This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer
File: XVF78Pc5Gfdta8kSUmnO62DdUyw.cer (raw, json)
Hash identifier: +XkrPKeJkzpXSa29QBUq2TnefOQvUz7DUN8RoO/jyrc=
Subject key identifier: 5D:51:7B:F0:F7:39:19:F7:6D:6B:C9:12:52:69:CE:EB:60:DD:53:2C
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1A55
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:03:56 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 192.96.146.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6741 (0x1a55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Validity
Not Before: Jan 1 01:03:56 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36AC63AAR, serialNumber=5D517BF0F73919F76D6BC9125269CEEB60DD532C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:e6:ef:35:17:ac:ee:66:a7:dd:f8:4d:8d:
85:64:7a:53:91:4a:64:40:42:34:e4:0e:74:6a:23:
c1:fe:72:2d:fd:6b:a0:a2:be:b6:9d:b4:93:d4:67:
21:f1:91:f4:8f:a4:c7:c9:bc:48:c5:e8:17:85:df:
70:00:ea:38:95:c3:a6:c8:ea:8c:33:f4:eb:d3:f0:
ad:83:88:82:b7:0c:ce:89:9c:c4:8b:cb:13:69:dc:
84:9e:f9:62:53:79:9b:79:2a:5b:dc:54:e9:01:82:
8c:10:a4:ff:6b:fa:08:30:85:95:8e:93:67:42:1b:
1c:70:19:f6:45:e6:7c:45:1b:66:fc:1f:a8:e7:68:
0e:00:66:e3:7c:e8:a2:cc:51:7f:b2:08:90:46:40:
ec:cf:d8:21:de:f5:80:26:37:d6:7a:50:92:68:35:
68:0d:cd:fd:2a:e1:f2:a2:ff:a1:53:cf:4c:51:5e:
28:f5:86:40:b0:08:bb:e8:2f:ba:a8:7c:b7:55:b2:
21:42:02:e1:51:63:45:92:0e:e3:e3:16:f9:76:f1:
6c:3b:bc:3d:91:e1:05:30:f7:44:a9:48:00:8f:63:
50:22:7f:68:b4:19:09:8e:83:c3:99:ad:04:4a:23:
e8:6f:73:3d:69:b8:c8:eb:62:55:11:70:44:b5:5d:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:51:7B:F0:F7:39:19:F7:6D:6B:C9:12:52:69:CE:EB:60:DD:53:2C
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
sbgp-ipAddrBlock: critical
IPv4:
192.96.146.0/24
Signature Algorithm: sha256WithRSAEncryption
23:22:11:47:a5:7f:a1:94:3a:84:d7:e3:77:11:c1:45:12:22:
a6:18:a1:a0:6d:c0:8a:5e:f4:ce:f4:39:9a:73:0b:64:f8:42:
10:c7:bb:41:38:c3:e9:34:1f:fa:14:ae:1d:17:56:56:6f:79:
16:58:82:0f:7f:11:b7:d4:bb:52:fc:44:6e:43:ad:41:8c:d0:
08:e6:a4:32:c1:a4:39:1b:55:da:8d:ac:bf:0d:94:fa:00:1a:
7d:a9:74:54:ef:c5:4e:fd:2d:f0:4f:20:85:25:6f:c4:e0:b3:
ce:ae:50:f6:21:08:8c:78:5c:6c:78:28:85:7c:52:2d:ff:2a:
c6:d4:03:57:b8:f0:6a:58:b4:8c:1b:0b:ab:e3:2f:e8:0a:8a:
b5:83:bc:51:31:5e:64:46:7d:00:e9:c4:3b:ba:31:84:39:d0:
44:c9:5b:81:f3:9e:94:7f:d7:fc:4d:96:98:41:ac:ad:da:11:
f2:31:d8:b1:12:1c:8d:93:ec:d8:91:1a:92:e3:8d:0f:4a:ab:
fa:90:8c:3f:22:01:50:8c:17:79:72:f9:4e:46:6f:a3:6b:c3:
0c:53:78:fb:ab:64:ff:51:d3:fd:6d:db:fc:31:ad:bf:15:d9:
3f:15:b5:a4:69:fb:d9:1f:f3:9c:58:b1:bc:5f:48:79:81:ad:
e1:e1:d3:cd
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICGlUwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTAzNTZaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkFDNjNBQVIxMTAvBgNVBAUTKDVENTE3QkYwRjczOTE5Rjc2
RDZCQzkxMjUyNjlDRUVCNjBERDUzMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCjlObvNRes7man3fhNjYVkelORSmRAQjTkDnRqI8H+ci39a6Civrad
tJPUZyHxkfSPpMfJvEjF6BeF33AA6jiVw6bI6owz9OvT8K2DiIK3DM6JnMSLyxNp
3ISe+WJTeZt5KlvcVOkBgowQpP9r+ggwhZWOk2dCGxxwGfZF5nxFG2b8H6jnaA4A
ZuN86KLMUX+yCJBGQOzP2CHe9YAmN9Z6UJJoNWgNzf0q4fKi/6FTz0xRXij1hkCw
CLvoL7qofLdVsiFCAuFRY0WSDuPjFvl28Ww7vD2R4QUw90SpSACPY1Aif2i0GQmO
g8OZrQRKI+hvcz1puMjrYlURcES1XSR5AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
XVF78Pc5Gfdta8kSUmnO62DdUywwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkFDNjNBLzBBNDhD
M0QyNDBDMzExRUVCRjBFNDc0MzRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZBQzYzQS8wQTQ4QzNEMjQwQzMxMUVFQkYwRTQ3NDM0QUQ5RTZG
Qy9YVkY3OFBjNUdmZHRhOGtTVW1uTzYyRGRVeXcubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAwGCSMA0GCSqGSIb3DQEBCwUAA4IBAQAjIhFHpX+hlDqE
1+N3EcFFEiKmGKGgbcCKXvTO9Dmacwtk+EIQx7tBOMPpNB/6FK4dF1ZWb3kWWIIP
fxG31LtS/ERuQ61BjNAI5qQywaQ5G1Xajay/DZT6ABp9qXRU78VO/S3wTyCFJW/E
4LPOrlD2IQiMeFxseCiFfFIt/yrG1ANXuPBqWLSMGwur4y/oCoq1g7xRMV5kRn0A
6cQ7ujGEOdBEyVuB856Uf9f8TZaYQayt2hHyMdixEhyNk+zYkRqS440PSqv6kIw/
IgFQjBd5cvlORm+ja8MMU3j7q2T/UdP9bdv8Ma2/Fdk/FbWkafvZH/OcWLG8X0h5
ga3h4dPN
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:36:08 2026 by rpki-client