This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer File: dF3XcQDluqV1XTuTwPQnTCebbdc.cer (raw, json) Hash identifier: 5i68CNCAyMIhv2BJJeHw8eRnv8HFJl8iGmewpAtaIBc= Subject key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A40 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:01:26 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.255.24.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6720 (0x1a40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:01:26 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A39CEAR, serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:ab:09:8b:15:a9:4f:66:84:30:d7:e4:a7: 4c:da:48:ae:8b:24:76:2f:43:cd:28:ac:7f:6b:7f: 8f:db:d3:65:4b:dc:e7:4a:e2:0f:5c:80:8e:70:50: 4b:54:b6:7c:0a:5e:72:d1:a3:db:bc:d5:5e:5c:7f: 04:0a:91:a9:16:85:8c:c1:9d:1c:54:0b:29:87:13: 23:b8:3d:a2:c4:ad:d3:e4:a7:62:d7:ad:9c:ac:b0: 35:64:5b:1d:ec:d9:e4:e2:03:5a:25:b2:81:3f:74: fc:b8:38:55:9a:60:61:8a:8a:e8:e9:b0:2e:f0:83: 96:54:b7:5f:1d:33:ca:25:96:7f:13:5d:a3:62:17: 07:2f:13:23:6f:96:de:f8:c8:08:be:38:67:4a:a3: d8:61:a6:b3:01:dc:68:d5:c0:e1:9a:a7:12:e0:fb: c9:98:70:f9:7e:7b:1a:58:a1:be:af:ab:70:62:5e: c5:8c:24:c8:5b:f2:96:b6:c6:88:c5:d3:4c:38:ba: ee:d3:66:4b:48:12:9f:9e:1f:59:d7:50:13:bc:43: 11:ab:7b:ed:d1:3b:9a:61:dc:42:3b:8c:2d:5d:e6: bb:1a:23:b2:12:f4:01:a9:ab:0a:ec:52:9e:7c:3d: 91:f1:bc:0d:de:18:6a:88:86:ce:8b:65:5e:ac:d6: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft sbgp-ipAddrBlock: critical IPv4: 169.255.24.0/22 Signature Algorithm: sha256WithRSAEncryption 17:e6:c4:5f:46:c0:36:32:a6:15:b8:3c:79:70:87:3f:f7:6a: 07:fc:7e:97:e8:2c:34:ef:56:01:68:d6:e6:b5:67:fa:40:f3: 01:60:2f:9a:be:88:5a:2f:ec:95:13:d4:45:c7:49:71:57:7d: 4a:29:59:a1:42:cc:b3:fe:c6:56:ff:7a:10:19:66:b6:db:02: 8b:38:5b:ee:56:1f:3b:1e:8b:9b:88:26:1d:b1:6b:c7:a9:27: be:8c:9e:b7:11:3f:90:5d:f9:62:de:47:41:f1:d9:af:f3:eb: 5c:40:c8:a2:51:17:83:74:81:36:35:2d:91:67:94:13:36:d9: ff:a3:e6:3b:b9:46:ed:23:bc:c6:f6:d6:21:6e:52:4a:59:90: 7c:ee:c5:6e:63:2f:ce:21:81:95:79:e9:54:93:b7:7a:14:96: 49:16:26:fe:30:ee:95:7a:d2:68:51:78:11:b8:67:32:a0:e7: b7:84:5f:be:74:dd:d1:c0:23:21:24:30:84:4b:16:c3:b8:f8: 11:32:89:79:8d:bd:d1:fc:02:3a:22:54:81:e1:fe:1c:77:ac: d5:fc:19:56:cd:a2:27:05:e8:53:8f:78:3b:03:64:90:c0:da: e6:6b:5d:5d:20:12:73:28:ca:e8:02:bb:6d:cd:db:2e:1b:f5: 80:f2:65:5c -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGkAwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTAxMjZaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkEzOUNFQVIxMTAvBgNVBAUTKDc0NURENzcxMDBFNUJBQTU3 NTVEM0I5M0MwRjQyNzRDMjc5QjZERDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDUTKsJixWpT2aEMNfkp0zaSK6LJHYvQ80orH9rf4/b02VL3OdK4g9c gI5wUEtUtnwKXnLRo9u81V5cfwQKkakWhYzBnRxUCymHEyO4PaLErdPkp2LXrZys sDVkWx3s2eTiA1olsoE/dPy4OFWaYGGKiujpsC7wg5ZUt18dM8olln8TXaNiFwcv EyNvlt74yAi+OGdKo9hhprMB3GjVwOGapxLg+8mYcPl+expYob6vq3BiXsWMJMhb 8pa2xojF00w4uu7TZktIEp+eH1nXUBO8QxGre+3RO5ph3EI7jC1d5rsaI7IS9AGp qwrsUp58PZHxvA3eGGqIhs6LZV6s1rpjAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU dF3XcQDluqV1XTuTwPQnTCebbdcwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkEzOUNFLzYyMUFC NEVFMEI1MzExRUU5QjREMTM1RDRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZBMzlDRS82MjFBQjRFRTBCNTMxMUVFOUI0RDEzNUQ0QUQ5RTZG Qy9kRjNYY1FEbHVxVjFYVHVUd1BRblRDZWJiZGMubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqf8YMA0GCSqGSIb3DQEBCwUAA4IBAQAX5sRfRsA2MqYV uDx5cIc/92oH/H6X6Cw071YBaNbmtWf6QPMBYC+avohaL+yVE9RFx0lxV31KKVmh Qsyz/sZW/3oQGWa22wKLOFvuVh87HoubiCYdsWvHqSe+jJ63ET+QXfli3kdB8dmv 8+tcQMiiUReDdIE2NS2RZ5QTNtn/o+Y7uUbtI7zG9tYhblJKWZB87sVuYy/OIYGV eelUk7d6FJZJFib+MO6VetJoUXgRuGcyoOe3hF++dN3RwCMhJDCESxbDuPgRMol5 jb3R/AI6IlSB4f4cd6zV/BlWzaInBehTj3g7A2SQwNrma11dIBJzKMroArttzdsu G/WA8mVc -----END CERTIFICATE-----Generated at Mon Jan 26 13:47:09 2026 by rpki-client