This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
File:                     xLvN753H5o-RhMgMCHGMIG7d9ws.cer (raw, json)
Hash identifier:          Ub7WdoHdM0PdU2hUEQTQzQtDJOCxxf18w7BgKufgJRo=
Subject key identifier:   C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       196E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:32:18 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 129.0.0.0/16
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6510 (0x196e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:32:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c3:93:62:7e:f6:8e:79:29:a5:f1:9a:38:fa:
                    34:4d:8d:e0:a2:33:60:20:b7:6a:92:6e:45:ac:b5:
                    43:27:be:1f:77:cd:22:e3:8c:95:b7:b6:ac:ba:e9:
                    ea:57:d6:5a:d6:c7:39:cd:6f:7c:42:c6:d6:0d:51:
                    67:fd:f9:2d:76:f6:de:4b:b3:08:2c:ce:24:8b:c5:
                    94:93:2e:1a:41:5a:35:36:88:9d:90:fe:68:59:77:
                    9a:d4:f0:90:1f:d3:1c:e9:80:2d:00:05:d3:21:a6:
                    75:48:aa:6f:86:30:7f:cf:46:27:29:16:00:d8:4d:
                    eb:85:51:54:f4:d5:c0:2a:a3:f3:12:cf:01:72:d0:
                    af:85:42:7a:46:cd:1a:de:59:2f:14:c4:d2:f4:c4:
                    6d:52:aa:38:d9:db:02:4a:e7:f7:4e:81:c5:44:69:
                    f9:69:b5:2b:c1:2b:05:35:c2:9a:8f:85:a0:4d:a9:
                    0d:26:bc:bf:15:d4:99:87:62:f9:44:c0:ed:1d:89:
                    07:ac:ba:50:e0:2b:25:53:a7:7d:6a:eb:ed:a2:04:
                    7e:55:9c:fa:5d:aa:fd:66:52:20:73:d7:d8:1e:0f:
                    b5:c6:68:0c:a7:68:8c:94:4c:b1:3c:64:2d:43:18:
                    a6:45:e9:8c:d9:3e:e7:01:74:a5:44:73:b0:49:e2:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:cf:7b:0c:c1:08:d8:83:19:16:ac:19:85:5a:22:ee:3a:e5:
         d5:91:f5:4e:e0:b5:0e:4c:ed:47:b0:7c:d9:30:dc:ba:37:1a:
         7d:5f:f8:24:0c:cb:ae:41:23:c7:0a:3a:9c:a4:18:d2:4d:05:
         14:ed:29:56:92:02:a8:34:53:d3:61:df:55:9f:5c:d8:04:75:
         11:28:d2:ad:c0:61:2d:4d:a0:2a:cd:c0:3d:f6:65:49:7c:36:
         92:b0:40:0f:8e:a1:fe:2e:b9:68:91:67:7a:5f:40:31:3f:2e:
         7d:83:56:3f:0d:01:c9:bd:1d:22:d0:c4:7d:d5:bb:65:34:5c:
         66:b9:5d:d6:14:78:3c:01:87:7a:c5:17:b5:97:3e:df:b0:19:
         42:3b:89:d8:04:f6:ac:cd:ab:92:5f:e5:0a:d8:cf:9e:75:70:
         74:65:52:c9:c2:4f:41:c9:f4:de:49:8f:70:8c:a2:22:98:26:
         f9:bb:1e:8d:61:78:ae:2f:d8:32:f0:1e:95:51:8b:07:7e:53:
         08:20:31:9a:d1:df:bd:4b:78:e8:6d:10:91:13:b9:b8:8b:2a:
         cb:d0:5c:da:83:49:93:17:4c:cc:e7:f7:da:d4:a9:ff:6c:00:
         2a:5f:ff:e1:b8:e3:11:10:ad:4f:a4:86:56:d9:c8:70:1c:fc:
         f8:f3:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:17:16 2026 by rpki-client