This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.cer (raw, json)
Hash identifier:          a0+RlouirWYKAD3s0OVsdgYAHx+6SErkj6kGnCuT1iY=
Subject key identifier:   66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A08
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:54:06 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 168.253.32.0/19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6664 (0x1a08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:54:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:44:32:13:2f:bb:3a:93:c0:ba:66:fe:d2:
                    b7:7e:ec:a1:11:8b:64:98:f1:f9:59:85:04:ac:21:
                    c2:4d:8b:31:b9:67:db:cb:7d:9f:ac:f2:be:77:0f:
                    b4:42:a2:18:13:06:6f:fe:0a:79:ee:27:f1:a4:06:
                    fb:1b:6e:70:db:11:50:ae:4f:73:df:44:55:53:fc:
                    e6:73:55:6c:55:ed:2b:c0:c7:4e:6f:8a:d2:b4:c9:
                    af:a3:28:89:63:97:4d:a9:23:e9:28:2f:05:2c:f9:
                    53:ad:f6:58:cb:4e:ba:53:ec:d2:8d:9b:c2:26:e4:
                    ae:5e:56:a1:23:3b:b9:dc:99:93:7c:c5:c9:90:18:
                    7d:24:cb:0a:c0:34:3d:72:dc:d0:a4:c6:00:43:02:
                    b8:a0:58:d6:8a:e0:43:aa:d9:ab:2c:22:39:2c:37:
                    f1:6b:1a:2c:9a:4a:ea:95:37:89:f8:28:b9:3b:74:
                    7f:17:9d:40:47:d4:78:d8:af:e2:0a:0d:b0:2e:e5:
                    44:ca:8d:fc:f0:4e:8b:63:0f:c5:ca:59:05:dc:7c:
                    a4:0b:6d:5b:38:41:10:c1:ec:13:87:a9:a8:51:c3:
                    2e:1e:67:d5:69:b4:9d:7b:6b:cf:6c:9f:b2:9d:55:
                    2f:c6:4e:02:03:e5:d1:36:8a:ac:11:2d:e5:cc:84:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.253.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:a2:a9:60:5e:f4:62:1f:a1:6c:8f:4e:bd:aa:ce:b9:79:80:
         3a:a1:1d:8f:dc:58:61:ee:09:97:d0:58:ef:63:57:82:2e:6a:
         e9:04:91:0b:b5:73:01:07:ff:25:2a:cf:10:14:e1:55:37:b5:
         b8:f8:96:d1:ff:ea:ef:79:7d:bd:ce:9b:aa:43:f4:6b:01:6d:
         ff:11:37:9d:ab:dc:9f:a7:ac:5f:71:62:5d:d4:45:f5:e2:23:
         9c:a6:3f:6a:4a:9f:5e:b3:bb:7a:9e:ae:ee:2d:ca:d7:7f:21:
         5e:12:5f:7d:78:bf:d0:96:3a:d7:74:e9:b9:51:df:be:a4:3d:
         76:ff:6c:1f:03:d1:61:fe:d2:a1:30:da:86:50:8e:6e:12:39:
         60:6f:8c:83:05:1c:72:2c:99:94:3e:f3:8c:b9:cd:7e:42:05:
         97:36:3a:97:11:c8:f5:e9:e6:1d:cd:61:1c:ae:fb:14:15:0b:
         1d:3e:08:ad:04:30:16:51:47:0a:e7:30:58:fd:4c:e9:6e:fe:
         d2:cd:36:84:09:b2:f9:1c:b2:2d:5d:04:8e:e9:b8:85:72:66:
         77:f7:e6:0d:22:97:9e:50:fc:c2:49:0d:bc:ec:d7:9c:0d:58:
         9b:84:95:29:2c:ca:05:46:68:73:86:22:99:24:bb:89:a9:e7:
         7d:33:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:57:40 2026 by rpki-client