This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer File: hgwk5dUBPSMjsLq0BphmwNwK7m0.cer (raw, json) Hash identifier: dS0rIvjW50OOfNlMAVXXd7q71Gn0BP8ZQIfS7vms8AU= Subject key identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1940 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:26:54 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.239.8.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6464 (0x1940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:26:54 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F361F1DAAR, serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:9a:6b:68:2d:1d:13:18:1d:67:16:8b:0f: 73:bb:51:cf:a6:bc:cd:4a:1d:ff:9c:65:bf:6c:74: f4:49:57:23:75:c8:b2:c5:20:6d:88:aa:d5:80:1c: 84:a5:6a:d8:31:da:2b:d3:de:6e:f8:ca:21:e0:9a: 9e:e9:4a:29:41:59:16:9a:63:81:c9:1a:a8:cd:c6: 5e:35:da:e6:bd:c2:7c:cf:77:21:04:7b:c7:35:a7: 90:d6:ca:f9:80:8d:07:e2:af:d5:b2:fd:d7:84:d7: f5:6b:8c:e3:50:12:b0:f5:9f:f4:b2:49:cd:f0:7e: c6:6f:49:4d:af:57:d4:32:19:64:ba:3d:58:b7:07: 84:32:e3:5c:ef:5c:d0:b8:20:b2:de:de:bf:27:5a: df:e8:90:3c:80:de:f2:71:d3:e0:b5:40:4b:a2:f6: 3c:6b:fb:cf:e3:c8:33:1a:54:8b:22:9d:dc:1b:6c: 9d:20:86:03:bb:a0:e7:23:e3:e5:23:1c:44:e7:53: a4:83:8e:4f:70:39:28:a4:ce:73:26:b9:99:94:fe: ca:3d:d8:78:db:5f:9a:e0:df:3f:fa:45:77:fe:fb: 03:e4:fa:36:7c:71:00:a8:d3:3f:67:e3:a5:52:5e: 89:00:c6:2f:3d:ad:b1:96:1b:6e:35:a3:ed:19:46: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft sbgp-ipAddrBlock: critical IPv4: 169.239.8.0/22 Signature Algorithm: sha256WithRSAEncryption 32:fb:29:c4:6d:aa:e6:29:d3:5b:b1:93:14:61:dc:d7:9a:c3: 69:fd:da:e9:00:5c:ce:7a:d1:77:4f:7f:bd:29:55:c4:76:7c: 46:f1:be:98:50:7b:35:83:47:5f:ee:dc:4d:c9:0a:2f:92:9b: 6c:f2:48:e3:ec:98:3b:c3:a9:62:7e:0e:d7:ed:3b:25:8d:cb: c8:7b:e7:ac:a9:2d:c7:27:a5:3d:a5:f6:61:6d:25:aa:c8:91: be:fb:57:e2:99:c7:a6:cd:ac:83:17:c5:04:10:9b:6e:8a:ca: 33:27:aa:7a:e7:ef:54:f3:b0:57:b4:86:e6:38:f0:f9:e7:29: 76:7f:c8:05:72:1c:52:78:32:d0:12:66:70:9c:e0:82:55:7b: c5:1f:0b:8b:48:d4:c9:88:51:79:57:01:7c:c8:93:14:e8:9a: 4e:5a:89:eb:32:fd:75:31:2f:36:be:d5:ca:49:54:b3:09:e0: 30:25:ce:56:09:07:45:b2:67:81:06:c0:8e:d6:a5:8e:a8:c1: 05:79:4d:65:19:fb:bf:4a:be:b6:03:b0:2a:91:86:af:30:bc: be:62:07:0f:72:95:cb:c7:3b:d1:0c:ea:22:11:9d:04:95:c1: ff:e8:7b:27:80:ec:8f:96:f8:a9:8a:76:60:58:11:d7:3a:29: 2f:1a:83:18 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGUAwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDI2NTRaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjFGMURBQVIxMTAvBgNVBAUTKDg2MEMyNEU1RDUwMTNEMjMy M0IwQkFCNDA2OTg2NkMwREMwQUVFNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCyJppraC0dExgdZxaLD3O7Uc+mvM1KHf+cZb9sdPRJVyN1yLLFIG2I qtWAHISlatgx2ivT3m74yiHgmp7pSilBWRaaY4HJGqjNxl412ua9wnzPdyEEe8c1 p5DWyvmAjQfir9Wy/deE1/VrjONQErD1n/SySc3wfsZvSU2vV9QyGWS6PVi3B4Qy 41zvXNC4ILLe3r8nWt/okDyA3vJx0+C1QEui9jxr+8/jyDMaVIsindwbbJ0ghgO7 oOcj4+UjHETnU6SDjk9wOSikznMmuZmU/so92HjbX5rg3z/6RXf++wPk+jZ8cQCo 0z9n46VSXokAxi89rbGWG241o+0ZRiZzAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU hgwk5dUBPSMjsLq0BphmwNwK7m0wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjFGMURBLzFCODU3 OEQwNzdFMDExRUU4MERCQTI3QjRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzYxRjFEQS8xQjg1NzhEMDc3RTAxMUVFODBEQkEyN0I0QUQ5RTZG Qy9oZ3drNWRVQlBTTWpzTHEwQnBobXdOd0s3bTAubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqe8IMA0GCSqGSIb3DQEBCwUAA4IBAQAy+ynEbarmKdNb sZMUYdzXmsNp/drpAFzOetF3T3+9KVXEdnxG8b6YUHs1g0df7txNyQovkpts8kjj 7Jg7w6lifg7X7TsljcvIe+esqS3HJ6U9pfZhbSWqyJG++1fimcemzayDF8UEEJtu isozJ6p65+9U87BXtIbmOPD55yl2f8gFchxSeDLQEmZwnOCCVXvFHwuLSNTJiFF5 VwF8yJMU6JpOWonrMv11MS82vtXKSVSzCeAwJc5WCQdFsmeBBsCO1qWOqMEFeU1l Gfu/Sr62A7AqkYavMLy+YgcPcpXLxzvRDOoiEZ0ElcH/6HsngOyPlvipinZgWBHX OikvGoMY -----END CERTIFICATE-----Generated at Sun Jan 25 18:23:12 2026 by rpki-client