This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer File: tIDko6bVxyRdD2BorIVLj3CuxU0.cer (raw, json) Hash identifier: NukvoNxSYg25fTRFALc/p3AneVZLgtq5yG0jQ1wcIb8= Subject key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 193A Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:26:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 45.221.27.0/24 IP: 156.0.204.0/22 IP: 160.20.213.0/24 IP: 160.20.217.0/24 IP: 160.20.221.0/24 IP: 160.20.226.0/23 IP: 160.226.178.0/24 IP: 160.238.11.0/24 IP: 160.238.50.0/24 IP: 160.238.57.0/24 IP: 160.238.101.0/24 IP: 164.160.100.0/22 IP: 169.255.16.0/22 IP: 169.255.84.0/22 IP: 169.255.156.0/22 IP: 192.12.110.0/24 IP: 192.47.36.0/24 IP: 192.51.240.0/24 IP: 192.70.201.0/24 IP: 192.75.236.0/24 IP: 192.91.200.0/24 IP: 192.145.176.0/22 IP: 192.145.230.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6458 (0x193a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:26:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:17:63:d5:cd:77:0d:78:81:28:ed:70:53: d2:af:89:be:9c:c7:76:8d:c0:b3:cc:f7:bb:58:7a: e9:c4:8f:0d:2b:72:d2:f8:6a:6f:40:c3:d2:84:0a: de:9c:8e:08:fa:75:3d:8a:71:f4:80:ed:a1:4d:41: 8c:eb:c5:17:57:86:f8:29:d9:39:d4:73:09:4d:08: 6c:e5:cb:b0:4b:19:05:e5:e8:00:4c:76:ae:b0:c3: 4e:73:d1:e5:20:cb:3c:74:7f:42:62:74:7c:1c:c1: 1f:e8:c1:38:6a:7f:6f:f6:c9:8d:de:b6:fc:48:05: bc:42:cd:92:20:0c:a7:92:34:14:8c:19:73:6d:de: 84:b5:60:83:5f:1b:71:c6:cc:b2:bd:41:91:e7:64: c0:1c:d2:eb:1e:cc:b5:97:ad:92:83:a0:86:98:36: 33:d2:0a:36:da:c5:fa:76:a4:fd:ed:c4:a6:fd:8b: 68:22:b2:45:61:f8:88:bb:53:3e:fe:6f:4a:69:71: 0a:03:98:56:84:6f:11:2b:0b:82:67:00:5d:a4:9f: 02:d2:d3:d8:28:29:15:03:9e:d6:c3:e1:a5:af:91: 3d:14:8e:71:0f:d8:be:1c:4e:86:4b:7d:81:cd:f2: d3:eb:5b:4a:d7:70:94:f6:78:72:91:9f:ca:9f:4b: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft sbgp-ipAddrBlock: critical IPv4: 45.221.27.0/24 156.0.204.0/22 160.20.213.0/24 160.20.217.0/24 160.20.221.0/24 160.20.226.0/23 160.226.178.0/24 160.238.11.0/24 160.238.50.0/24 160.238.57.0/24 160.238.101.0/24 164.160.100.0/22 169.255.16.0/22 169.255.84.0/22 169.255.156.0/22 192.12.110.0/24 192.47.36.0/24 192.51.240.0/24 192.70.201.0/24 192.75.236.0/24 192.91.200.0/24 192.145.176.0/22 192.145.230.0/24 Signature Algorithm: sha256WithRSAEncryption 62:6d:94:f2:f7:72:08:76:dd:3b:36:9e:9b:7d:6b:81:bc:04: fd:61:b9:4b:c2:b1:60:ca:7b:19:aa:ff:5d:e4:e0:47:f0:8b: