This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
File: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer (raw, json)
Hash identifier: EU1S5S4RalVcF84wEpbtfX3XkP41ikkLsqHd37IdS3I=
Subject key identifier: AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 19F0
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:49:10 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 45.96.0.0/12
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Jan 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6640 (0x19f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Validity
Not Before: Jan 1 00:49:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:9c:f6:17:fa:ab:f4:61:ac:e2:d1:81:64:
61:00:1c:8f:e9:32:9f:cf:de:8c:1c:c1:8e:44:8a:
98:0e:be:d6:fb:ff:b1:94:b3:c5:c4:33:37:ed:8a:
b9:a4:21:60:94:2d:22:d7:28:6e:d5:de:90:12:f8:
ea:bf:fc:8e:77:d1:b1:1e:87:4d:23:62:80:54:6c:
e1:8e:6f:08:6f:67:9b:c9:d2:1d:54:60:4f:ff:a2:
e4:31:45:bc:31:1f:26:e7:e5:05:34:55:e1:8a:85:
ac:66:98:24:5a:0e:ae:ec:e7:61:90:09:6e:24:e9:
fb:14:17:9a:8d:d4:c0:c1:0f:9e:ed:db:d5:91:d9:
13:a1:28:c5:02:89:28:64:cc:65:59:35:2d:03:a4:
de:55:7e:0f:13:7c:fc:28:5d:98:86:06:32:66:9d:
d7:2b:32:33:f9:29:8a:1c:7d:97:38:c5:84:ec:49:
7f:fd:2f:73:5d:a5:2a:61:ed:73:3d:f8:71:c0:fa:
f5:62:cc:fa:79:a5:45:d4:8a:1b:c2:65:e2:06:f6:
5a:4e:27:3d:b6:bc:38:7d:c1:b8:2b:94:7f:c1:eb:
be:f4:c2:0f:be:3d:e9:d7:58:03:8e:89:2b:ca:fc:
b0:97:11:cf:e5:cc:1c:b8:87:a4:be:9f:2f:6e:9d:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
sbgp-ipAddrBlock: critical
IPv4:
45.96.0.0/12
Signature Algorithm: sha256WithRSAEncryption
21:51:1c:1d:9e:5d:65:8c:35:52:1f:d4:c9:c0:0e:07:8d:c5:
ea:61:cb:0c:7c:73:31:de:c9:bd:2e:3f:fd:a6:73:14:ae:6d:
0a:1c:b0:1f:d7:28:60:5a:e3:9b:9f:83:88:22:dc:92:8f:cf:
28:84:09:b4:a2:26:7a:9e:a2:79:0c:ec:91:aa:d9:bc:c2:75:
a3:90:85:67:e3:a8:1f:f7:2e:4c:10:bf:d7:60:fd:c8:c1:d5:
e3:52:b8:52:bd:73:bd:5e:d5:f2:91:a4:47:cf:d5:9e:8e:dd:
08:a4:29:36:77:b8:c1:cb:6e:8d:46:fa:51:e4:5b:73:5b:8f:
7c:43:69:e9:dc:c9:df:38:c6:49:00:3a:3b:0c:74:ba:30:a6:
60:a6:e4:17:ee:11:51:f4:64:2c:1a:3e:21:9a:36:7c:ab:1e:
b9:ec:d7:db:1b:61:0a:84:a2:5b:c1:9c:24:b1:bb:8d:b4:a9:
cd:91:1c:30:e4:0c:b5:e4:b9:26:37:a9:bd:a2:63:9c:c1:75:
1b:20:ca:ce:d5:aa:17:7d:37:b5:e4:e1:f0:76:a4:37:76:54:
b1:2c:49:0c:40:c5:fb:13:52:06:6b:e0:fb:a8:6a:57:ab:b9:
80:b4:3d:7d:2d:40:11:37:72:9f:aa:91:b2:27:23:b2:c6:e9:
66:8f:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:26:03 2026 by rpki-client