This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer File: rSMXDJgzsl2HE6A3DEhgcko8h-o.cer (raw, json) Hash identifier: mmNWwF21YxhToma7T1EsEhXKKILTYwl8O7sIW3LJ+Ls= Subject key identifier: AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1956 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:29:22 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 165.0.0.0/16 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6486 (0x1956) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:29:22 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362B8A8AR, serialNumber=AD23170C9833B25D8713A0370C4860724A3C87EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:54:42:4f:0f:b2:e3:1a:bf:86:db:f1:3e: 4d:1d:e6:69:59:e9:f4:1c:e3:89:c6:88:17:b8:ba: a8:5f:9f:49:47:e4:5d:43:8b:1e:c0:9b:2b:6d:51: f5:f8:46:3c:79:68:30:54:fd:0f:bc:74:b3:eb:01: bf:78:64:1c:9e:f7:69:03:f7:7d:51:af:95:bf:02: de:9b:f5:95:48:bc:c1:50:df:a8:1f:5d:4c:48:c1: 78:b5:21:cd:8e:95:c7:44:f0:19:ce:8a:93:7b:44: 21:3d:2f:4f:20:2c:13:f0:65:83:49:a4:bf:16:30: 86:3a:43:1e:03:1c:4a:3d:85:d6:41:42:cb:bf:c3: 0e:a5:0d:49:1d:a3:2b:4d:76:f9:c7:f1:d1:d4:f5: e2:a4:2a:fe:86:d8:aa:66:86:51:91:91:05:71:10: 10:4f:67:01:51:ce:b6:6d:96:32:cd:19:3f:46:30: 7e:00:52:7d:f3:8a:34:82:f8:d6:f5:c6:c6:2d:04: 79:4a:67:bd:7c:e8:58:5b:bd:ee:18:00:4d:09:9d: 35:76:46:f6:aa:b4:e3:1d:1b:6c:f2:df:ec:c9:20: 23:2f:da:5b:16:fe:89:bb:7e:4a:75:92:80:76:67: f3:3f:fb:98:d7:a9:ec:85:f1:53:9b:b1:96:9f:ea: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft sbgp-ipAddrBlock: critical IPv4: 165.0.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9a:a8:dd:d3:0c:fa:c7:a0:d2:bc:53:f2:d4:a8:41:a8:31:90: 8c:23:cf:02:58:23:69:b8:1d:5f:6c:e4:10:a2:ba:48:c4:0c: 6f:17:14:6f:79:6c:e5:29:a1:88:d1:3e:3d:49:95:d8:82:28: 42:a3:73:79:91:3a:09:f9:5c:be:b1:73:92:d3:6c:b7:ec:54: cb:d7:9d:1a:40:6a:e0:95:c5:3c:6a:c6:20:d5:b4:c2:ab:69: 43:fc:16:2a:e8:ea:37:53:d9:87:2b:ce:12:61:00:e4:b8:d0: f9:33:c7:b2:1e:1d:ce:43:d0:f9:9c:5d:82:ee:5b:c6:cb:67: b8:5b:89:6d:f9:97:46:4e:60:84:22:5f:8d:04:aa:42:41:13: 2e:99:6e:35:71:94:09:6d:f4:cb:9e:86:e2:92:45:37:e6:94: 4a:59:4f:91:c9:c5:aa:86:5c:dc:f7:dc:56:96:d6:3e:c5:a9: b2:2f:38:4a:e7:83:39:6d:fa:eb:0c:3c:82:84:dc:94:25:e6: 21:00:98:ab:06:75:03:b9:39:76:b7:07:62:46:e2:cf:0e:6d: ce:d4:6d:2b:25:71:6c:9f:e4:87:c9:d8:a6:98:d8:66:04:fc: 1c:65:a7:09:35:5c:fe:5a:dc:ff:c7:ec:d3:2e:09:d9:06:c3: 08:2a:d6:b0 -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgICGVYwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDI5MjJaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjJCOEE4QVIxMTAvBgNVBAUTKEFEMjMxNzBDOTgzM0IyNUQ4 NzEzQTAzNzBDNDg2MDcyNEEzQzg3RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDL01RCTw+y4xq/htvxPk0d5mlZ6fQc44nGiBe4uqhfn0lH5F1Dix7A myttUfX4Rjx5aDBU/Q+8dLPrAb94ZBye92kD931Rr5W/At6b9ZVIvMFQ36gfXUxI wXi1Ic2OlcdE8BnOipN7RCE9L08gLBPwZYNJpL8WMIY6Qx4DHEo9hdZBQsu/ww6l DUkdoytNdvnH8dHU9eKkKv6G2KpmhlGRkQVxEBBPZwFRzrZtljLNGT9GMH4AUn3z ijSC+Nb1xsYtBHlKZ7186Fhbve4YAE0JnTV2RvaqtOMdG2zy3+zJICMv2lsW/om7 fkp1koB2Z/M/+5jXqeyF8VObsZaf6sE7AgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU rSMXDJgzsl2HE6A3DEhgcko8h+owHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjJCOEE4L0M0NDUz OEM4OUMyNTExRUJBOEQ0MjY1NEY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzYyQjhBOC9DNDQ1MzhDODlDMjUxMUVCQThENDI2NTRGOEFFQTIy OC9yU01YREpnenNsMkhFNkEzREVoZ2NrbzhoLW8ubWZ0MB4GCCsGAQUFBwEHAQH/ BA8wDTALBAIAATAFAwMApQAwDQYJKoZIhvcNAQELBQADggEBAJqo3dMM+seg0rxT 8tSoQagxkIwjzwJYI2m4HV9s5BCiukjEDG8XFG95bOUpoYjRPj1JldiCKEKjc3mR Ogn5XL6xc5LTbLfsVMvXnRpAauCVxTxqxiDVtMKraUP8Firo6jdT2YcrzhJhAOS4 0Pkzx7IeHc5D0PmcXYLuW8bLZ7hbiW35l0ZOYIQiX40EqkJBEy6ZbjVxlAlt9Mue huKSRTfmlEpZT5HJxaqGXNz33FaW1j7FqbIvOErngzlt+usMPIKE3JQl5iEAmKsG dQO5OXa3B2JG4s8Obc7UbSslcWyf5IfJ2KaY2GYE/Bxlpwk1XP5a3P/H7NMuCdkG wwgq1rA= -----END CERTIFICATE-----Generated at Sun Jan 25 21:21:54 2026 by rpki-client