This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
File:                     hursQpTfunBFqIZC6d_EVRs0wlU.cer (raw, json)
Hash identifier:          kdYfKR9tH0+LLY0Sg/o8/q7KeNE6U418x07W5BbU1Z4=
Subject key identifier:   86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A06
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:53:50 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 45.221.0.0/22
                          IP: 45.221.16.0/22
                          IP: 160.0.0.0/17
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6662 (0x1a06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:53:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F368588EAR, serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:67:cd:94:a5:29:5b:f4:eb:d3:5c:b4:df:
                    bc:9e:62:fb:7a:ed:08:e0:6b:c6:a9:63:9a:d9:20:
                    8f:62:d3:53:27:58:24:72:28:e5:aa:b0:42:f0:4d:
                    71:e0:20:eb:98:34:06:6f:d5:31:dc:62:8c:3e:be:
                    85:af:40:04:49:f9:37:8d:31:8e:78:d0:d9:ae:72:
                    ed:9b:75:f8:b8:2c:f2:ca:9a:4b:28:11:d3:94:df:
                    b2:bd:d2:9d:9a:f9:b4:22:73:6f:05:02:a3:d8:eb:
                    95:19:41:77:1f:b3:7d:a9:f4:ad:69:48:74:56:f8:
                    60:1d:ce:50:02:b1:f0:b6:37:86:e9:76:a5:73:12:
                    22:58:02:cb:e9:b6:bf:c6:2d:de:44:f8:d0:50:7e:
                    af:99:68:d1:be:16:52:26:9c:af:a0:44:c7:48:1d:
                    19:c0:1e:fb:f2:be:b6:e9:e5:4d:09:ba:f8:92:26:
                    90:a6:65:75:b1:64:ae:a8:1d:35:de:dd:28:b1:72:
                    76:92:fc:eb:85:6a:17:81:d7:b3:77:64:05:96:b2:
                    49:6f:99:ab:ff:2c:59:e0:f6:81:fd:d8:db:b1:3e:
                    00:37:ba:0f:4e:53:54:f9:e7:64:47:89:17:ac:df:
                    ba:14:2b:d3:a9:90:f0:8f:8a:7d:ec:dd:0f:4b:01:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.0.0/22
                  45.221.16.0/22
                  160.0.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:b3:65:4c:f8:b7:17:0b:ee:dd:0a:bc:d7:84:55:ad:0c:
         e6:6a:44:61:8d:72:ab:34:00:aa:8b:e4:31:3d:f9:cf:1b:c3:
         b9:00:be:88:84:9b:86:79:56:d0:49:7d:66:ea:a3:28:8e:61:
         fc:9d:a5:e9:5b:c7:07:98:f0:82:a0:ce:e9:be:3f:3d:fb:21:
         84:86:a5:33:bf:8f:9e:ef:a9:43:ea:f8:4a:2a:d9:76:8e:dd:
         ce:0d:a6:3b:fc:21:69:62:0e:22:c2:6a:0e:0c:6d:51:ed:15:
         16:cd:b9:57:10:d2:39:af:a0:eb:81:7d:81:73:73:d8:e2:75:
         8b:6a:a6:d3:23:49:06:dd:d6:12:6b:74:ca:4a:a4:99:1b:93:
         0d:ed:13:99:35:22:48:61:f9:76:d4:6c:2c:83:ec:8a:0c:c4:
         29:7e:ec:b9:3c:df:b6:80:d4:25:66:de:11:30:2f:3f:3f:d3:
         2b:68:c4:8e:3c:28:78:b6:31:46:fa:52:fb:a0:49:ad:11:21:
         e6:32:6b:39:74:05:17:30:41:89:ab:44:db:ba:75:22:87:30:
         5e:73:a2:f9:9c:b9:6a:d6:7c:14:ce:b6:5f:b8:b2:0a:07:94:
         15:2f:60:b0:a7:2f:62:96:e8:f1:d7:11:33:57:8b:88:9a:e0:
         73:01:5f:75
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgICGgYwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDUzNTBaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjg1ODhFQVIxMTAvBgNVBAUTKDg2RUFFQzQyOTRERkJBNzA0
NUE4ODY0MkU5REZDNDU1MUIzNEMyNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDCp2fNlKUpW/Tr01y037yeYvt67Qjga8apY5rZII9i01MnWCRyKOWq
sELwTXHgIOuYNAZv1THcYow+voWvQARJ+TeNMY540Nmucu2bdfi4LPLKmksoEdOU
37K90p2a+bQic28FAqPY65UZQXcfs32p9K1pSHRW+GAdzlACsfC2N4bpdqVzEiJY
Asvptr/GLd5E+NBQfq+ZaNG+FlImnK+gRMdIHRnAHvvyvrbp5U0JuviSJpCmZXWx
ZK6oHTXe3SixcnaS/OuFaheB17N3ZAWWsklvmav/LFng9oH92NuxPgA3ug9OU1T5
52RHiRes37oUK9OpkPCPin3s3Q9LAVpHAgMBAAGjggL9MIIC+TAdBgNVHQ4EFgQU
hursQpTfunBFqIZC6d/EVRs0wlUwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjg1ODhFL0I1RjQy
NTQwQ0IyRjExRTlBNjI5MjkyN0Y4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY4NTg4RS9CNUY0MjU0MENCMkYxMUU5QTYyOTI5MjdGOEFFQTIy
OC9odXJzUXBUZnVuQkZxSVpDNmRfRVZSczB3bFUubWZ0MCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAATASAwQCLd0AAwQCLd0QAwQHoAAAMA0GCSqGSIb3DQEBCwUAA4IB
AQAZ5bNlTPi3Fwvu3Qq814RVrQzmakRhjXKrNACqi+QxPfnPG8O5AL6IhJuGeVbQ
SX1m6qMojmH8naXpW8cHmPCCoM7pvj89+yGEhqUzv4+e76lD6vhKKtl2jt3ODaY7
/CFpYg4iwmoODG1R7RUWzblXENI5r6DrgX2Bc3PY4nWLaqbTI0kG3dYSa3TKSqSZ
G5MN7ROZNSJIYfl21Gwsg+yKDMQpfuy5PN+2gNQlZt4RMC8/P9MraMSOPCh4tjFG
+lL7oEmtESHmMms5dAUXMEGJq0TbunUihzBec6L5nLlq1nwUzrZfuLIKB5QVL2Cw
py9ilujx1xEzV4uImuBzAV91
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:22:05 2026 by rpki-client