This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
File:                     kjOEThK8fu30Ns4cyZ6uITZHJkc.cer (raw, json)
Hash identifier:          z37mXKt1WlIwYjJxcEVs6u0ytsF7viOZFyJIMEXjtM8=
Subject key identifier:   92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1AB9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:15:33 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 168.155.0.0/16
                          IP: 192.157.190.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6841 (0x1ab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:15:33 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36F8DABAR, serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:2c:70:0f:4d:5a:73:63:f4:b4:bd:b0:87:
                    78:63:3c:51:78:1a:7e:81:5a:ed:b7:47:92:08:60:
                    46:d2:c9:85:15:71:05:dd:28:f9:82:d4:ec:53:82:
                    4b:44:35:f3:6e:5b:e7:39:49:11:e2:f2:32:78:6b:
                    c5:41:01:bf:ca:05:b8:31:ef:86:f0:bf:0a:8a:16:
                    5d:ce:95:a0:2d:66:fe:ad:96:6f:18:4f:2b:c8:f7:
                    4c:a5:eb:f0:68:fe:ea:6c:d5:e0:cc:34:39:d0:b5:
                    0e:30:bd:74:63:3c:36:52:c3:bb:85:69:71:76:4b:
                    ad:7f:0e:d5:55:c6:fd:ca:53:9a:2b:f3:f2:ea:7e:
                    4a:40:5a:14:d5:e2:ee:89:19:be:5a:6e:96:46:8f:
                    f9:77:3e:86:63:68:80:cb:05:82:ff:7a:f9:2c:7c:
                    39:b0:dc:8a:3e:22:bf:e1:83:19:d7:99:97:d1:71:
                    0b:a5:59:55:9a:4f:76:9c:ef:91:a7:67:17:bf:2a:
                    5d:41:18:76:ff:66:e8:7d:8c:61:10:4f:de:a4:e6:
                    7d:19:7e:22:4d:e2:4a:80:79:da:11:92:56:bc:3c:
                    8e:06:4b:af:60:29:cd:3a:fb:1f:b7:0a:b6:13:89:
                    1f:0b:d8:e4:c6:0f:42:ba:14:2a:80:02:d7:3c:a8:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.155.0.0/16
                  192.157.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:4e:77:b6:96:b1:d3:a9:2d:c8:a1:63:e6:3a:49:83:a6:
         80:84:eb:15:b0:a0:8c:97:5a:51:cd:ab:af:c7:c9:6b:bf:7e:
         21:44:4d:4e:ea:95:eb:84:72:d1:da:24:66:2e:6b:64:0b:17:
         77:16:8e:20:8e:dc:4f:35:52:11:b5:4c:e1:bf:7c:9a:d4:e3:
         44:f1:03:f8:88:ed:d4:e8:07:8e:3e:55:bf:3a:e9:37:eb:ae:
         ca:37:3f:a9:35:e4:7b:ee:f1:f1:c5:a4:ba:a8:da:70:4e:d5:
         06:8c:cc:ad:85:4c:f0:53:29:5b:06:1a:d3:86:10:a2:1c:76:
         60:28:5c:7f:62:92:5c:68:bb:6c:b2:e7:54:31:fb:83:e8:2f:
         62:d0:0f:34:bb:fc:41:d2:49:e4:86:26:d8:2a:7b:6c:46:ad:
         c2:b5:cb:89:5d:fb:2a:94:2b:0f:c4:73:55:27:60:7a:cd:69:
         bc:01:c8:95:26:4e:28:2a:89:a8:f4:c9:f5:52:ba:f1:27:76:
         30:69:33:a0:9f:65:bf:a3:3d:8c:66:bd:1b:f1:21:23:16:94:
         3d:cb:c5:f8:e8:2e:39:fb:4a:37:20:1c:e6:e6:ab:46:d1:e8:
         4c:a1:f4:08:85:f9:7c:4d:8f:a9:ab:17:5a:f7:bd:de:ce:24:
         e3:ca:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:06:37 2026 by rpki-client