This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer File: KVkcZVM-_QiXL0qXW-xBxltEXuA.cer (raw, json) Hash identifier: qD1GxWBwgX5cj7uHRXTq+oB0Mm9KUlOlofBmXD9Mxew= Subject key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 19D6 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:46:05 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 156.155.0.0/16 IP: 192.143.0.0/16 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6614 (0x19d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:46:05 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:54:3c:9a:0c:b6:9b:33:31:25:37:51:21: a3:19:fd:f9:5a:59:68:63:e6:24:bf:58:70:58:30: c5:bd:ba:0a:80:c6:df:99:ac:b2:84:c4:c3:55:5c: 8d:3d:34:4e:a2:23:dd:48:a7:b7:52:51:dd:f6:fc: 66:ce:3c:60:f3:ab:a4:cb:99:81:4d:a8:48:d0:75: f3:58:66:8b:9e:d2:46:af:0f:c4:c3:92:42:c2:3b: 8f:83:01:32:4f:54:ef:13:d9:a7:2e:9d:0b:25:fe: d8:47:6d:d3:33:83:67:81:90:71:1f:e5:4c:bd:8d: f4:8b:bb:0b:e9:5b:b1:d1:07:c4:c4:a2:32:cd:a5: 9a:d6:42:42:d3:67:93:56:68:b0:16:19:34:bd:39: eb:ad:91:f3:22:8b:ef:d3:c6:ff:d5:a7:f0:f1:cb: ce:81:0d:09:2f:07:54:28:be:4d:03:4a:0d:a0:67: f6:0f:08:12:72:68:b7:6e:7f:08:a4:4e:4b:43:f6: 8f:6a:3d:72:70:ac:87:f5:80:47:2c:b8:6a:23:cc: a8:36:3f:42:9c:9d:b4:2b:da:80:e8:bc:c2:78:16: f5:12:5d:cd:53:79:fc:d6:ab:10:33:d3:f5:80:7b: 4b:8a:e6:00:55:e7:62:38:db:ea:ec:ab:11:0a:ec: f4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft sbgp-ipAddrBlock: critical IPv4: 156.155.0.0/16 192.143.0.0/16 Signature Algorithm: sha256WithRSAEncryption 44:57:b1:71:0b:93:c7:c1:68:c2:2f:8d:ae:be:d0:c2:4e:65: fb:13:96:5c:15:a0:c8:8c:b8:dd:a9:1c:a3:fb:e8:9e:c6:b0: b5:95:b0:4b:29:cb:45:4c:5a:4b:d8:32:e0:18:87:83:22:01: ea:6c:f9:53:f6:68:e4:e2:ba:b0:27:83:06:c3:a8:d4:5d:33: 8c:3f:13:1c:5c:49:96:e6:63:0c:e1:03:e4:ef:30:bc:a3:d6: a5:78:ac:7d:f8:db:23:f4:ae:4c:ed:62:8a:94:33:f3:3f:09: 71:a1:34:17:47:71:ae:9a:2c:6c:be:e8:90:23:94:11:ae:b5: 98:ee:e3:78:9e:7e:da:72:49:e5:e7:31:26:02:f9:c3:4e:98: 4b:40:f0:31:a2:0e:c2:1c:5b:f1:8e:aa:ea:6a:6e:b5:ab:61: 63:93:b2:b6:ce:ff:d6:b5:32:62:cc:4b:68:22:17:bb:de:6b: e0:1a:ba:2f:31:ed:ee:b1:e9:24:5f:da:bd:60:ed:2f:4a:d5: de:83:2d:7e:54:69:80:98:f6:33:3a:b1:c0:45:57:fa:f7:f5: 04:fa:d7:57:3e:58:f2:a1:77:b8:19:77:15:56:77:be:d6:fb: 72:cd:40:b1:7a:f6:32:c9:20:76:f0:e5:0f:2d:8b:d9:f4:5f: 59:d9:bb:7e -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgICGdYwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDQ2MDVaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjcwMzY5QVIxMTAvBgNVBAUTKDI5NTkxQzY1NTMzRUZEMDg5 NzJGNEE5NzVCRUM0MUM2NUI0NDVFRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC+l1Q8mgy2mzMxJTdRIaMZ/flaWWhj5iS/WHBYMMW9ugqAxt+ZrLKE xMNVXI09NE6iI91Ip7dSUd32/GbOPGDzq6TLmYFNqEjQdfNYZoue0kavD8TDkkLC O4+DATJPVO8T2acunQsl/thHbdMzg2eBkHEf5Uy9jfSLuwvpW7HRB8TEojLNpZrW QkLTZ5NWaLAWGTS9OeutkfMii+/Txv/Vp/Dxy86BDQkvB1Qovk0DSg2gZ/YPCBJy aLdufwikTktD9o9qPXJwrIf1gEcsuGojzKg2P0KcnbQr2oDovMJ4FvUSXc1TefzW qxAz0/WAe0uK5gBV52I42+rsqxEK7PRxAgMBAAGjggL1MIIC8TAdBgNVHQ4EFgQU KVkcZVM+/QiXL0qXW+xBxltEXuAwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjcwMzY5LzU2NTA1 MjkwN0U3ODExRUM5RkFEMTRDQjVBNDBENTc3LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY3MDM2OS81NjUwNTI5MDdFNzgxMUVDOUZBRDE0Q0I1QTQwRDU3 Ny9LVmtjWlZNLV9RaVhMMHFYVy14QnhsdEVYdUEubWZ0MCMGCCsGAQUFBwEHAQH/ BBQwEjAQBAIAATAKAwMAnJsDAwDAjzANBgkqhkiG9w0BAQsFAAOCAQEARFexcQuT x8Fowi+Nrr7Qwk5l+xOWXBWgyIy43akco/vonsawtZWwSynLRUxaS9gy4BiHgyIB 6mz5U/Zo5OK6sCeDBsOo1F0zjD8THFxJluZjDOED5O8wvKPWpXisffjbI/SuTO1i ipQz8z8JcaE0F0dxrposbL7okCOUEa61mO7jeJ5+2nJJ5ecxJgL5w06YS0DwMaIO whxb8Y6q6mputathY5Oyts7/1rUyYsxLaCIXu95r4Bq6LzHt7rHpJF/avWDtL0rV 3oMtflRpgJj2MzqxwEVX+vf1BPrXVz5Y8qF3uBl3FVZ3vtb7cs1AsXr2MskgdvDl Dy2L2fRfWdm7fg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:32 2026 by rpki-client