This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
File: xLvN753H5o-RhMgMCHGMIG7d9ws.cer (raw, json)
Hash identifier: Ub7WdoHdM0PdU2hUEQTQzQtDJOCxxf18w7BgKufgJRo=
Subject key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 196E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:32:18 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 129.0.0.0/16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Jan 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6510 (0x196e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Validity
Not Before: Jan 1 00:32:18 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:93:62:7e:f6:8e:79:29:a5:f1:9a:38:fa:
34:4d:8d:e0:a2:33:60:20:b7:6a:92:6e:45:ac:b5:
43:27:be:1f:77:cd:22:e3:8c:95:b7:b6:ac:ba:e9:
ea:57:d6:5a:d6:c7:39:cd:6f:7c:42:c6:d6:0d:51:
67:fd:f9:2d:76:f6:de:4b:b3:08:2c:ce:24:8b:c5:
94:93:2e:1a:41:5a:35:36:88:9d:90:fe:68:59:77:
9a:d4:f0:90:1f:d3:1c:e9:80:2d:00:05:d3:21:a6:
75:48:aa:6f:86:30:7f:cf:46:27:29:16:00:d8:4d:
eb:85:51:54:f4:d5:c0:2a:a3:f3:12:cf:01:72:d0:
af:85:42:7a:46:cd:1a:de:59:2f:14:c4:d2:f4:c4:
6d:52:aa:38:d9:db:02:4a:e7:f7:4e:81:c5:44:69:
f9:69:b5:2b:c1:2b:05:35:c2:9a:8f:85:a0:4d:a9:
0d:26:bc:bf:15:d4:99:87:62:f9:44:c0:ed:1d:89:
07:ac:ba:50:e0:2b:25:53:a7:7d:6a:eb:ed:a2:04:
7e:55:9c:fa:5d:aa:fd:66:52:20:73:d7:d8:1e:0f:
b5:c6:68:0c:a7:68:8c:94:4c:b1:3c:64:2d:43:18:
a6:45:e9:8c:d9:3e:e7:01:74:a5:44:73:b0:49:e2:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
sbgp-ipAddrBlock: critical
IPv4:
129.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:cf:7b:0c:c1:08:d8:83:19:16:ac:19:85:5a:22:ee:3a:e5:
d5:91:f5:4e:e0:b5:0e:4c:ed:47:b0:7c:d9:30:dc:ba:37:1a:
7d:5f:f8:24:0c:cb:ae:41:23:c7:0a:3a:9c:a4:18:d2:4d:05:
14:ed:29:56:92:02:a8:34:53:d3:61:df:55:9f:5c:d8:04:75:
11:28:d2:ad:c0:61:2d:4d:a0:2a:cd:c0:3d:f6:65:49:7c:36:
92:b0:40:0f:8e:a1:fe:2e:b9:68:91:67:7a:5f:40:31:3f:2e:
7d:83:56:3f:0d:01:c9:bd:1d:22:d0:c4:7d:d5:bb:65:34:5c:
66:b9:5d:d6:14:78:3c:01:87:7a:c5:17:b5:97:3e:df:b0:19:
42:3b:89:d8:04:f6:ac:cd:ab:92:5f:e5:0a:d8:cf:9e:75:70:
74:65:52:c9:c2:4f:41:c9:f4:de:49:8f:70:8c:a2:22:98:26:
f9:bb:1e:8d:61:78:ae:2f:d8:32:f0:1e:95:51:8b:07:7e:53:
08:20:31:9a:d1:df:bd:4b:78:e8:6d:10:91:13:b9:b8:8b:2a:
cb:d0:5c:da:83:49:93:17:4c:cc:e7:f7:da:d4:a9:ff:6c:00:
2a:5f:ff:e1:b8:e3:11:10:ad:4f:a4:86:56:d9:c8:70:1c:fc:
f8:f3:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:17:16 2026 by rpki-client