This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer
File:                     5PfkpBui3-Gkmtw2NMzweTXpIRg.cer (raw, json)
Hash identifier:          sQeNwhrNX5Jlmw22Ko6u5sv5fBNR/FR2G4k3zJpZqF0=
Subject key identifier:   E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A02
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:52:48 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 45.222.192.0/18
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6658 (0x1a02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:52:48 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F368356FAR, serialNumber=E4F7E4A41BA2DFE1A49ADC3634CCF07935E92118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:20:5a:c3:67:d4:c6:b9:59:ee:7b:02:bc:
                    1d:b4:61:36:63:c9:0c:94:85:1b:fd:a2:fb:0b:5e:
                    8f:74:59:f9:56:77:f4:77:b1:88:5f:c9:d8:b7:ab:
                    ed:34:a2:db:fc:c7:d9:a7:36:69:7b:e4:fe:a3:51:
                    a4:e7:32:14:bc:4d:81:05:6f:5b:b0:9b:7f:74:de:
                    84:61:2e:e7:05:d1:79:84:71:16:96:00:6c:6f:e2:
                    e9:ab:aa:c4:73:8e:bb:7e:84:15:3e:37:56:54:42:
                    87:bd:95:3e:17:8e:ff:7b:e7:0b:ec:6c:c1:88:ed:
                    5d:06:a1:f6:ee:86:cd:59:52:30:66:02:53:ed:37:
                    fa:48:c9:4b:f7:9e:b8:6b:e1:24:a7:4a:6e:66:8d:
                    58:68:c5:01:e0:83:2b:3c:cd:da:5e:39:a0:b7:41:
                    e9:6a:15:85:10:2a:36:12:ca:ff:a5:86:33:c6:77:
                    b1:46:dd:dd:b1:61:54:aa:27:d5:e4:9f:0a:78:5b:
                    1b:5b:38:f2:93:95:2e:72:7b:67:f1:4f:5f:40:34:
                    f3:04:47:af:3f:74:b4:c2:52:8e:6f:8d:54:5d:60:
                    eb:04:6c:f4:d3:f9:d8:74:6b:a6:8f:ac:72:dc:b9:
                    81:f2:27:57:4f:e4:d7:d1:21:16:37:d4:4f:f5:64:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.222.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         04:18:45:b5:71:cf:cf:0b:ba:2d:2b:23:4a:69:c8:8e:45:32:
         17:02:f1:be:c5:bb:bd:b6:61:59:03:d7:6c:f0:7f:4e:ff:9d:
         2a:89:7d:fc:ea:c5:d6:19:01:9a:ab:b9:a1:cb:94:61:bc:81:
         23:96:1d:3b:7b:23:b1:ce:27:c5:67:2c:af:3b:97:10:74:b6:
         f7:05:05:84:1f:cc:28:cb:b4:5f:d0:e9:a1:52:e2:a3:a6:df:
         d0:62:9e:7d:b6:cf:c5:04:c1:7a:aa:18:ea:fb:4a:88:c5:85:
         d6:7e:12:98:a2:27:d8:cc:8b:19:82:83:0c:a2:0b:37:08:b9:
         dd:28:b7:3c:b3:12:fb:a1:02:56:d3:71:36:1f:40:c9:09:a1:
         63:6d:5b:0c:cf:44:72:fc:42:4c:0e:89:04:5b:02:00:d4:68:
         76:cd:82:08:e8:88:c4:84:48:d4:a8:77:1f:b0:b4:b4:1d:64:
         17:9f:11:49:9c:f9:4c:06:19:22:ca:54:a4:8d:b5:40:f6:28:
         cf:0a:7e:ec:47:2d:95:c0:d6:69:55:da:92:0b:7d:99:21:5b:
         02:a7:7e:e8:59:a2:1a:93:8b:ed:e1:a3:f4:e3:92:0d:17:77:
         fd:73:f6:6b:10:bb:b8:2c:5b:ec:b5:17:a5:1a:82:e2:82:bd:
         a7:c3:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:33:54 2026 by rpki-client