This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer File: otd9qqMurfowwn_FTDYvrBwxtaM.cer (raw, json) Hash identifier: si5x/5jYG6xX5grsytkUuu8qYq0SzFDfCQKguZFsSH0= Subject key identifier: A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A34 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:59:34 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.255.160.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6708 (0x1a34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:59:34 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A15D5AR, serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:06:3b:ef:7d:8f:11:70:a2:f7:33:d6:24: ec:d3:b3:6a:bb:c8:5e:2a:ba:76:5b:83:70:61:18: ca:81:2c:d5:df:ec:b6:ea:b2:9f:49:7d:f6:b2:11: 78:ec:73:a9:cd:8f:e4:cb:00:cb:2c:86:38:b4:4d: c2:5c:8c:da:c8:97:ef:85:d7:49:0d:6f:ba:38:bc: 91:12:e4:d5:6c:c7:bf:be:e5:eb:d5:04:cb:e4:e0: 94:19:5b:af:9c:b5:d6:63:66:1f:46:d2:5d:5d:f8: 54:fd:f3:a7:8d:f3:7a:d0:1c:1c:eb:39:7e:92:7d: d5:09:8a:8b:ca:44:51:80:77:a2:54:32:9a:44:78: 3b:7a:14:01:7c:56:e8:a2:96:b3:52:26:f5:f0:5c: 1b:1d:3a:c0:f4:29:a3:f7:6b:83:e1:e4:1b:ea:f5: 31:60:b6:5d:b5:e3:32:1c:da:7e:af:05:00:27:83: ef:bd:ed:d5:76:9c:ce:e4:4f:e0:00:36:49:82:fc: 5e:b5:83:1a:92:fa:c0:80:75:5e:48:c7:32:41:69: d3:74:38:57:d1:07:ce:9d:66:0e:8f:c8:2f:99:b7: f7:d4:de:40:48:3d:db:0c:4a:19:96:41:2a:d5:c8: e4:a9:e8:65:7c:d0:40:81:84:81:d5:4a:97:6e:f8: 1b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft sbgp-ipAddrBlock: critical IPv4: 169.255.160.0/22 Signature Algorithm: sha256WithRSAEncryption 94:33:1b:91:00:b4:ed:97:82:ce:81:7f:06:2c:4e:e9:32:28: 0c:e6:51:10:4e:f6:67:1e:56:f2:90:a1:99:3e:75:c3:03:fc: eb:ca:2b:97:02:3b:0b:95:29:53:0f:90:17:0a:3f:82:17:5a: 38:c0:91:9c:98:7b:53:65:88:39:14:23:95:16:b9:dc:7c:58: 70:b5:27:56:13:a9:ed:3c:b6:6b:17:25:56:f5:6a:89:d2:11: ec:fd:d4:0a:73:35:8a:a9:c7:c7:02:58:f1:cc:96:b7:16:b1: c2:d9:6b:0b:de:c8:69:5c:12:18:78:b7:7f:9e:79:06:b8:7d: a5:9a:2c:f2:db:ef:17:f9:e0:7c:09:50:fd:20:e9:d4:34:79: e6:e3:ed:47:49:14:ea:57:da:26:30:ca:80:b7:40:a8:23:df: 5b:fe:9e:b4:5b:8f:f9:00:54:e2:9a:65:5e:0d:a4:39:81:f1: cf:ca:47:ff:30:fa:e4:f3:94:f6:cb:34:7c:e0:e6:e6:8d:90: 71:5f:d4:89:1d:f8:03:14:6b:09:03:64:02:a3:22:70:fe:f2: c6:8f:5f:47:07:82:c1:9a:c5:da:e1:af:b7:0c:84:b9:1c:e4: 36:9e:b7:d1:b6:6d:8e:a4:9d:be:27:47:a8:34:3d:66:24:52: 36:00:44:2e -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGjQwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDU5MzRaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkExNUQ1QVIxMTAvBgNVBAUTKEEyRDc3REFBQTMyRUFERkEz MEMyN0ZDNTRDMzYyRkFDMUMzMUI1QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCXowY7732PEXCi9zPWJOzTs2q7yF4qunZbg3BhGMqBLNXf7Lbqsp9J ffayEXjsc6nNj+TLAMsshji0TcJcjNrIl++F10kNb7o4vJES5NVsx7++5evVBMvk 4JQZW6+ctdZjZh9G0l1d+FT986eN83rQHBzrOX6SfdUJiovKRFGAd6JUMppEeDt6 FAF8VuiilrNSJvXwXBsdOsD0KaP3a4Ph5Bvq9TFgtl214zIc2n6vBQAng++97dV2 nM7kT+AANkmC/F61gxqS+sCAdV5IxzJBadN0OFfRB86dZg6PyC+Zt/fU3kBIPdsM ShmWQSrVyOSp6GV80ECBhIHVSpdu+Bv1AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU otd9qqMurfowwn/FTDYvrBwxtaMwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkExNUQ1LzBFNjM5 MzlDQzNFNjExRTlBMjJDMjM3MEY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZBMTVENS8wRTYzOTM5Q0MzRTYxMUU5QTIyQzIzNzBGOEFFQTIy OC9vdGQ5cXFNdXJmb3d3bl9GVERZdnJCd3h0YU0ubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqf+gMA0GCSqGSIb3DQEBCwUAA4IBAQCUMxuRALTtl4LO gX8GLE7pMigM5lEQTvZnHlbykKGZPnXDA/zryiuXAjsLlSlTD5AXCj+CF1o4wJGc mHtTZYg5FCOVFrncfFhwtSdWE6ntPLZrFyVW9WqJ0hHs/dQKczWKqcfHAljxzJa3 FrHC2WsL3shpXBIYeLd/nnkGuH2lmizy2+8X+eB8CVD9IOnUNHnm4+1HSRTqV9om MMqAt0CoI99b/p60W4/5AFTimmVeDaQ5gfHPykf/MPrk85T2yzR84ObmjZBxX9SJ HfgDFGsJA2QCoyJw/vLGj19HB4LBmsXa4a+3DIS5HOQ2nrfRtm2OpJ2+J0eoND1m JFI2AEQu -----END CERTIFICATE-----Generated at Mon Jan 26 02:46:09 2026 by rpki-client