This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
File:                     Go8PdPo6YC9H_Ow2uLP3niHzABg.cer (raw, json)
Hash identifier:          3mxv5VUvI6PHgN9E9UwCjrcRubJlzDBVPAggxgyRGQw=
Subject key identifier:   1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       199E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:38:16 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.20.24.0/21
                          IP: 164.160.44.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6558 (0x199e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:38:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3656177AR, serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:af:07:13:cf:10:9d:1e:79:cb:3e:fd:dd:54:
                    20:c9:c8:3b:cc:a1:c9:3e:e0:96:e6:90:95:3e:6b:
                    a5:95:f5:96:56:94:78:72:b2:c8:69:62:12:fb:11:
                    1c:10:ca:7c:39:e9:9c:5e:80:e3:e9:28:d9:b0:09:
                    28:28:f6:d6:f7:4e:51:b9:cc:36:f9:1b:48:ed:e6:
                    d7:de:ea:89:7e:52:df:de:8d:1b:19:65:b4:c4:f5:
                    59:21:6f:36:94:5f:2b:28:f3:ca:65:e0:f4:8b:27:
                    9f:1e:a4:b1:a8:69:c9:ec:04:29:e7:97:a8:df:82:
                    36:70:0a:f3:17:d1:0a:8c:68:27:5a:ac:96:47:5e:
                    6c:6d:5b:fc:e1:90:d1:59:e1:c1:fd:ce:fd:ba:5b:
                    54:dc:97:69:fc:8b:fe:77:fb:05:4f:48:5d:71:81:
                    c5:a4:41:de:25:a1:d9:33:af:16:e4:ce:e1:ae:44:
                    76:1e:62:cb:78:cc:d9:cf:0e:5e:9a:5d:b9:de:d2:
                    9a:82:39:56:b6:da:35:8c:bf:48:8b:d4:ed:4b:8f:
                    5b:75:da:c2:71:36:ce:13:0a:e2:26:f3:42:ae:fe:
                    39:4d:28:78:12:62:71:f1:ac:de:5c:33:1d:d4:bf:
                    9a:e1:93:7e:9a:5d:da:f8:02:20:a8:e7:f6:a3:ce:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.24.0/21
                  164.160.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:ff:a0:d3:c2:fa:f4:3b:c0:63:90:56:15:20:66:d3:d0:23:
         4b:27:53:e0:d5:41:4f:7d:d4:fa:b2:31:f8:46:9a:c3:b4:b6:
         ee:a3:b2:54:b6:5b:2b:4b:de:40:ea:94:55:a0:2d:38:9c:1c:
         9b:d8:9c:46:a7:84:ee:03:d1:ff:6d:1e:64:92:9a:eb:de:11:
         47:f1:2b:61:85:4f:13:f6:00:0f:f8:91:7f:6c:6a:b6:88:77:
         02:0d:7f:d6:9f:68:e8:d1:3d:67:bd:48:4b:52:09:9f:8e:49:
         35:74:b5:5a:f4:d0:0c:4a:b9:94:9d:6b:b9:7e:89:cd:31:f7:
         8f:72:fc:51:b3:f6:50:3e:f3:53:b1:e5:c5:41:0a:60:5b:59:
         a1:f9:2b:cf:13:ab:5e:52:96:87:dc:4b:70:dd:6c:d4:6b:cb:
         54:2a:0c:e9:b5:d0:00:40:cc:90:36:44:bf:a3:67:ed:99:d5:
         7c:58:06:9f:c7:5d:cd:6f:6d:86:7c:38:50:6c:1c:31:16:79:
         3a:e4:01:e3:e0:a7:d6:84:8d:73:77:53:9a:5b:e5:18:5a:f4:
         43:26:68:85:49:85:08:76:26:59:36:3d:c9:46:0f:63:72:ae:
         bc:c8:a5:1f:8f:e7:a2:10:bd:70:85:23:4e:4a:eb:53:5d:9a:
         e8:a9:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:46:13 2026 by rpki-client