This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer File: Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer (raw, json) Hash identifier: NjbfTzNJZamrJ2OO1r+/mPOuGj/JSiBHjboP+qG9y20= Subject key identifier: 67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A5F Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:05:09 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 45.221.80.0/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6751 (0x1a5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:05:09 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36B5EE7AR, serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:9b:34:cd:fb:6d:15:97:c8:da:4a:9c:21: 07:13:aa:29:0f:9e:03:39:73:74:60:1f:34:a2:38: 16:88:fc:88:be:9e:b6:97:ce:f3:56:3a:e4:e5:c1: a8:27:91:d2:cd:f6:78:d3:99:68:90:f9:d4:a6:45: d7:5b:68:16:f4:34:9e:f7:f8:ba:ab:dc:24:b0:45: 80:fe:03:8e:fd:14:f1:a5:ed:60:ca:c6:db:5c:4f: 07:9f:9a:11:1b:a2:71:3d:5d:ea:b1:84:13:9b:fc: 16:7d:85:5a:3c:be:64:5f:7d:29:e4:8b:0f:00:3d: 56:3a:b7:dc:b9:b8:29:b7:dc:e3:df:28:a2:07:9f: e3:47:72:97:f6:33:a3:23:44:db:e5:1c:ce:ed:a3: b0:df:e5:55:64:38:f5:0f:29:df:46:c9:56:ba:61: 8d:0d:47:68:3e:4a:30:a9:e7:ca:f7:35:26:fc:60: 41:c4:72:fe:7e:77:44:6a:46:2b:0a:be:19:64:c8: 9e:31:15:37:20:81:7d:a7:c2:3e:cd:4d:d0:34:ff: 38:f1:54:e2:e4:e1:51:44:8e:e5:98:89:74:40:cf: ba:2d:f6:01:01:33:da:8c:32:4b:6b:33:34:30:c1: bf:64:55:04:e8:c3:dc:85:84:ed:58:35:24:24:51: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft sbgp-ipAddrBlock: critical IPv4: 45.221.80.0/20 Signature Algorithm: sha256WithRSAEncryption 38:50:b7:0c:27:0b:c5:6a:79:2d:b1:ae:f8:a5:b4:a7:f5:4c: 88:08:ea:de:d8:a9:83:2d:ec:53:f2:b8:b4:ee:c1:96:79:d1: bd:05:98:75:c0:79:a5:25:22:69:26:f6:59:aa:ab:04:ac:de: 53:ba:f4:16:53:5f:73:ea:12:35:2e:bb:86:41:ed:f3:48:e9: 46:5e:5b:13:62:c6:29:12:d2:fd:17:70:5e:cf:fb:86:f8:c7: c4:2a:78:83:f2:f0:c8:91:7d:91:c0:2c:c3:4b:ab:f9:6b:00: a1:bc:60:cd:2c:13:69:25:7a:02:6f:1d:8d:c5:02:82:d5:d8: 31:86:8a:24:08:4a:cd:e0:30:ff:93:e5:d7:0b:8f:7b:8a:62: b4:80:66:d0:37:23:f8:25:24:13:48:82:b4:8b:e4:94:f7:74: b7:b2:79:54:64:5b:60:68:65:8b:c3:15:dc:02:73:15:bc:32: 7d:65:b7:cd:c6:0d:2e:31:0a:67:82:42:45:5a:c5:4e:c7:97: 9a:1e:62:ad:c3:25:b3:db:14:19:74:e4:bd:11:40:09:8f:bf: 59:33:99:66:d0:b7:9e:8d:32:67:f9:91:98:f0:5b:58:bc:31: c3:75:33:1f:df:c9:4d:87:24:d3:df:1e:23:40:91:e5:d8:cc: 99:28:c0:be -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGl8wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTA1MDlaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkI1RUU3QVIxMTAvBgNVBAUTKDY3NUNCQTRCNTBCRDVDRTg5 ODQ3MkQ1NTRGMTcwNDlDQkRFQzA0MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDPnJs0zfttFZfI2kqcIQcTqikPngM5c3RgHzSiOBaI/Ii+nraXzvNW OuTlwagnkdLN9njTmWiQ+dSmRddbaBb0NJ73+Lqr3CSwRYD+A479FPGl7WDKxttc TwefmhEbonE9XeqxhBOb/BZ9hVo8vmRffSnkiw8APVY6t9y5uCm33OPfKKIHn+NH cpf2M6MjRNvlHM7to7Df5VVkOPUPKd9GyVa6YY0NR2g+SjCp58r3NSb8YEHEcv5+ d0RqRisKvhlkyJ4xFTcggX2nwj7NTdA0/zjxVOLk4VFEjuWYiXRAz7ot9gEBM9qM MktrMzQwwb9kVQTow9yFhO1YNSQkUeDTAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU Z1y6S1C9XOiYRy1VTxcEnL3sBDkwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkI1RUU3LzAxNTEw QTAwNkI5MTExRjBBRjU1RjY4MURBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZCNUVFNy8wMTUxMEEwMDZCOTExMUYwQUY1NUY2ODFEQUU0RUM5 Qy9aMXk2UzFDOVhPaVlSeTFWVHhjRW5MM3NCRGsubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQELd1QMA0GCSqGSIb3DQEBCwUAA4IBAQA4ULcMJwvFankt sa74pbSn9UyICOre2KmDLexT8ri07sGWedG9BZh1wHmlJSJpJvZZqqsErN5TuvQW U19z6hI1LruGQe3zSOlGXlsTYsYpEtL9F3Bez/uG+MfEKniD8vDIkX2RwCzDS6v5 awChvGDNLBNpJXoCbx2NxQKC1dgxhookCErN4DD/k+XXC497imK0gGbQNyP4JSQT SIK0i+SU93S3snlUZFtgaGWLwxXcAnMVvDJ9ZbfNxg0uMQpngkJFWsVOx5eaHmKt wyWz2xQZdOS9EUAJj79ZM5lm0LeejTJn+ZGY8FtYvDHDdTMf38lNhyTT3x4jQJHl 2MyZKMC+ -----END CERTIFICATE-----Generated at Sun Jan 25 18:11:43 2026 by rpki-client