This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer File: fKNUKvCHqHusqx-GbuX_WxVvp4c.cer (raw, json) Hash identifier: JWn7YBj7+mad+QgMNRFaGbmXS6swio08LuqijnH4Xk8= Subject key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 19C6 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:43:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 192.142.0.0/16 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6598 (0x19c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:43:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:2f:21:48:a0:c8:f3:47:f9:06:de:c2:4e: be:f0:14:d9:b8:21:23:38:b2:9e:c9:47:96:9c:9a: 41:04:25:3b:7f:e9:3a:bf:46:39:e0:20:4a:20:fb: 4c:6a:98:e5:a2:14:1c:4c:30:5b:b7:95:d2:c7:c9: 69:ef:4c:38:67:ad:9d:52:04:0e:e9:75:bd:ec:e4: 74:52:22:f4:76:5b:99:c5:f4:98:b4:2c:68:e2:92: 57:f9:a0:a1:25:22:b1:cf:96:c5:5f:94:0b:49:78: 81:9e:fc:8b:d5:6b:85:60:f2:1f:ce:3a:17:66:ab: c9:cb:cc:86:5d:4a:bf:3b:fa:69:28:5d:4a:87:0b: 69:d6:63:c1:f4:02:37:e0:8d:5a:1b:ba:c4:f1:3e: 7d:6a:31:2e:88:67:71:b8:42:67:cd:c7:15:2c:74: 93:91:18:f0:59:fc:00:4f:75:29:a7:80:ca:11:00: f2:44:08:21:69:9f:cc:4d:aa:b5:d7:b2:a3:91:a2: a0:b4:6b:e7:d3:65:5a:0b:f0:f1:a4:fb:e3:7e:17: 81:65:06:23:42:81:8b:d7:ea:b5:f2:91:cf:c2:de: 40:a7:20:f4:4e:2a:42:03:0f:6c:99:90:51:e8:ae: ca:4d:f3:fb:27:27:2a:b7:76:fd:81:62:ed:62:3c: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft sbgp-ipAddrBlock: critical IPv4: 192.142.0.0/16 Signature Algorithm: sha256WithRSAEncryption 19:b8:de:9a:51:23:28:22:62:c0:5c:8e:30:f0:d1:f8:59:c1: fd:38:fd:1f:9c:e9:7b:cc:52:ea:16:e6:0c:6a:18:9d:10:91: 13:d9:92:47:a3:d4:38:43:9c:b9:6f:8f:71:db:70:f5:5d:29: 25:e1:06:b4:0b:b9:b7:3e:52:5f:a9:ed:42:2f:a9:64:50:7e: 81:94:ee:a3:61:d0:ab:4f:d6:78:03:3d:80:f1:e8:f1:5c:6a: e8:e7:0c:af:08:c6:0a:6a:9c:46:7a:6d:6c:89:7d:27:2c:3d: 1d:bf:4b:fe:cd:19:9d:f4:2f:a9:7e:fc:d6:66:1c:11:e9:85: 98:2b:92:0c:2d:fe:ec:84:83:81:d2:27:9d:38:fb:82:55:3e: ac:5b:3c:c8:b1:b1:ce:42:83:79:bd:e7:c9:ee:a8:3a:23:80: 07:e7:be:79:68:59:6e:db:59:79:73:58:6b:59:e2:95:2e:40: 43:34:c1:4b:6e:b0:cf:0f:8e:c9:f4:fe:b9:d6:95:54:1c:35: 23:49:09:1c:48:d6:39:49:70:be:b5:78:ab:50:de:1a:eb:c9: 62:4b:52:bc:8c:b1:35:70:91:46:fb:4b:a8:b9:e7:f5:38:f1: ff:60:b1:be:23:7e:a6:38:28:83:00:2f:88:ac:31:d9:94:9d: ee:76:51:1a -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgICGcYwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDQzMTVaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjY5RDZCQVIxMTAvBgNVBAUTKDdDQTM1NDJBRjA4N0E4N0JB Q0FCMUY4NjZFRTVGRjVCMTU2RkE3ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDIay8hSKDI80f5Bt7CTr7wFNm4ISM4sp7JR5acmkEEJTt/6Tq/Rjng IEog+0xqmOWiFBxMMFu3ldLHyWnvTDhnrZ1SBA7pdb3s5HRSIvR2W5nF9Ji0LGji klf5oKElIrHPlsVflAtJeIGe/IvVa4Vg8h/OOhdmq8nLzIZdSr87+mkoXUqHC2nW Y8H0AjfgjVobusTxPn1qMS6IZ3G4QmfNxxUsdJORGPBZ/ABPdSmngMoRAPJECCFp n8xNqrXXsqORoqC0a+fTZVoL8PGk++N+F4FlBiNCgYvX6rXykc/C3kCnIPROKkID D2yZkFHorspN8/snJyq3dv2BYu1iPNClAgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU fKNUKvCHqHusqx+GbuX/WxVvp4cwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEy N0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY2OUQ2Qi9EMjRBMjdCODg3OUExMUU5ODM3MDRCNTFGOEFFQTIy OC9mS05VS3ZDSHFIdXNxeC1HYnVYX1d4VnZwNGMubWZ0MB4GCCsGAQUFBwEHAQH/ BA8wDTALBAIAATAFAwMAwI4wDQYJKoZIhvcNAQELBQADggEBABm43ppRIygiYsBc jjDw0fhZwf04/R+c6XvMUuoW5gxqGJ0QkRPZkkej1DhDnLlvj3HbcPVdKSXhBrQL ubc+Ul+p7UIvqWRQfoGU7qNh0KtP1ngDPYDx6PFcaujnDK8IxgpqnEZ6bWyJfScs PR2/S/7NGZ30L6l+/NZmHBHphZgrkgwt/uyEg4HSJ504+4JVPqxbPMixsc5Cg3m9 58nuqDojgAfnvnloWW7bWXlzWGtZ4pUuQEM0wUtusM8Pjsn0/rnWlVQcNSNJCRxI 1jlJcL61eKtQ3hrryWJLUryMsTVwkUb7S6i55/U48f9gsb4jfqY4KIMAL4isMdmU ne52URo= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:38 2026 by rpki-client