This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer File: PuGjQpUbwSAiYnHzC4UKh356oZs.cer (raw, json) Hash identifier: zdKgt8/ffs7Tc+pUVusBart23t5V5v4i9majZqJS0KE= Subject key identifier: 3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A61 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:05:23 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 45.222.0.0/19 IP: 169.255.0.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6753 (0x1a61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:05:23 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B95DEAR, serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:27:74:41:fd:c6:f8:bf:c1:90:a5:44:d8: b8:26:3b:5f:4a:16:2f:9e:62:dc:d9:80:a6:ae:08: 1f:f4:a4:5d:ca:d2:26:57:33:e4:c8:2e:ca:f1:93: 4b:37:46:08:a2:d4:6d:ba:83:a0:a8:88:60:d7:61: f1:7b:5d:1f:74:54:26:05:d6:98:13:32:98:56:dc: 32:30:38:d7:3f:da:a3:ad:bc:e8:5f:78:dd:53:0b: e9:5f:e3:73:82:64:35:cd:8a:a7:50:b1:5a:dc:5a: 88:1f:a5:37:58:e4:56:5d:91:bf:81:2b:a2:79:eb: 44:07:0b:a7:bf:6a:66:68:0f:c9:3d:c1:5c:91:fe: d9:a6:c9:8f:d5:fd:34:04:53:f9:a9:d5:e4:63:d8: 7e:9f:95:d3:34:41:e0:13:18:92:9d:79:36:40:7b: 33:ee:a8:e0:c8:55:c6:24:50:2d:e5:d9:17:bf:74: 52:ca:f1:fe:8f:58:29:37:0b:e8:d0:c7:0e:87:3c: 4c:d4:75:ce:e0:df:0c:9f:f0:4a:cb:28:8f:ac:2d: 2f:46:d5:65:9a:3a:a7:3b:6f:84:9e:bd:f0:f0:82: 91:8c:84:12:df:e1:b9:7b:bc:a0:e4:1c:88:d0:8c: 57:d2:f9:55:0c:a7:5b:74:b8:cd:a9:f9:49:07:c5: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft sbgp-ipAddrBlock: critical IPv4: 45.222.0.0/19 169.255.0.0/22 Signature Algorithm: sha256WithRSAEncryption 45:b6:a3:4c:7a:28:c3:58:f0:a4:bf:be:25:2b:d1:ae:40:b6: 2b:d6:c7:86:03:3b:48:70:b7:c3:eb:d2:f5:67:34:9f:b7:56: 61:75:a4:9d:5d:db:2e:52:cc:e6:60:b4:60:b7:82:54:bb:6b: 73:54:c8:cf:23:ba:c6:d6:b3:16:2f:30:68:d5:5d:f6:c8:90: 62:03:62:ea:95:11:b2:2e:c6:42:20:9a:6f:d5:2c:e9:21:a8: 6d:38:c9:24:f3:1d:f9:2a:9a:06:77:00:79:94:55:49:a2:f9: c5:14:91:52:4d:5b:9d:7a:3d:28:f6:7c:6e:c2:e2:e6:78:b5: 04:29:87:71:75:c7:e3:b2:7e:a4:58:51:6b:2e:3c:bc:9e:82: 3d:1a:cb:b2:5e:79:c2:ad:bb:3a:42:58:00:4b:35:48:91:df: e3:c8:74:9f:61:72:88:c6:98:19:4b:71:f6:a6:0d:f5:8c:2f: 63:31:eb:50:54:70:6f:2d:c3:60:d4:77:58:60:35:52:00:a7: 8d:2a:13:3b:66:61:e0:32:16:34:f3:17:69:e8:5c:5c:6e:c0: a3:4e:2f:35:4d:33:76:90:35:4c:d6:4a:1f:a3:d2:60:29:14: e8:92:f6:03:2b:30:96:b1:4d:68:a3:11:0f:fe:be:f0:2a:33: a9:3d:e6:9a -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgICGmEwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTA1MjNaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkI5NURFQVIxMTAvBgNVBAUTKDNFRTFBMzQyOTUxQkMxMjAy MjYyNzFGMzBCODUwQTg3N0U3QUExOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDSnyd0Qf3G+L/BkKVE2LgmO19KFi+eYtzZgKauCB/0pF3K0iZXM+TI Lsrxk0s3Rgii1G26g6CoiGDXYfF7XR90VCYF1pgTMphW3DIwONc/2qOtvOhfeN1T C+lf43OCZDXNiqdQsVrcWogfpTdY5FZdkb+BK6J560QHC6e/amZoD8k9wVyR/tmm yY/V/TQEU/mp1eRj2H6fldM0QeATGJKdeTZAezPuqODIVcYkUC3l2Re/dFLK8f6P WCk3C+jQxw6HPEzUdc7g3wyf8ErLKI+sLS9G1WWaOqc7b4SevfDwgpGMhBLf4bl7 vKDkHIjQjFfS+VUMp1t0uM2p+UkHxVCpAgMBAAGjggL3MIIC8zAdBgNVHQ4EFgQU PuGjQpUbwSAiYnHzC4UKh356oZswHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkI5NURFLzExMzhG OEIyQ0E1RTExRUE5M0ZBRjg4NEY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZCOTVERS8xMTM4RjhCMkNBNUUxMUVBOTNGQUY4ODRGOEFFQTIy OC9QdUdqUXBVYndTQWlZbkh6QzRVS2gzNTZvWnMubWZ0MCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQFLd4AAwQCqf8AMA0GCSqGSIb3DQEBCwUAA4IBAQBFtqNM eijDWPCkv74lK9GuQLYr1seGAztIcLfD69L1ZzSft1ZhdaSdXdsuUszmYLRgt4JU u2tzVMjPI7rG1rMWLzBo1V32yJBiA2LqlRGyLsZCIJpv1SzpIahtOMkk8x35KpoG dwB5lFVJovnFFJFSTVudej0o9nxuwuLmeLUEKYdxdcfjsn6kWFFrLjy8noI9Gsuy XnnCrbs6QlgASzVIkd/jyHSfYXKIxpgZS3H2pg31jC9jMetQVHBvLcNg1HdYYDVS AKeNKhM7ZmHgMhY08xdp6FxcbsCjTi81TTN2kDVM1kofo9JgKRTokvYDKzCWsU1o oxEP/r7wKjOpPeaa -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:50 2026 by rpki-client