This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer File: TFQzRWcaPQxAiChKkfx3-2zGsGg.cer (raw, json) Hash identifier: tw57f9aWU2h/sVxwS1n4JsMYe3lOV7NuHD9QYTCPds8= Subject key identifier: 4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 19C2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:42:45 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 156.38.64.0/19 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6594 (0x19c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:42:45 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3668231AR, serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:1c:7c:ef:3c:1f:5d:2a:6b:14:af:4a:1b: 0f:41:b3:e9:e5:0e:5b:30:97:0d:6c:38:e2:f8:04: 87:f1:b5:e4:9d:9c:44:bb:4b:4d:6e:13:52:49:57: ab:bf:06:5a:6a:d4:e5:22:ee:2e:50:17:64:4c:68: 32:45:0d:03:2e:fd:7a:1e:36:a1:11:3c:bd:7b:4e: 8e:26:0d:86:bb:28:ce:41:52:3e:54:13:91:fa:e1: 5d:42:7b:f9:28:74:16:8a:89:7c:0b:ef:25:27:62: cd:be:af:10:b6:aa:1b:e5:dd:4a:46:2b:35:ed:c6: 79:4f:ee:c4:f5:2e:3c:b2:da:2e:fe:80:22:f3:80: 46:3c:a7:fc:d8:9e:2d:51:d9:77:02:fc:1d:ce:a1: 44:3d:fc:96:07:c5:3b:5f:1f:01:8f:5c:75:f1:71: c4:ca:0c:c9:d2:dc:9b:71:9c:d8:62:ea:d4:f4:a6: 44:0b:12:5c:c1:f8:2c:d7:55:b7:e2:af:79:cd:c0: e8:22:8f:53:ec:98:bd:86:3a:7d:9f:09:28:9a:c8: dd:f9:cd:1d:c0:10:cd:d2:5a:31:ec:02:b8:50:02: 71:14:9d:59:23:ef:f5:df:54:7c:f9:12:6b:e2:27: 20:9a:76:96:8a:34:c2:7a:6e:99:9c:d3:9f:63:da: 8f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft sbgp-ipAddrBlock: critical IPv4: 156.38.64.0/19 Signature Algorithm: sha256WithRSAEncryption 45:a1:78:45:3b:ba:1b:b5:7a:e3:c0:ee:13:85:28:f3:b0:a8: f8:e0:28:a6:12:c9:34:cc:0d:7e:6b:53:12:2b:d8:2f:5c:1d: f8:28:72:93:60:14:6c:f3:c6:5a:e9:c7:e8:12:c2:39:3d:40: ba:39:04:ac:a9:f2:5f:2f:8a:73:d8:1b:f3:9b:6c:fe:85:b0: 4e:ca:20:de:c9:90:b3:f3:93:20:6e:1c:2c:3e:27:50:d8:08: cf:ea:53:f7:f0:4a:d1:51:54:ca:99:54:20:74:c8:f7:56:bc: 5c:40:c1:0d:24:e9:8d:8d:4c:54:26:1f:fc:3e:0c:10:11:bb: fe:18:df:fd:91:18:d4:a6:c0:09:57:8b:b2:bb:ee:ff:a0:b7: 4b:e6:dd:27:d4:eb:90:c9:fb:e4:3f:68:5d:cf:6f:fe:7e:84: 50:6b:03:93:47:68:4f:76:d2:b8:3d:5c:bb:98:ea:f5:4f:3a: 7d:2d:b9:61:3d:7e:c5:50:1a:00:07:10:4a:07:d7:8c:a1:6c: 81:51:f7:97:09:94:8e:f6:76:51:55:e8:39:c9:dd:b4:b4:c1: f3:b8:b5:19:88:d9:de:42:46:ec:22:79:42:a8:da:06:03:4e: 45:d3:54:cb:3f:4a:31:06:8a:e5:b3:11:b0:ac:8e:7f:7b:d4: ba:89:99:86 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGcIwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDQyNDVaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjY4MjMxQVIxMTAvBgNVBAUTKDRDNTQzMzQ1NjcxQTNEMEM0 MDg4Mjg0QTkxRkM3N0ZCNkNDNkIwNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC7wRx87zwfXSprFK9KGw9Bs+nlDlswlw1sOOL4BIfxteSdnES7S01u E1JJV6u/Blpq1OUi7i5QF2RMaDJFDQMu/XoeNqERPL17To4mDYa7KM5BUj5UE5H6 4V1Ce/kodBaKiXwL7yUnYs2+rxC2qhvl3UpGKzXtxnlP7sT1Ljyy2i7+gCLzgEY8 p/zYni1R2XcC/B3OoUQ9/JYHxTtfHwGPXHXxccTKDMnS3JtxnNhi6tT0pkQLElzB +CzXVbfir3nNwOgij1PsmL2GOn2fCSiayN35zR3AEM3SWjHsArhQAnEUnVkj7/Xf VHz5EmviJyCadpaKNMJ6bpmc059j2o89AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU TFQzRWcaPQxAiChKkfx3+2zGsGgwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjY4MjMxLzcwMDJB M0FDNkI4RTExRTc5QzIwRUM2NUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY2ODIzMS83MDAyQTNBQzZCOEUxMUU3OUMyMEVDNjVGOEFFQTIy OC9URlF6UldjYVBReEFpQ2hLa2Z4My0yekdzR2cubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQFnCZAMA0GCSqGSIb3DQEBCwUAA4IBAQBFoXhFO7obtXrj wO4ThSjzsKj44CimEsk0zA1+a1MSK9gvXB34KHKTYBRs88Za6cfoEsI5PUC6OQSs qfJfL4pz2Bvzm2z+hbBOyiDeyZCz85MgbhwsPidQ2AjP6lP38ErRUVTKmVQgdMj3 VrxcQMENJOmNjUxUJh/8PgwQEbv+GN/9kRjUpsAJV4uyu+7/oLdL5t0n1OuQyfvk P2hdz2/+foRQawOTR2hPdtK4PVy7mOr1Tzp9LblhPX7FUBoABxBKB9eMoWyBUfeX CZSO9nZRVeg5yd20tMHzuLUZiNneQkbsInlCqNoGA05F01TLP0oxBorlsxGwrI5/ e9S6iZmG -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:58 2026 by rpki-client