This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
File:                     IG86iVTAbX-P1ttnm4NmlsxnQX8.cer (raw, json)
Hash identifier:          cWl59FAaL796nfFNezi3JqIAscEtZ7E3ncmqr+wMbGo=
Subject key identifier:   20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A9D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:12:06 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 165.73.136.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6813 (0x1a9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:12:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36EADB7AR, serialNumber=206F3A8954C06D7F8FD6DB679B836696CC67417F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:41:f5:7c:fc:ec:26:81:c8:d2:90:a9:a2:
                    a9:cb:fa:ff:1e:c1:f2:d7:48:5e:3f:a2:f0:4a:f1:
                    ba:8d:cb:20:14:f3:84:19:70:7b:22:33:de:9a:16:
                    fd:f3:d1:12:3e:a3:6d:82:a9:1e:e9:f7:6d:66:e6:
                    a3:45:b8:7a:07:cb:39:86:30:9f:21:fa:c3:b6:1a:
                    90:d2:e7:56:e2:05:61:0a:1a:f0:3d:d7:0f:cc:9c:
                    66:17:3c:7a:c7:e5:b1:3d:66:0e:27:c3:2c:66:ce:
                    0f:b3:3e:e7:5f:d1:e3:29:9a:13:a7:19:f8:f9:ac:
                    c1:a8:c6:35:15:08:d7:90:12:0b:e7:ed:39:f1:34:
                    3c:ab:e7:d3:89:c1:94:09:f0:37:6c:cc:de:ef:e5:
                    83:58:86:2f:13:17:58:d6:c3:af:a9:04:70:68:c6:
                    70:40:2d:cb:35:ce:ce:1b:82:79:a1:e6:85:29:ed:
                    01:90:b1:ff:24:ef:a7:62:9d:74:f2:ea:03:7c:68:
                    b9:ae:dd:92:73:56:b2:f4:e9:6f:fa:1d:dd:c5:af:
                    18:a8:a1:8d:70:42:4c:b2:2c:16:8f:08:b9:99:92:
                    33:41:c5:9d:fb:dc:76:b9:37:bc:75:94:ad:71:ff:
                    81:74:9c:e5:54:af:90:c1:f0:35:86:71:da:c1:4a:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.73.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:45:1d:bf:10:de:3a:5f:3a:47:a6:70:21:40:17:23:95:80:
         a0:9d:a5:9c:a1:25:95:3b:7e:67:09:a9:dd:55:5b:cf:fc:63:
         48:8d:b1:d1:58:a6:58:36:fd:ed:ff:d3:71:c4:38:2c:66:ac:
         0a:29:b1:c8:34:89:37:28:cc:c6:4d:6a:f4:ef:ed:b0:64:9c:
         e9:ba:d7:a0:a5:36:68:2a:0a:c8:b8:49:d4:60:9a:3f:d2:fc:
         ae:ac:6f:d5:5d:75:d5:50:5b:92:48:d5:f1:5a:3a:69:ec:56:
         b4:b4:6c:da:67:92:aa:d3:76:9b:53:fa:f8:47:0e:b0:d7:6a:
         a4:62:e8:31:d0:0f:83:0a:fd:59:e2:a9:bf:01:32:fd:ba:c5:
         3a:37:d2:25:7f:b4:cf:63:7b:4b:e8:86:5e:90:87:09:48:dd:
         4c:f5:47:ac:5f:d9:c6:99:12:3c:04:da:9c:ea:60:f9:5d:bf:
         4b:4c:f6:45:0b:9f:d1:3c:fd:a3:32:4c:3f:00:a5:db:28:f5:
         6b:cc:bd:0b:8e:d5:5d:7a:64:96:e4:9f:ff:90:6f:e8:54:78:
         3f:2e:cd:42:ee:35:be:d4:86:d1:a4:2e:cf:3c:7e:ac:af:47:
         6e:dc:f6:a7:dc:ab:de:b2:96:c6:46:23:6d:c3:d3:35:30:41:
         81:eb:9c:38
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICGp0wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTEyMDZaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkVBREI3QVIxMTAvBgNVBAUTKDIwNkYzQTg5NTRDMDZEN0Y4
RkQ2REI2NzlCODM2Njk2Q0M2NzQxN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCzq0H1fPzsJoHI0pCpoqnL+v8ewfLXSF4/ovBK8bqNyyAU84QZcHsi
M96aFv3z0RI+o22CqR7p921m5qNFuHoHyzmGMJ8h+sO2GpDS51biBWEKGvA91w/M
nGYXPHrH5bE9Zg4nwyxmzg+zPudf0eMpmhOnGfj5rMGoxjUVCNeQEgvn7TnxNDyr
59OJwZQJ8DdszN7v5YNYhi8TF1jWw6+pBHBoxnBALcs1zs4bgnmh5oUp7QGQsf8k
76dinXTy6gN8aLmu3ZJzVrL06W/6Hd3FrxiooY1wQkyyLBaPCLmZkjNBxZ373Ha5
N7x1lK1x/4F0nOVUr5DB8DWGcdrBSl7XAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
IG86iVTAbX+P1ttnm4NmlsxnQX8wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkVBREI3LzI3MENF
RkM0MTMyMDExRUQ4MTBCRjBFREYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZFQURCNy8yNzBDRUZDNDEzMjAxMUVEODEwQkYwRURGMTIyMjQ2
OC9JRzg2aVZUQWJYLVAxdHRubTRObWxzeG5RWDgubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCpUmIMA0GCSqGSIb3DQEBCwUAA4IBAQAFRR2/EN46XzpH
pnAhQBcjlYCgnaWcoSWVO35nCandVVvP/GNIjbHRWKZYNv3t/9NxxDgsZqwKKbHI
NIk3KMzGTWr07+2wZJzputegpTZoKgrIuEnUYJo/0vyurG/VXXXVUFuSSNXxWjpp
7Fa0tGzaZ5Kq03abU/r4Rw6w12qkYugx0A+DCv1Z4qm/ATL9usU6N9Ilf7TPY3tL
6IZekIcJSN1M9UesX9nGmRI8BNqc6mD5Xb9LTPZFC5/RPP2jMkw/AKXbKPVrzL0L
jtVdemSW5J//kG/oVHg/Ls1C7jW+1IbRpC7PPH6sr0du3Pan3KvespbGRiNtw9M1
MEGB65w4
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:42:31 2026 by rpki-client