This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer File: At3Avw90-WSo2yJsvjP3007bAFM.cer (raw, json) Hash identifier: icVgPuhz0YtFVDhLRwD7nYamaUvZvebAgiKXDxNTYaA= Subject key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1AAB Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:13:43 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 164.160.16.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6827 (0x1aab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:13:43 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F51F8AR, serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:59:7b:ad:25:08:c6:1e:9e:a4:f4:77:96:cc: b1:60:f7:d0:13:fc:25:d0:9b:35:ce:b2:ca:84:19: 89:9d:31:31:72:c3:59:26:68:f1:71:0d:93:59:d1: cd:0a:26:3a:09:99:13:fd:bd:e9:c0:0d:ec:e3:50: 07:45:3c:cb:85:96:62:e4:4a:a5:71:d3:c8:bd:eb: 86:5f:d1:01:0b:d7:25:fd:0f:57:d1:eb:23:05:7c: 5b:a2:2b:69:21:8e:f2:01:52:85:c1:43:a3:4d:dd: e7:a5:6b:34:44:9c:67:71:55:9d:ad:fd:b8:1d:15: 51:75:db:a9:52:bc:ea:1c:1e:5b:44:0a:38:8c:54: d2:04:38:be:42:88:e6:56:75:19:99:ec:9e:b2:19: 62:18:b2:95:fa:dc:93:57:7c:10:e1:94:6e:5f:4e: 6f:62:28:ae:10:29:a3:91:65:7c:68:96:58:3a:fa: 90:a1:d2:65:f5:07:62:d4:f3:61:a3:8e:ae:4d:80: e8:83:f4:6a:98:9b:ec:91:d8:b9:35:18:05:74:e7: 31:c8:62:9c:09:b5:2e:ab:e8:04:76:41:fb:5b:16: f4:d7:d1:1e:87:91:9c:23:f2:8a:9f:b5:2e:67:52: 6e:50:d0:19:0e:04:99:98:dc:de:b1:df:89:ca:59: de:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft sbgp-ipAddrBlock: critical IPv4: 164.160.16.0/22 Signature Algorithm: sha256WithRSAEncryption 91:3b:7e:8a:52:1c:8f:9c:3c:79:2e:4f:01:ed:9a:b0:fd:92: d6:ee:29:2e:e6:bb:86:b9:72:d7:dd:09:be:8c:f2:57:61:34: 47:77:d3:15:ea:c7:35:3b:6c:da:ca:35:e8:15:b6:97:00:b7: 3d:6c:d5:ff:32:3e:51:5e:e1:56:ad:1a:c9:ed:ed:30:c4:bf: 7d:dd:e9:91:5e:a2:ff:b2:fe:75:04:37:07:42:e1:85:c3:32: 09:a8:84:f3:de:fb:dc:3a:14:71:b1:cd:95:eb:ea:0a:dc:95: d3:3d:6c:a7:3d:03:b8:5a:15:bc:af:82:39:a7:8c:e6:f6:0e: a3:cd:ee:07:2d:52:4c:0a:1c:65:53:6f:d9:b7:d3:fe:cb:79: cc:b1:88:f2:36:59:32:87:ae:55:ea:09:06:dd:75:e2:6b:49: b8:95:af:d1:ff:e6:d9:83:49:b9:12:df:0d:1c:04:c6:f8:e9: c5:e2:88:46:93:f6:e7:47:23:57:7d:9a:0b:f3:66:2a:5f:f1: 79:e0:a8:9d:53:66:58:86:89:83:ad:7e:21:26:b1:bb:65:d2: 5d:f7:fb:ea:76:47:87:ed:03:e3:21:30:13:04:09:be:86:4d: 54:71:0d:34:83:bc:ba:e3:f0:99:9d:95:11:88:8c:d4:7c:1f: b8:89:6e:71 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGqswDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTEzNDNaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkY1MUY4QVIxMTAvBgNVBAUTKDAyRERDMEJGMEY3NEY5NjRB OERCMjI2Q0JFMzNGN0QzNEVEQjAwNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDsWXutJQjGHp6k9HeWzLFg99AT/CXQmzXOssqEGYmdMTFyw1kmaPFx DZNZ0c0KJjoJmRP9venADezjUAdFPMuFlmLkSqVx08i964Zf0QEL1yX9D1fR6yMF fFuiK2khjvIBUoXBQ6NN3eelazREnGdxVZ2t/bgdFVF126lSvOocHltECjiMVNIE OL5CiOZWdRmZ7J6yGWIYspX63JNXfBDhlG5fTm9iKK4QKaORZXxollg6+pCh0mX1 B2LU82Gjjq5NgOiD9GqYm+yR2Lk1GAV05zHIYpwJtS6r6AR2QftbFvTX0R6HkZwj 8oqftS5nUm5Q0BkOBJmY3N6x34nKWd5PAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU At3Avw90+WSo2yJsvjP3007bAFMwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkY1MUY4L0Q0QjA4 NUNBQ0EzMzExRTk5NDVGOUI2QkY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZGNTFGOC9ENEIwODVDQUNBMzMxMUU5OTQ1RjlCNkJGOEFFQTIy OC9BdDNBdnc5MC1XU28yeUpzdmpQMzAwN2JBRk0ubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCpKAQMA0GCSqGSIb3DQEBCwUAA4IBAQCRO36KUhyPnDx5 Lk8B7Zqw/ZLW7iku5ruGuXLX3Qm+jPJXYTRHd9MV6sc1O2zayjXoFbaXALc9bNX/ Mj5RXuFWrRrJ7e0wxL993emRXqL/sv51BDcHQuGFwzIJqITz3vvcOhRxsc2V6+oK 3JXTPWynPQO4WhW8r4I5p4zm9g6jze4HLVJMChxlU2/Zt9P+y3nMsYjyNlkyh65V 6gkG3XXia0m4la/R/+bZg0m5Et8NHATG+OnF4ohGk/bnRyNXfZoL82YqX/F54Kid U2ZYhomDrX4hJrG7ZdJd9/vqdkeH7QPjITATBAm+hk1UcQ00g7y64/CZnZURiIzU fB+4iW5x -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:56 2026 by rpki-client