:d9:38:37:3b:1d:b7:1a:66:57:bc:2d:cc:a8:c4:1d: f0:a5:d8:18:41:2c:a9:bf:76:46:1d:7e:61:8d:5a:21:c9:ec: 1d:4b:0b:6d:56:2d:62:be:2b:ca:73:64:36:09:41:ea:a5:d5: f8:28:6d:04 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGsMwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTE3MDBaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkZCQjY4QVIxMTAvBgNVBAUTKERERUY1MUM4QTBGRjg1NTA1 RDlFMEU2RkZBMDIyNzZDMkE1NUFFRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCzCC8KKyurMXYH0UU1oTMFIPC0f9s4lJa3AyJtggUELwg/Ox/Tliz1 NhJ00+hGA8Wb9u5fufbPppLKUWb3FdFyub3HDrKV6ZG5BT36g1DUDY6L7FHc8nS0 IZ70aICvOBKDLlLSkQMd4Hvm8M/C1GlhpOouPUlt/HlrsJbJBclLX/HIVeVuFBdF ZxbN/f/RrmZQazsbuw6tz69XWzPsyB8+dSONcGckd9zlzvL5E19ER4ZgMVp9wPFV nK8aGh33R/EMbfYbI9f89Ta2DZk1vh2uYxvk8dn3etDX8spcrKfuqt0e3xey8xmv D2MlhVa3UybT15p5E8O/IDC4LpjOYOuNAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU 3e9RyKD/hVBdng5v+gInbCpVrugwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkZCQjY4L0VFQkQx MURFNzY3MzExRUI5MjU0OEE2REY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZGQkI2OC9FRUJEMTFERTc2NzMxMUVCOTI1NDhBNkRGOEFFQTIy OC8zZTlSeUtEX2hWQmRuZzV2LWdJbmJDcFZydWcubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqe8MMA0GCSqGSIb3DQEBCwUAA4IBAQBAK8KURZebXd2v kPYCc3b9fh+qxUAvRJXbpgFwItLbcSSL3bz2iS+udYzcx50IGkpBxcj83KIBEXr3 uZ/YQ8Ql9doHfuvqcpt4z1qHUZ+lh0m/bMHpYA57qOARWXiGuzixcfa+nmD/hthU 0xrVAxzIBXccsYHVxeEVg0RVxHHXSJ+Y5pHTjwcfjOcEYtXyKiVZl9z9s9mOh0kN NHhxL924ncxmV5MNeAq2W3gnR3loJwQx2VQH7kUDYlm84MJNTzn7ywpY1PDzxsTZ ODc7HbcaZle8LcyoxB3wpdgYQSypv3ZGHX5hjVohyewdSwttVi1ivivKc2Q2CUHq pdX4KG0E -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:08 2026 by rpki-client