This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer
File:                     Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer (raw, json)
Hash identifier:          6jSTlNJ/iPw6hJ007FL/md1JQ+liUunL6QNb4HOzyks=
Subject key identifier:   56:EF:77:07:F7:CB:B8:0D:82:AE:AC:60:55:40:FD:6A:3B:31:3D:95
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A87
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:09:40 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 129.205.32.0/19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6791 (0x1a87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:09:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36D5C19AR, serialNumber=56EF7707F7CBB80D82AEAC605540FD6A3B313D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7c:a4:c2:71:c8:b3:7b:3a:47:90:a7:fe:a5:
                    45:49:09:27:1c:45:2b:70:c3:a7:74:bc:30:4a:b1:
                    f3:86:40:b4:11:03:23:55:fe:f7:89:e2:cd:5e:17:
                    40:5c:7f:d7:04:d7:d7:6b:4b:78:43:64:8a:51:29:
                    f3:cb:55:91:81:8c:5c:6e:1b:da:2f:00:4f:5a:47:
                    69:5d:fb:92:9e:87:8f:59:9f:45:3a:5f:2a:b9:97:
                    86:f9:4a:93:69:59:ca:59:46:5a:8f:6a:05:ab:20:
                    99:a2:27:95:65:01:91:83:9b:7a:bd:7e:c1:fd:84:
                    6f:d7:3c:94:3a:49:90:18:d2:40:3d:9f:4d:77:f6:
                    7c:3c:3f:cd:f1:9f:f2:e4:1f:6b:f7:60:42:c9:72:
                    c0:f4:85:63:5c:65:15:3d:6c:b4:f9:3e:1d:83:06:
                    3e:08:12:22:f2:1e:cf:fa:b7:ce:29:0f:be:a9:8d:
                    50:8e:18:ee:6a:1b:5b:ea:e0:47:79:a1:2d:0f:9f:
                    2e:d2:12:b0:34:de:de:85:d3:72:02:34:48:d5:61:
                    f1:c0:b0:6d:92:0b:5e:b6:f6:e9:d2:29:ae:fc:4d:
                    3e:49:ac:35:dc:62:53:90:4c:56:d7:d3:c9:70:6d:
                    89:16:ec:0b:a7:aa:46:50:33:f0:2d:5b:73:59:f9:
                    9d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EF:77:07:F7:CB:B8:0D:82:AE:AC:60:55:40:FD:6A:3B:31:3D:95
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.205.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:0f:a6:3a:6d:09:54:e5:fc:17:cf:93:6d:9f:b8:83:52:
         c5:d6:0f:7f:d5:30:bf:77:53:22:ac:7a:fd:35:be:6f:42:74:
         46:25:58:7c:06:59:82:3d:b6:f6:99:24:de:01:e3:ae:d5:d2:
         87:87:29:92:46:89:e2:e1:01:d1:c5:76:1f:19:00:8e:67:94:
         89:bb:eb:97:54:8e:2b:33:bf:24:50:0c:fb:5c:bb:f1:62:96:
         ae:f4:c2:80:52:82:ba:c6:92:c6:ac:1e:14:01:9c:4d:02:0c:
         ec:62:f7:96:88:75:ec:f1:bd:07:c6:45:76:a9:d0:c9:b2:c6:
         56:f5:c3:53:56:de:be:58:cf:3e:32:65:2b:fc:97:25:b0:e6:
         d6:1d:a7:fe:5e:a7:1a:0b:44:95:0b:af:04:cf:c2:67:c3:af:
         78:89:0e:c1:92:bc:97:78:16:1a:a8:0c:99:ba:3b:77:08:f0:
         e6:31:01:2a:5d:28:26:19:03:5c:1b:26:5f:90:d6:23:6f:eb:
         26:f4:3c:98:69:0f:f5:a6:ba:bd:f1:b9:43:f2:17:dd:ef:3e:
         1a:72:47:20:2d:1c:4b:5a:cb:cd:17:11:3a:95:12:4c:8a:00:
         bc:57:b6:b4:f0:fd:cb:d6:0f:5b:15:00:79:4d:39:ec:45:7e:
         f4:55:c3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:00:53 2026 by rpki-client