This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.cer (raw, json)
Hash identifier:          EygHqNfAow1puyKMGU6cwLzf/S9tMBsM7JzyIJmZwpg=
Subject key identifier:   33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       19B6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:41:17 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 169.239.92.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6582 (0x19b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:41:17 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:a3:9d:e6:7e:4f:14:98:52:78:73:45:5b:
                    29:46:02:33:fe:33:87:74:14:0e:08:68:0c:d1:fd:
                    bf:50:82:2b:ee:c1:a3:a9:67:d5:31:7c:dc:8e:e3:
                    bf:9b:04:0a:f2:5d:d0:db:ef:05:81:90:19:c7:08:
                    75:1c:39:af:d1:dd:e3:52:93:1e:ef:12:d2:38:93:
                    ad:62:d7:45:a0:4d:d9:f6:27:f7:c7:99:9f:43:e1:
                    38:82:34:f8:8d:35:38:13:6a:d7:23:fb:4f:a4:4a:
                    98:26:c5:ef:f5:fb:a2:c3:52:1b:90:2d:9f:39:e2:
                    33:8c:dd:7b:ab:21:14:ba:eb:85:47:ad:fc:73:3b:
                    a6:14:e1:81:d8:c9:91:cc:49:b0:6b:66:2d:ca:3e:
                    d6:c1:7d:ff:a5:df:c5:ff:75:89:81:dd:4d:83:97:
                    af:b8:32:08:c1:34:d1:eb:e5:63:6c:26:73:88:cc:
                    52:f7:20:f4:f1:9f:bb:32:87:cf:7e:e3:9f:d9:99:
                    9e:13:55:f8:66:74:b2:38:0f:57:31:e4:4a:b9:43:
                    6e:f4:3d:99:39:b0:ab:12:6e:0b:af:6e:28:18:d1:
                    07:8d:23:13:65:a3:f8:75:01:a8:8e:e1:79:dd:0b:
                    8a:4b:92:ac:a3:ae:43:52:b9:e4:47:94:79:14:db:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:81:48:b9:40:1b:d4:a8:74:8b:15:2a:82:19:34:fb:f7:7e:
         c1:10:40:03:20:cc:e5:69:36:61:90:38:c1:b1:1e:d3:f8:cb:
         ad:03:9d:bb:d7:1e:b2:14:d4:2a:79:6f:ce:01:ea:79:74:d1:
         87:ef:dd:20:1f:7d:fd:4e:7c:80:ee:34:cf:a5:3e:23:04:d9:
         1c:52:40:d0:37:40:75:22:4e:d7:9b:59:f6:34:2d:1b:7f:93:
         74:03:b3:a1:1d:01:5a:b7:99:92:22:6d:9a:6c:ff:c7:46:97:
         46:82:70:82:25:78:07:27:71:fe:b8:2b:e0:57:c4:2f:ef:0e:
         c3:6b:74:dd:02:2c:71:36:e8:f9:1b:71:04:80:72:c4:c2:f9:
         43:1f:e2:ff:a7:54:99:ed:45:66:af:c3:23:6f:e3:b6:21:c4:
         f2:ff:c9:7e:c5:99:4f:3b:a9:5f:70:7f:41:6f:8c:2f:36:2a:
         a2:a8:47:5a:9d:76:b1:04:2b:da:4a:be:d9:a5:c6:ec:d2:c0:
         bf:48:f2:be:b3:b1:fe:72:99:f3:c8:86:41:be:d1:d0:51:98:
         c4:22:bf:6c:0e:49:84:83:6a:66:0a:ac:7e:b8:e9:34:8e:63:
         e3:90:67:b2:66:93:93:97:99:1c:2e:79:6e:14:88:25:33:2b:
         a1:da:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:23:39 2026 by rpki-client