This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
File:                     HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer (raw, json)
Hash identifier:          6PktOBMDEt4TpglKpNcOdyatrNneQSi7j+HK0fGmkPQ=
Subject key identifier:   1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       195C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:30:03 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 165.90.240.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6492 (0x195c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:30:03 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F362D462AR, serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:aa:04:ef:44:7e:14:d8:99:71:70:0c:6d:
                    2a:eb:66:a3:4a:60:8e:6e:29:6e:0c:79:9b:76:cd:
                    b2:d4:8f:3d:06:4d:f7:08:66:a2:a5:81:02:d9:65:
                    86:a3:ea:10:66:76:40:74:0e:74:86:39:83:66:3f:
                    c8:37:ab:72:91:31:3b:f4:56:8d:46:58:ea:c1:e0:
                    ba:2d:31:cc:9c:fd:af:98:f6:9a:a4:d4:14:fd:de:
                    e7:bd:18:4b:9a:57:8c:52:ed:ba:da:2c:de:ba:48:
                    3a:59:5d:e7:a1:11:64:98:97:81:56:d5:6b:48:6f:
                    fb:b7:b2:44:19:ab:57:0c:2e:f7:3b:25:0e:66:a7:
                    0d:55:52:af:b7:f8:59:bb:c7:86:16:49:22:54:d2:
                    d9:b2:93:fd:cd:d7:9e:a9:c9:04:96:34:69:57:5c:
                    59:df:4a:7e:66:c0:1a:ee:b5:9f:cb:61:4b:6a:04:
                    f3:08:36:55:d7:a5:e1:51:81:c0:9c:91:d4:43:7d:
                    d1:8d:28:53:ff:ec:dd:a9:3a:90:3e:17:5e:e4:04:
                    a5:5d:c3:bb:e3:6e:21:c4:60:ee:90:6c:cc:d2:9f:
                    ec:0a:64:47:17:74:77:e0:6c:12:30:c7:80:ba:84:
                    00:14:42:be:80:e4:d4:72:1b:10:81:41:e2:98:36:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.90.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:13:6a:be:a8:7b:66:58:ca:dd:d0:38:0a:dd:c4:a7:31:09:
         bf:94:19:68:cc:2b:27:80:20:bd:85:bc:c5:a9:d0:1c:71:be:
         0a:16:af:09:b4:ca:db:31:ae:9f:2f:b0:36:5c:61:cf:ff:95:
         f8:49:96:7e:fb:3d:68:03:8b:43:b5:b8:ff:97:77:c1:15:3f:
         74:46:64:38:ac:d3:ec:cc:4c:29:b6:c8:25:3c:49:b0:fc:f2:
         cf:19:37:7c:79:73:85:27:30:e5:71:d5:18:45:4b:52:0f:c7:
         ef:c4:86:ac:5b:6e:53:48:6b:d8:d2:e1:16:93:9e:b3:5c:f5:
         a7:bc:51:51:91:52:c2:25:23:72:d7:d6:a0:68:16:78:97:db:
         0c:a0:9d:a2:7b:49:5d:6e:0c:93:18:4a:61:52:09:73:a0:56:
         db:96:8d:33:ad:fa:3a:71:cc:d8:3a:98:fa:8b:2e:bd:0c:d5:
         8e:39:c1:b3:c2:14:3d:ff:9f:cf:b1:22:1a:35:37:79:96:07:
         d1:45:5e:78:aa:5b:f7:ed:47:81:9f:cb:99:95:ac:29:47:76:
         c3:2e:02:4c:0e:f5:cf:70:2e:ac:70:6d:05:a9:d4:91:56:ec:
         41:71:e2:75:d1:ba:61:ad:da:74:f3:c1:33:6a:2a:c3:57:24:
         bf:4f:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:24:08 2026 by rpki-client