This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
File:                     v_ENc6qBONzjZ0KnZvllI4WeSHw.cer (raw, json)
Hash identifier:          oHzcn/eQa9lFdu0Oj6xjjeYbcJsU0XwhWQIWUOLf6E0=
Subject key identifier:   BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1AA9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:13:29 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.119.96.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6825 (0x1aa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:13:29 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36F144CAR, serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:d6:94:51:25:46:6e:da:2e:4c:7b:11:f4:
                    f1:ac:09:91:ac:6c:0c:97:65:88:e0:95:bc:c8:e6:
                    ed:28:2d:6b:b8:45:50:b6:09:4f:43:5d:ab:24:12:
                    36:38:8c:21:b6:29:ba:52:3f:56:97:ce:ae:af:53:
                    4c:c5:f2:85:10:f6:cc:45:1f:21:ff:7e:2f:46:ad:
                    64:11:e9:dd:0f:25:42:0c:b4:04:ff:22:69:42:08:
                    e4:a7:b0:90:f5:0e:f0:84:ae:92:ee:d0:21:5f:a7:
                    0a:8b:75:f0:32:3e:ae:79:b8:17:b0:73:68:5f:64:
                    c9:f1:a9:ba:3c:5d:e2:f5:31:ad:4f:29:d7:0a:fd:
                    19:90:f6:da:81:51:50:68:ae:f7:da:c5:ce:1f:95:
                    0e:07:13:64:9b:51:6f:72:55:6c:ef:81:a4:95:49:
                    b2:b7:c7:90:35:65:5c:20:51:ee:c3:a8:63:20:fc:
                    7e:bf:ee:d6:57:70:74:7c:73:3e:60:88:5a:34:aa:
                    10:65:0e:30:1d:5e:07:76:67:d6:83:fe:62:ed:f1:
                    8c:2c:98:f9:71:44:ef:7f:e2:4e:40:d5:19:8b:22:
                    f5:d3:29:2b:b9:55:55:60:56:77:2c:da:3e:b9:ad:
                    27:98:2f:d3:2a:f2:c6:11:2b:b5:58:43:a9:39:ff:
                    0d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:59:d6:2c:c3:75:6d:58:73:59:be:06:ab:0c:8c:13:c9:8e:
         e8:1a:24:e4:5a:28:05:00:78:36:47:71:96:c6:63:71:3f:00:
         a7:cc:65:69:bb:7f:0f:f0:aa:a7:cb:16:da:0e:e3:10:95:d6:
         3f:cb:94:2c:cb:dd:2d:6f:32:f7:59:a7:19:e7:a6:f9:5c:cf:
         29:1f:f8:38:18:a1:2d:09:18:32:a4:05:ab:16:0b:ed:e5:17:
         b1:64:22:44:2e:26:74:ea:e2:17:2a:13:9a:43:21:04:3d:61:
         1e:84:28:c5:1a:a2:af:3e:3f:4b:3f:25:07:be:2e:4b:03:22:
         c7:a9:36:59:a3:d9:d9:f3:88:d6:2c:e0:98:1d:4c:59:3d:3f:
         37:df:11:86:2e:a7:96:f5:b9:d1:95:f0:d0:79:22:7e:76:a7:
         5b:66:3e:69:ff:22:17:b3:69:60:52:ec:29:06:0d:b8:5d:78:
         25:5a:ed:25:9a:19:1a:81:48:49:6e:7b:f4:7b:67:0d:82:54:
         da:2d:4b:e6:a1:96:70:9d:8e:5d:79:cd:5b:5e:d7:d0:5a:03:
         b0:5b:37:fb:35:39:48:35:01:c3:34:33:11:b8:f5:d0:cb:d1:
         73:b8:fc:9b:d9:b5:6a:e2:7e:4d:13:49:04:8e:3a:0a:1f:de:
         2b:86:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:30:34 2026 by rpki-client