This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
File:                     cb_ADVIeYMkKACaINGjJwbU4AYE.cer (raw, json)
Hash identifier:          UIYoDLH0TTOyvnRwzFrI2WErIoq8OUoL3VuwiWDCG+0=
Subject key identifier:   71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1AE1
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 19 Jan 2026 13:37:05 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 165.16.160.0/19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6881 (0x1ae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan 19 13:37:05 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3652210AR, serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:9e:fb:53:e7:a1:ad:f2:00:f3:db:9e:06:
                    cc:df:ff:29:fc:df:bd:49:c7:b7:d0:94:23:a6:af:
                    8b:e7:98:3c:15:d3:d6:fc:e6:3f:75:f1:46:8b:f7:
                    dc:a3:20:67:69:1a:62:78:f0:c8:47:00:e4:d6:99:
                    d4:c4:bc:63:90:d6:e3:32:d5:6b:df:91:13:9b:75:
                    82:98:2e:08:01:0d:34:a9:9c:21:88:7e:fb:96:40:
                    93:92:48:86:2c:13:01:98:e3:58:1f:10:89:86:b3:
                    83:f2:e6:b7:77:c4:f2:b3:cb:17:4d:0f:6f:94:69:
                    f4:8d:3d:35:f7:9f:24:09:95:ab:34:90:50:44:ae:
                    c5:51:1f:82:e2:18:d3:75:6a:2b:30:7e:6f:31:d2:
                    e2:e4:88:f0:7a:fe:f9:27:22:11:20:7e:53:f4:1b:
                    d5:e8:f0:bc:4c:07:34:99:cb:8e:ee:26:09:d0:77:
                    e2:f1:54:fd:ae:19:72:e9:92:37:21:46:07:66:bc:
                    26:0e:10:a4:d5:e6:d4:64:8e:05:ac:5f:5c:fc:7d:
                    5e:a8:a5:85:1b:fc:ff:7a:24:ec:0d:71:2d:a7:27:
                    c7:87:7a:e0:b5:ce:da:e9:44:d2:4f:1d:c7:1d:09:
                    03:83:f0:c1:10:89:6d:45:73:dc:5e:39:3f:6d:b3:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:df:7e:91:36:1f:7b:15:11:06:76:84:5b:78:72:5e:a7:82:
         bd:1f:3f:85:e0:09:1d:2b:01:df:a8:e6:90:c5:16:0c:e9:bf:
         74:54:03:74:7f:eb:a1:c8:60:f0:f3:f2:f5:a9:36:c8:b1:18:
         1b:5f:1b:0a:a3:25:ed:c3:17:35:a5:4c:27:94:f8:2b:a7:31:
         a3:20:31:8a:b0:48:bd:49:0a:b7:62:57:14:61:a8:0d:b0:4f:
         0e:39:a1:3e:c8:53:fa:c7:3f:ea:bb:fa:cb:e1:d7:b9:8d:90:
         57:2e:38:44:c6:10:1d:00:3a:7c:b7:1d:4f:a7:a5:6b:a3:f2:
         80:75:1d:d9:3a:72:87:c1:76:15:df:c2:db:e9:d9:96:18:3f:
         e6:97:16:f5:df:01:65:d0:a1:1e:32:c8:cd:49:0f:45:6c:c2:
         1a:9d:54:48:ea:92:5d:17:c5:19:41:bc:0e:9f:b3:69:d7:ec:
         d4:0c:24:be:d4:3b:e4:87:18:5b:90:37:94:b6:e6:4c:f3:b8:
         cf:35:b4:a5:f6:0e:74:25:e4:0b:c6:69:b0:e2:31:1b:00:d1:
         dc:da:88:9f:a8:65:b9:3f:fb:9f:84:f4:e9:24:7a:92:87:3f:
         49:a5:24:7b:3b:03:e9:46:06:92:33:35:d4:55:20:cb:a7:42:
         02:a7:c2:bf
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICGuEwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMTkxMzM3MDVaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjUyMjEwQVIxMTAvBgNVBAUTKDcxQkZDMDBENTIxRTYwQzkw
QTAwMjY4ODM0NjhDOUMxQjUzODAxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDBP577U+ehrfIA89ueBszf/yn8371Jx7fQlCOmr4vnmDwV09b85j91
8UaL99yjIGdpGmJ48MhHAOTWmdTEvGOQ1uMy1WvfkRObdYKYLggBDTSpnCGIfvuW
QJOSSIYsEwGY41gfEImGs4Py5rd3xPKzyxdND2+UafSNPTX3nyQJlas0kFBErsVR
H4LiGNN1aiswfm8x0uLkiPB6/vknIhEgflP0G9Xo8LxMBzSZy47uJgnQd+LxVP2u
GXLpkjchRgdmvCYOEKTV5tRkjgWsX1z8fV6opYUb/P96JOwNcS2nJ8eHeuC1ztrp
RNJPHccdCQOD8MEQiW1Fc9xeOT9ts5yZAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
cb/ADVIeYMkKACaINGjJwbU4AYEwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjUyMjEwL0VDREYz
RjA4RjUzQjExRjA4MUY1MDFEQkRBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY1MjIxMC9FQ0RGM0YwOEY1M0IxMUYwODFGNTAxREJEQUU0RUM5
Qy9jYl9BRFZJZVlNa0tBQ2FJTkdqSndiVTRBWUUubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQFpRCgMA0GCSqGSIb3DQEBCwUAA4IBAQAR336RNh97FREG
doRbeHJep4K9Hz+F4AkdKwHfqOaQxRYM6b90VAN0f+uhyGDw8/L1qTbIsRgbXxsK
oyXtwxc1pUwnlPgrpzGjIDGKsEi9SQq3YlcUYagNsE8OOaE+yFP6xz/qu/rL4de5
jZBXLjhExhAdADp8tx1Pp6Vro/KAdR3ZOnKHwXYV38Lb6dmWGD/mlxb13wFl0KEe
MsjNSQ9FbMIanVRI6pJdF8UZQbwOn7Np1+zUDCS+1DvkhxhbkDeUtuZM87jPNbSl
9g50JeQLxmmw4jEbANHc2oifqGW5P/ufhPTpJHqShz9JpSR7OwPpRgaSMzXUVSDL
p0ICp8K/
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:19 2026 by rpki-client