This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
File:                     ByjJuEVcZZd_owmH3klB3wGMZRw.cer (raw, json)
Hash identifier:          EYTxd7RbFIiOlSraBfuuW3wTeCfQhLib/CdxEhvlzo4=
Subject key identifier:   07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A20
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:57:05 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 165.210.0.0/15
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6688 (0x1a20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:57:05 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:93:52:0f:ba:d5:d1:67:9e:70:ab:6c:eb:
                    aa:38:3c:7b:fb:98:e0:8b:4c:73:4b:15:6e:d2:d5:
                    f1:f0:3e:bb:92:be:3b:2f:a3:0b:07:f9:46:88:83:
                    6e:32:f9:94:bc:c8:2d:72:17:08:53:68:24:2c:43:
                    18:66:73:6a:7c:c0:11:e7:25:82:af:f4:fe:a3:36:
                    7d:e6:35:52:32:fe:f9:4b:65:b6:a2:a2:a6:d4:5f:
                    57:2f:4c:59:fe:1e:a1:ea:bb:e8:77:49:8f:66:56:
                    1b:16:7d:21:2d:55:1f:5c:3b:98:40:43:18:e5:16:
                    ab:46:fb:76:3d:07:0c:fe:b3:27:ba:68:46:e6:b4:
                    ac:71:ff:41:de:cf:bc:c2:35:53:77:b9:95:83:0c:
                    73:83:aa:da:90:e4:50:78:06:9b:9d:28:c2:66:f9:
                    d7:d5:70:9d:74:7d:d1:00:69:ed:6d:0e:09:b8:66:
                    35:1b:7e:a7:74:1c:86:99:c7:57:60:c5:1f:3f:04:
                    3e:eb:b5:ee:64:8b:00:ef:0a:f3:cd:e6:1a:af:48:
                    55:41:25:0b:10:15:df:d0:82:01:00:2d:e9:db:3c:
                    3e:2d:39:4a:e3:60:55:54:5d:f8:1d:a3:da:b1:14:
                    04:62:28:1d:f2:4c:11:a0:6c:fc:ab:a8:c0:a4:d9:
                    63:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.210.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         74:8c:e7:08:f4:00:e1:cd:81:3f:07:e9:88:b7:2e:59:39:c7:
         72:17:1c:e7:6e:15:2a:f6:81:d7:7b:bd:f5:0f:30:52:ec:44:
         75:15:1d:40:79:6f:87:42:c2:78:8d:cc:af:da:47:0f:b4:7b:
         af:e2:f1:0b:0b:06:15:b6:74:79:ba:4e:41:14:95:7c:11:d4:
         23:b0:95:82:75:de:77:ce:b3:20:85:9d:f3:36:2c:26:8a:6b:
         76:6d:9e:a4:c5:3b:c2:ec:47:21:3c:49:8d:f6:6c:0d:37:10:
         26:68:1a:5c:51:bf:94:be:f5:a0:25:41:6f:b0:0b:6e:d7:15:
         87:26:91:ed:a1:8d:77:f5:6c:b7:0b:7e:00:aa:ef:e9:35:5d:
         05:6f:3f:56:e3:41:11:4a:22:20:99:ae:ba:bf:91:b5:bd:22:
         f1:b2:a3:16:00:b8:ae:96:68:1c:6e:a3:8a:e8:8d:17:22:ef:
         63:03:0c:5f:44:01:8f:89:c9:00:27:75:df:2b:be:5e:6d:dd:
         da:13:6e:8b:84:c2:59:6b:3a:6e:2e:6c:7e:7d:f8:7c:d6:e9:
         f7:8a:fe:02:af:af:aa:48:e7:a3:c8:fd:79:84:d3:53:57:c2:
         0f:fd:cf:4d:84:99:67:94:b5:70:45:76:ca:c7:5a:c9:84:63:
         8d:dc:0d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:34:06 2026 by rpki-client