fb:89:53:1b:9a:3e:fb:76:f8:e0:2d:22:9b:e2:88:dc:f4:78: ea:c7:78:2c:35:2a:03:b9:d9:52:8f:1a:6b:ff:da:81:93:af: d1:8c:5d:a1:6f:1c:45:8e:6f:5c:c2:d5:05:5f:6d:36:0e:3b: 7c:78:fb:19:9a:a8:9c:98:ef:e8:e6:be:55:49:b1:8d:37:c8: 09:48:d4:ee:0b:21:49:be:75:a0:71:6f:d4:70:5c:5f:28:28: f2:a5:c2:aa:46:d8:62:cc:38:6e:0d:ed:6b:1c:bf:07:d2:ee: a5:d9:d4:7c:f2:32:5b:01:47:e2:c3:d7:07:1e:74:41:29:38: b7:ff:54:cc:8c:c4:aa:cd:e8:c7:d1:c9:a2:d3:6a:fc:8a:de: f7:fd:fd:cf:d7:5a:bd:6d:94:49:3a:de:f8:45:09:2c:48:22: c1:55:46:f7:2a:82:eb:b7:9f:99:94:6e:3a:f7:18:15:ee:dc: 2c:1a:94:00:90:7b:b0:b2:72:47:20:94:55:40:de:c3:65:25: 33:90:f4:06:5a:5e:86:90:89:96:fc:cb:b6:4e:46:15:dc:f3: 6a:b1:37:bd -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgICGTowDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDI2MTVaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjE5QzhDQVIxMTAvBgNVBAUTKEI0ODBFNEEzQTZENUM3MjQ1 RDBGNjA2OEFDODU0QjhGNzBBRUM1NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC0TRdj1c13DXiBKO1wU9Kvib6cx3aNwLPM97tYeunEjw0rctL4am9A w9KECt6cjgj6dT2KcfSA7aFNQYzrxRdXhvgp2TnUcwlNCGzly7BLGQXl6ABMdq6w w05z0eUgyzx0f0JidHwcwR/owThqf2/2yY3etvxIBbxCzZIgDKeSNBSMGXNt3oS1 YINfG3HGzLK9QZHnZMAc0usezLWXrZKDoIaYNjPSCjbaxfp2pP3txKb9i2giskVh +Ii7Uz7+b0ppcQoDmFaEbxErC4JnAF2knwLS09goKRUDntbD4aWvkT0UjnEP2L4c ToZLfYHN8tPrW0rXcJT2eHKRn8qfS8DbAgMBAAGjggN6MIIDdjAdBgNVHQ4EFgQU tIDko6bVxyRdD2BorIVLj3CuxU0wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjE5QzhDL0Y1Qjc4 RDhBNUZEQTExRUZCRjVEODVBQjc2MkU5NTFBLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzYxOUM4Qy9GNUI3OEQ4QTVGREExMUVGQkY1RDg1QUI3NjJFOTUx QS90SURrbzZiVnh5UmREMkJvcklWTGozQ3V4VTAubWZ0MIGnBggrBgEFBQcBBwEB /wSBlzCBlDCBkQQCAAEwgYoDBAAt3RsDBAKcAMwDBACgFNUDBACgFNkDBACgFN0D BAGgFOIDBACg4rIDBACg7gsDBACg7jIDBACg7jkDBACg7mUDBAKkoGQDBAKp/xAD BAKp/1QDBAKp/5wDBADADG4DBADALyQDBADAM/ADBADARskDBADAS+wDBADAW8gD BALAkbADBADAkeYwDQYJKoZIhvcNAQELBQADggEBAGJtlPL3cgh23Ts2npt9a4G8 BP1huUvCsWDKexmq/13k4Efwi/uJUxuaPvt2+OAtIpviiNz0eOrHeCw1KgO52VKP Gmv/2oGTr9GMXaFvHEWOb1zC1QVfbTYOO3x4+xmaqJyY7+jmvlVJsY03yAlI1O4L IUm+daBxb9RwXF8oKPKlwqpG2GLMOG4N7WscvwfS7qXZ1HzyMlsBR+LD1wcedEEp OLf/VMyMxKrN6MfRyaLTavyK3vf9/c/XWr1tlEk63vhFCSxIIsFVRvcqguu3n5mU bjr3GBXu3CwalACQe7CyckcglFVA3sNlJTOQ9AZaXoaQiZb8y7ZORhXc82qxN70= -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:27 2026 by rpki-client