This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer File: QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer (raw, json) Hash identifier: gjJD4UaGmubPH4zKKUsmDsqvEdxa2BJWgzQXzCLBz20= Subject key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A83 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:09:14 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 152.111.0.0/16 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6787 (0x1a83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:09:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a2:67:74:69:0f:75:3e:98:40:46:91:f9:8c: 8f:86:dd:cb:0d:72:43:6b:02:6e:90:a1:b8:c2:dc: 39:4b:d9:ca:bd:4b:6a:5b:41:52:6c:e7:fc:b3:00: 7b:80:42:eb:36:fc:c2:39:8a:c7:01:58:c4:6c:06: 80:af:51:63:08:ed:7d:22:f7:56:35:86:b2:1a:50: 85:4f:6d:d3:89:e0:3b:65:64:12:96:b5:5b:c6:47: fd:d8:5e:51:f0:05:87:28:87:17:42:5c:ba:cb:39: 02:aa:92:cc:7a:e0:2d:1c:d6:41:25:91:be:3d:a8: f1:0f:1a:c3:f7:c0:0e:2b:3d:e7:7c:bb:ad:60:70: 8a:be:03:63:90:e2:44:c2:fd:de:f4:41:dd:8a:31: 19:62:07:34:c5:19:41:f3:cd:be:e0:ff:96:da:21: ca:3f:c7:d2:ae:7f:2a:78:4a:c5:54:1a:6c:58:13: 01:c1:31:d7:72:db:94:cf:75:35:1d:7c:06:f5:21: 43:e3:36:c0:13:c4:72:c2:80:ec:ef:aa:cd:11:1b: 76:67:dd:67:0f:c4:51:1b:a5:7f:bb:15:93:88:14: 17:67:4a:dc:19:ec:e3:a0:6a:e6:81:cc:6f:3d:9c: 58:b5:d1:3c:d8:04:2e:6a:fe:a7:db:b4:c6:07:bc: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft sbgp-ipAddrBlock: critical IPv4: 152.111.0.0/16 Signature Algorithm: sha256WithRSAEncryption 29:f0:4c:81:d5:a0:3c:65:87:1c:30:b7:38:6c:02:0a:b7:74: 93:45:0d:47:8b:72:62:7f:03:53:ff:fd:7d:1d:76:b9:c0:e1: 17:86:95:63:5d:cd:4f:a6:1c:f1:ce:d9:37:55:a9:7e:fe:1f: 64:0f:65:0b:41:52:75:86:89:51:4b:66:6d:fc:0e:9f:71:70: f2:3b:3b:5d:08:b9:30:c8:0b:05:09:d9:f3:ca:c8:06:24:f5: fb:e6:a7:2d:a6:f6:cf:b5:98:e8:1e:d2:8f:fd:b3:9a:2d:d0: bc:1f:48:a1:24:ec:a9:23:11:fc:d4:6a:2d:74:d4:df:ca:1b: 48:93:8e:5a:15:44:9b:0e:70:a3:8f:f4:ed:b4:f2:41:63:0c: 90:a3:cd:2a:9c:f3:bb:7e:a0:c0:c9:d9:ae:e6:36:74:dc:12: 33:66:47:4a:a6:64:49:05:8f:d4:ba:70:df:4e:86:cd:d6:bc: ee:8a:90:5b:f1:a3:93:ce:62:95:b7:fd:52:63:76:f9:24:0a: 50:84:f5:14:99:57:10:68:1e:98:81:3c:4d:84:12:68:00:b5: 72:f4:31:c2:49:5a:dd:0d:dc:a1:ea:a6:5f:9b:db:84:92:5f: 15:39:d5:18:c5:14:cd:25:06:b2:6d:12:21:12:73:22:70:36: 0d:c7:87:11 -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgICGoMwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTA5MTRaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkQyRkE0QVIxMTAvBgNVBAUTKDQxMjFEMjhFMEJCOUVBRkVF MDIwMDNGOTIzQUM3NDBDMjZGNTgzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDoomd0aQ91PphARpH5jI+G3csNckNrAm6QobjC3DlL2cq9S2pbQVJs 5/yzAHuAQus2/MI5iscBWMRsBoCvUWMI7X0i91Y1hrIaUIVPbdOJ4DtlZBKWtVvG R/3YXlHwBYcohxdCXLrLOQKqksx64C0c1kElkb49qPEPGsP3wA4rPed8u61gcIq+ A2OQ4kTC/d70Qd2KMRliBzTFGUHzzb7g/5baIco/x9Kufyp4SsVUGmxYEwHBMddy 25TPdTUdfAb1IUPjNsATxHLCgOzvqs0RG3Zn3WcPxFEbpX+7FZOIFBdnStwZ7OOg auaBzG89nFi10TzYBC5q/qfbtMYHvCQDAgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU QSHSjgu56v7gIAP5I6x0DCb1g2QwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkQyRkE0LzM0MjVG QzgwNENFQTExRjA5NDhFRjc5QkRBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZEMkZBNC8zNDI1RkM4MDRDRUExMUYwOTQ4RUY3OUJEQUU0RUM5 Qy9RU0hTamd1NTZ2N2dJQVA1STZ4MERDYjFnMlEubWZ0MB4GCCsGAQUFBwEHAQH/ BA8wDTALBAIAATAFAwMAmG8wDQYJKoZIhvcNAQELBQADggEBACnwTIHVoDxlhxww tzhsAgq3dJNFDUeLcmJ/A1P//X0ddrnA4ReGlWNdzU+mHPHO2TdVqX7+H2QPZQtB UnWGiVFLZm38Dp9xcPI7O10IuTDICwUJ2fPKyAYk9fvmpy2m9s+1mOge0o/9s5ot 0LwfSKEk7KkjEfzUai101N/KG0iTjloVRJsOcKOP9O208kFjDJCjzSqc87t+oMDJ 2a7mNnTcEjNmR0qmZEkFj9S6cN9Ohs3WvO6KkFvxo5POYpW3/VJjdvkkClCE9RSZ VxBoHpiBPE2EEmgAtXL0McJJWt0N3KHqpl+b24SSXxU51RjFFM0lBrJtEiEScyJw Ng3HhxE= -----END CERTIFICATE-----Generated at Sun Jan 25 21:41:55 2026 by rpki-client