This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer File: ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer (raw, json) Hash identifier: QTtSJcbs+7XRFE0oPd6DfHknaz/As8MDIgAPUbJcP+8= Subject key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A2C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:58:37 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.239.128.0/22 IP: 169.239.200.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6700 (0x1a2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:58:37 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:b8:4d:33:a3:15:31:c7:ed:f8:0c:ed:db: 59:b9:3e:5a:38:59:00:25:c3:30:4f:97:e6:8f:f2: 9c:0c:a7:a1:d9:71:23:43:af:45:c3:a0:12:06:74: 82:81:a1:da:58:d7:60:4d:56:53:38:3f:3c:16:11: 2f:15:b5:18:2e:43:34:9c:ca:ad:99:df:a0:1a:03: 97:d7:b5:a1:18:f0:20:64:10:67:93:b1:8a:77:4e: d6:ef:07:18:1f:94:e2:3e:14:48:19:de:18:da:c8: 2e:21:a3:72:8f:1e:54:dd:f1:5b:fd:9a:84:92:b1: d9:09:1d:22:3f:4c:65:65:1a:d5:b9:bc:00:1e:5d: 35:6d:5b:aa:58:a7:08:08:2f:6f:79:9d:30:5f:99: b7:d6:3a:8b:f6:98:05:3b:0a:a3:92:28:f0:eb:03: 98:01:9a:05:ce:f4:38:99:d1:b6:a0:cd:e7:fd:01: 30:16:2e:39:8d:46:b1:1b:39:b7:0f:52:58:02:81: 46:28:2a:3f:db:26:04:79:18:e7:4a:8b:ed:00:8d: af:f2:08:ad:fd:b7:3c:13:43:e7:5a:29:ce:c7:1a: 59:49:7a:9f:d8:dc:2d:4c:13:4d:74:52:2c:93:61: 89:ad:3f:00:52:a6:b1:95:10:43:0b:17:79:86:9c: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft sbgp-ipAddrBlock: critical IPv4: 169.239.128.0/22 169.239.200.0/22 Signature Algorithm: sha256WithRSAEncryption 90:8e:a7:02:76:62:06:f9:27:6f:08:98:db:a6:78:82:d9:0e: 95:2f:07:be:b9:31:0b:74:fb:8a:83:82:2e:06:f2:4b:09:16: 95:70:64:1b:26:6a:bd:1f:74:4e:a0:a2:c0:c4:bf:8c:b0:0d: 9b:95:14:d2:7c:bb:aa:d9:7d:75:7a:6a:dd:81:30:14:79:87: 70:86:97:b7:1c:df:98:b3:a6:b4:c6:5c:c1:d4:0f:51:59:40: eb:bc:a2:b4:2e:a5:65:96:d7:47:38:e1:ff:61:33:ec:a1:c2: 7f:b0:c1:38:9c:d2:17:c9:e5:a9:53:ef:1b:a8:9c:b4:89:c4: bc:b0:2b:d0:39:00:3b:04:3d:a6:58:c0:79:58:a4:05:eb:0c: 69:05:aa:a1:4e:8c:0e:0b:7e:09:8a:88:d3:12:0c:96:d9:92: 92:5a:96:68:6b:5a:6f:2e:48:1a:78:4c:a8:8c:c8:7c:ba:60: 97:e0:53:78:2f:b3:7f:69:63:3b:ad:5f:2b:50:bf:a6:14:75: d3:83:8f:46:a4:a3:fe:98:0f:69:b2:d7:7b:57:8d:42:df:ff: 78:21:ee:bb:67:60:70:54:73:c7:55:ca:ab:b0:f4:12:10:5e: 1b:3c:43:cf:59:e5:2c:9f:64:c9:d2:a9:1d:bd:6e:4c:90:14: ae:0b:79:68 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgICGiwwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDU4MzdaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjk5QjhFQVIxMTAvBgNVBAUTKDhBOUY4NjA1MEI0QTRFNEU5 MjVERTZGRkQ5MkFDMzQ4MzMzRTA3MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDQZLhNM6MVMcft+Azt21m5Plo4WQAlwzBPl+aP8pwMp6HZcSNDr0XD oBIGdIKBodpY12BNVlM4PzwWES8VtRguQzScyq2Z36AaA5fXtaEY8CBkEGeTsYp3 TtbvBxgflOI+FEgZ3hjayC4ho3KPHlTd8Vv9moSSsdkJHSI/TGVlGtW5vAAeXTVt W6pYpwgIL295nTBfmbfWOov2mAU7CqOSKPDrA5gBmgXO9DiZ0bagzef9ATAWLjmN RrEbObcPUlgCgUYoKj/bJgR5GOdKi+0Aja/yCK39tzwTQ+daKc7HGllJep/Y3C1M E010UiyTYYmtPwBSprGVEEMLF3mGnO8fAgMBAAGjggL3MIIC8zAdBgNVHQ4EFgQU ip+GBQtKTk6SXeb/2SrDSDM+BxIwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjk5QjhFLzBFNDcz ODBDQjEyMzExRTU5MTQ0NjE0QUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY5OUI4RS8wRTQ3MzgwQ0IxMjMxMUU1OTE0NDYxNEFGOEFFQTIy OC9pcC1HQlF0S1RrNlNYZWJfMlNyRFNETS1CeEkubWZ0MCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCqe+AAwQCqe/IMA0GCSqGSIb3DQEBCwUAA4IBAQCQjqcC dmIG+SdvCJjbpniC2Q6VLwe+uTELdPuKg4IuBvJLCRaVcGQbJmq9H3ROoKLAxL+M sA2blRTSfLuq2X11emrdgTAUeYdwhpe3HN+Ys6a0xlzB1A9RWUDrvKK0LqVlltdH OOH/YTPsocJ/sME4nNIXyeWpU+8bqJy0icS8sCvQOQA7BD2mWMB5WKQF6wxpBaqh TowOC34JiojTEgyW2ZKSWpZoa1pvLkgaeEyojMh8umCX4FN4L7N/aWM7rV8rUL+m FHXTg49GpKP+mA9pstd7V41C3/94Ie67Z2BwVHPHVcqrsPQSEF4bPEPPWeUsn2TJ 0qkdvW5MkBSuC3lo -----END CERTIFICATE-----Generated at Sun Jan 25 21:41:59 2026 by rpki-client