This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer File: YC-YbZ2-MiFBdFXVTvIzYfVHb-I.cer (raw, json) Hash identifier: 8TzgzTJfnjOPSYqmkeFadgtH3R9oJv1m+h4y3Yg0UHA= Subject key identifier: 60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 19E0 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:47:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 165.73.0.0/17 IP: 165.255.0.0/16 IP: 169.0.0.0/15 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6624 (0x19e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:47:20 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3674908AR, serialNumber=602F986D9DBE3221417455D54EF23361F5476FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:42:26:9e:cb:7b:16:b1:ef:d3:b4:99:55: 60:18:40:ce:bb:b1:c7:71:07:d8:85:6a:af:8b:80: 40:91:04:ce:b1:e9:7d:40:78:46:20:d3:f9:53:ab: ae:f7:4f:54:cf:bc:a6:f6:96:1e:0d:c8:45:21:3c: 7b:fb:3a:e7:16:6a:68:c0:dc:46:ff:86:c2:05:93: 06:92:04:9f:5c:1b:89:6d:07:61:02:e1:29:68:4c: 49:b8:36:9e:96:52:5e:8d:48:dc:24:f0:c2:34:f2: fa:8b:3c:42:b7:1e:39:a9:5b:9e:21:a8:42:e4:7b: 9e:05:4b:05:a2:98:44:23:38:fa:ca:41:a2:fa:02: 40:40:8f:53:9b:64:17:ee:78:a2:9a:4b:5a:6d:bc: 74:93:81:45:32:18:ec:c7:71:b1:0b:74:90:48:b4: 83:2b:05:54:30:12:3d:8b:40:11:ed:3f:f1:be:0f: e7:53:26:b0:48:63:56:66:40:bc:28:f4:4e:5c:4f: 56:87:4d:ce:a3:7b:66:ec:f5:c8:51:ab:ed:34:b3: 88:49:69:1e:d6:93:74:9f:52:df:58:45:0e:71:0f: 52:21:64:30:42:e8:a3:80:bb:de:60:c4:bb:c7:d3: 0e:30:e3:83:4f:90:37:f5:20:f3:f9:3d:3f:dd:ca: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2F:98:6D:9D:BE:32:21:41:74:55:D5:4E:F2:33:61:F5:47:6F:E2 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/7EB812DE564411F0BCB4D5EDDAE4EC9C/YC-YbZ2-MiFBdFXVTvIzYfVHb-I.mft sbgp-ipAddrBlock: critical IPv4: 165.73.0.0/17 165.255.0.0/16 169.0.0.0/15 Signature Algorithm: sha256WithRSAEncryption 43:38:2b:5d:3a:95:7b:d7:ff:fd:65:95:56:e9:03:0a:37:79: 8c:fc:05:30:ae:f7:fd:c3:81:0b:93:da:d5:1e:2b:f2:09:34: 4b:e4:10:84:52:7e:a3:cc:4b:30:5e:0b:38:49:e8:0e:70:cc: 3f:cc:52:d3:3a:21:06:5a:29:1e:f4:e9:4d:8f:c8:47:ea:56: 6b:f2:b5:52:e7:7d:e9:89:88:35:76:44:8c:26:b9:9a:73:e3: d3:04:84:01:48:01:92:34:95:48:ed:de:cb:c6:1b:4a:43:9d: 62:aa:48:d9:ec:70:ca:ec:72:ac:63:a6:90:21:51:de:fa:0c: d9:66:d5:52:dd:35:51:1a:bd:25:31:18:57:5b:fb:20:90:dc: 8f:57:53:94:7e:b6:69:fb:10:98:b0:99:f2:c7:e2:d6:eb:9e: 77:36:15:07:9f:7d:30:49:7d:73:b7:79:1a:a4:ed:5c:a0:98: d2:d7:cc:35:0a:98:35:ed:c6:7e:37:3d:49:e2:53:15:2f:64: a1:a4:bc:b6:1b:1a:29:60:bd:2f:c1:54:76:ba:db:6e:50:b0: fb:1c:55:e0:27:7e:53:13:4b:cf:16:56:14:f3:d0:79:b4:0a: 19:d1:56:a7:68:a9:f0:16:f3:d7:5c:ab:8c:b5:f1:bf:af:e1: be:b7:cb:85 -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgICGeAwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDQ3MjBaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjc0OTA4QVIxMTAvBgNVBAUTKDYwMkY5ODZEOURCRTMyMjE0 MTc0NTVENTRFRjIzMzYxRjU0NzZGRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC51EImnst7FrHv07SZVWAYQM67scdxB9iFaq+LgECRBM6x6X1AeEYg 0/lTq673T1TPvKb2lh4NyEUhPHv7OucWamjA3Eb/hsIFkwaSBJ9cG4ltB2EC4Slo TEm4Np6WUl6NSNwk8MI08vqLPEK3HjmpW54hqELke54FSwWimEQjOPrKQaL6AkBA j1ObZBfueKKaS1ptvHSTgUUyGOzHcbELdJBItIMrBVQwEj2LQBHtP/G+D+dTJrBI Y1ZmQLwo9E5cT1aHTc6je2bs9chRq+00s4hJaR7Wk3SfUt9YRQ5xD1IhZDBC6KOA u95gxLvH0w4w44NPkDf1IPP5PT/dyv3fAgMBAAGjggL7MIIC9zAdBgNVHQ4EFgQU YC+YbZ2+MiFBdFXVTvIzYfVHb+IwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjc0OTA4LzdFQjgx MkRFNTY0NDExRjBCQ0I0RDVFRERBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY3NDkwOC83RUI4MTJERTU2NDQxMUYwQkNCNEQ1RUREQUU0RUM5 Qy9ZQy1ZYloyLU1pRkJkRlhWVHZJellmVkhiLUkubWZ0MCkGCCsGAQUFBwEHAQH/ BBowGDAWBAIAATAQAwQHpUkAAwMApf8DAwGpADANBgkqhkiG9w0BAQsFAAOCAQEA QzgrXTqVe9f//WWVVukDCjd5jPwFMK73/cOBC5Pa1R4r8gk0S+QQhFJ+o8xLMF4L OEnoDnDMP8xS0zohBlopHvTpTY/IR+pWa/K1Uud96YmINXZEjCa5mnPj0wSEAUgB kjSVSO3ey8YbSkOdYqpI2exwyuxyrGOmkCFR3voM2WbVUt01URq9JTEYV1v7IJDc j1dTlH62afsQmLCZ8sfi1uuedzYVB599MEl9c7d5GqTtXKCY0tfMNQqYNe3Gfjc9 SeJTFS9koaS8thsaKWC9L8FUdrrbblCw+xxV4Cd+UxNLzxZWFPPQebQKGdFWp2ip 8Bbz11yrjLXxv6/hvrfLhQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:31 2026 by rpki-client