This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
File:                     J9ZRBLhSABrB1WULLAw3SPxdaVA.cer (raw, json)
Hash identifier:          GcxzLI3wNLQ9zlEqrll0cdF/qFrI4qNrhH6xsnLIJY4=
Subject key identifier:   27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A42
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:01:41 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 169.239.20.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6722 (0x1a42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:01:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36A413FAR, serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:3b:a7:cc:b1:42:7e:30:5b:55:87:0e:f8:
                    f0:70:e6:51:ad:80:4e:a5:1c:76:b6:63:a6:93:4c:
                    c4:1e:49:b9:15:b1:73:a7:d3:82:27:a6:5c:a4:15:
                    54:bd:49:20:cc:7b:b9:67:d8:09:f8:96:78:d3:d8:
                    e6:1f:bc:df:35:b6:93:22:85:89:0a:34:ff:61:de:
                    fa:75:8e:ec:72:dd:2b:86:37:86:5d:fc:85:3a:15:
                    60:88:b6:b2:cd:c0:cc:9c:46:89:10:99:94:75:a4:
                    94:45:6c:58:f7:e8:c0:63:b8:00:7b:0e:fd:f7:46:
                    25:f4:c5:27:7a:6c:d0:6a:de:cf:1b:8e:30:24:bd:
                    be:64:5a:93:07:91:2a:fc:de:87:cb:5f:9f:ab:f3:
                    36:d4:14:0c:57:e4:f0:7f:8d:5d:07:ee:d5:78:34:
                    24:db:99:94:81:55:69:c8:d1:6e:cb:80:80:7e:78:
                    ba:13:b3:f8:48:9f:ce:19:65:63:1d:09:39:4e:aa:
                    f4:63:b3:a1:c4:96:69:25:2e:08:79:0e:d8:fd:c5:
                    35:9e:45:e0:d8:d9:a8:5d:a7:ca:c7:16:09:cc:5d:
                    82:a9:7c:d0:1e:d5:10:a5:81:8f:de:9c:39:71:83:
                    96:98:c0:93:94:3a:4e:62:13:da:3e:f1:8e:4a:60:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:8f:2b:d7:32:eb:b8:c2:87:7d:53:0a:ee:6b:15:cd:2f:
         79:3f:36:a9:b3:33:03:e0:53:60:70:5b:18:6f:54:11:65:e8:
         b6:e8:83:41:d8:a6:49:6e:5d:8b:54:55:57:55:d4:8a:b5:dd:
         36:4d:f2:c9:9c:99:87:07:03:93:04:97:ce:22:27:00:ef:c4:
         c5:36:a7:bf:2a:55:00:de:41:c9:9b:e6:15:48:6b:44:40:34:
         f9:dc:9a:bc:4c:78:1e:ae:e4:37:17:6c:ff:96:d8:0f:b2:21:
         f0:6b:3f:6a:26:f8:79:f3:54:cd:81:52:74:c0:12:04:88:d2:
         25:46:ff:95:d8:ff:0a:a7:86:1a:45:b9:2a:be:47:14:dc:e3:
         c8:81:e4:56:3f:2e:4d:ac:9a:66:e7:34:10:a7:9c:25:bc:8a:
         1f:33:b0:9f:a3:33:ec:a0:44:c8:ec:f2:29:e3:0b:c6:82:ca:
         d8:08:ff:b3:78:5f:49:36:b5:5b:3d:52:be:d2:3b:0f:73:7b:
         e5:17:fa:2a:dd:1d:01:c3:a7:43:4d:4f:ad:59:0f:8c:4e:46:
         a7:62:b9:9a:97:08:a0:f3:76:d5:13:54:9e:df:f2:44:a6:4a:
         2f:89:08:ad:76:50:55:bf:d1:8d:56:4a:51:a9:61:0b:1f:65:
         91:e9:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:22:24 2026 by rpki-client