This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.cer (raw, json)
Hash identifier:          yiFTZYOX/3srhSTC++aJ79cliSAt3o2xu5Jry09JFz0=
Subject key identifier:   8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A24
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:57:34 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 69.67.32.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6692 (0x1a24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:57:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3696E5FAR, serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:1d:b5:af:8a:52:3a:38:bf:46:88:35:27:
                    98:e3:02:0f:7d:d1:68:fb:19:7d:b9:5b:21:6f:1b:
                    60:6d:ce:83:31:ee:ba:db:90:9c:8f:7e:12:32:01:
                    22:6f:61:60:1f:df:80:b0:b7:94:63:1d:11:68:e0:
                    64:23:e9:ad:ab:ea:5c:58:73:11:0b:19:ca:60:0b:
                    eb:e1:5e:ec:67:78:3e:d3:ba:5a:3f:3c:8b:c1:6c:
                    bd:da:d7:1b:ea:3b:97:f3:ec:3c:13:0b:0c:ba:88:
                    24:a1:d7:ba:ef:d6:4c:4b:79:80:68:ea:e0:d5:d6:
                    28:c8:f9:99:07:84:ad:8f:f1:43:9b:6b:0b:d2:d5:
                    b4:bb:65:bf:15:f2:4d:eb:92:3d:27:1e:29:9c:b4:
                    f9:81:5d:5f:a2:ec:82:c5:e6:ab:7a:7a:6e:bc:73:
                    5a:97:ca:4d:67:15:f8:03:d0:77:fa:5c:56:0f:d1:
                    63:5f:89:dc:b9:98:5a:a1:8f:41:15:51:65:ad:15:
                    aa:2c:aa:ac:31:5d:50:d1:85:c0:cb:d5:10:14:b1:
                    a0:9c:f2:a3:e9:38:c7:b9:43:20:ad:62:df:21:21:
                    30:61:73:a8:fb:8c:a0:8f:bc:a0:db:40:61:95:04:
                    f7:cb:0a:46:f4:e9:c9:39:dc:2c:8f:34:23:88:01:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:57:b0:28:b8:bf:9d:9d:ec:42:9a:cb:16:4f:9a:4a:dd:44:
         80:7b:3f:50:96:24:11:50:89:a2:fd:f7:af:56:5d:14:20:af:
         a4:37:20:76:c1:d4:50:d5:d9:e7:1a:6c:25:3e:8b:41:d7:08:
         6c:f5:3e:4a:6d:02:07:da:12:dd:66:c5:7f:84:3b:47:68:07:
         cb:26:cb:d8:1b:2d:ad:8c:ae:27:30:46:03:6b:c2:f4:1f:ba:
         50:63:c4:71:4f:b6:2e:69:90:68:5f:fd:81:09:52:cd:8b:0f:
         c5:b4:6f:3c:99:4a:2b:5c:c0:e2:2f:89:62:c8:41:b8:cc:7a:
         ce:a4:a9:e3:d6:ab:4c:fc:ce:ed:5c:33:22:af:f1:5b:ff:b9:
         8a:16:c6:4d:1b:fd:49:5c:d3:28:f2:1a:ac:47:72:6c:0e:72:
         5f:60:be:fa:2e:5b:eb:31:21:c8:69:da:48:af:1b:cc:c3:80:
         71:53:ea:de:a8:d7:9d:e6:10:18:a5:e7:fc:e7:bb:6f:93:27:
         e1:0e:16:3a:b9:56:95:29:e7:8a:d5:ae:e7:8e:55:10:59:ea:
         26:a3:d9:8d:a2:a5:0a:a1:f0:d3:c1:37:b1:94:31:b4:bc:66:
         cf:05:fe:4f:c1:d8:0f:47:eb:eb:7b:52:ee:4b:0a:e9:43:81:
         a7:12:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:51:58 2026 by rpki-client