This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer File: yD3GjOK-QyU6qlUariL5Wh8drSs.cer (raw, json) Hash identifier: Kps9I3vV3cKlKlCa7VFxmrttbXWcH6+3B/aFZ/MPd5I= Subject key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 19DA Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:46:37 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.255.240.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6618 (0x19da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:46:37 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:e4:6e:2e:f7:c7:55:a3:87:76:ad:1e:be: 1b:92:db:75:60:09:05:30:bd:46:df:01:1e:09:54: 7a:2b:fb:39:af:a3:a1:9b:dd:92:6c:01:0f:9f:2b: 8c:b0:d5:18:6a:44:38:9f:cf:27:c8:7e:9a:28:55: b8:ce:65:f7:a4:2b:58:ed:e8:91:1b:7d:ef:8f:ff: e8:56:16:5d:04:9f:df:94:dc:5b:66:55:50:64:54: c1:78:86:59:3e:98:e0:f3:43:12:5f:8a:92:61:81: 2c:87:46:7a:00:15:10:03:09:bb:3c:c4:fe:06:62: a5:6d:93:84:5e:01:27:83:cc:d7:a1:5c:62:b5:c1: 78:d8:b7:bb:ed:40:25:3e:26:c7:8d:9b:94:f4:4a: 04:3d:cd:12:fc:17:86:e9:d8:96:ae:21:ca:32:1d: b7:38:eb:2a:d2:dd:49:8d:89:77:d5:14:8e:0a:ac: 5c:0f:10:17:8a:7f:3b:6b:09:54:b6:59:03:92:11: 5d:be:ef:f2:fe:05:80:c1:3f:3e:ac:13:68:6d:6c: 3a:4e:af:23:1b:c1:88:2b:6d:d9:c6:36:96:18:e6: c9:48:96:79:a5:c0:4d:7d:be:ef:ef:93:3d:41:f7: 92:0e:68:c9:98:55:c4:4e:4e:99:86:52:df:7f:6f: 65:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft sbgp-ipAddrBlock: critical IPv4: 169.255.240.0/22 Signature Algorithm: sha256WithRSAEncryption 10:59:11:7c:e7:d1:a9:f6:52:ee:79:6f:d8:04:28:54:7c:fc: 06:81:4f:56:43:bd:85:3a:ae:fd:fd:e5:f8:7a:f4:69:2b:74: fe:31:04:a0:10:83:00:b0:2b:4c:cf:82:8c:6d:51:33:ff:b2: 08:52:09:ac:05:91:b0:05:e3:09:fe:51:92:da:98:ca:b6:f5: 0f:cc:8d:7f:e9:e8:7f:96:37:d9:01:8d:d4:77:6f:4d:5e:08: 66:dd:b9:89:b5:f7:07:48:58:d2:0e:af:b0:e0:d4:86:de:56: 89:d8:e8:b6:b2:68:73:44:91:c7:ae:b6:d8:b9:b4:e6:aa:6f: f3:d8:78:41:94:f4:46:a9:2d:7a:13:f9:67:8d:5e:54:25:c3: 01:a1:ce:b0:52:2e:f5:9b:95:74:c1:d3:74:1a:50:60:cd:ba: d1:dd:af:5d:69:5f:bc:0e:56:6e:ac:a4:9e:36:0f:aa:58:2e: 50:4b:4a:47:7c:2b:d6:f7:8e:c1:73:fb:93:4c:83:28:69:5c: c0:df:21:47:dc:8d:89:75:e9:6c:23:0a:73:ee:a4:ee:e3:c4: 9e:32:41:e0:2f:37:4a:07:93:8a:b4:6b:6c:d5:23:79:bf:3c: 6e:e3:7c:2c:6f:c1:b8:9f:f3:eb:dc:64:41:77:f0:9f:e3:80: 5b:d2:ca:da -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGdowDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDQ2MzdaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjcxREJEQVIxMTAvBgNVBAUTKEM4M0RDNjhDRTJCRTQzMjUz QUFBNTUxQUFFMjJGOTVBMUYxREFEMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDcDORuLvfHVaOHdq0evhuS23VgCQUwvUbfAR4JVHor+zmvo6Gb3ZJs AQ+fK4yw1RhqRDifzyfIfpooVbjOZfekK1jt6JEbfe+P/+hWFl0En9+U3FtmVVBk VMF4hlk+mODzQxJfipJhgSyHRnoAFRADCbs8xP4GYqVtk4ReASeDzNehXGK1wXjY t7vtQCU+JseNm5T0SgQ9zRL8F4bp2JauIcoyHbc46yrS3UmNiXfVFI4KrFwPEBeK fztrCVS2WQOSEV2+7/L+BYDBPz6sE2htbDpOryMbwYgrbdnGNpYY5slIlnmlwE19 vu/vkz1B95IOaMmYVcROTpmGUt9/b2X/AgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU yD3GjOK+QyU6qlUariL5Wh8drSswHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjcxREJELzNFRTEw MkRFMTI0NDExRUQ5RjYyNjhCNEYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY3MURCRC8zRUUxMDJERTEyNDQxMUVEOUY2MjY4QjRGMTIyMjQ2 OC95RDNHak9LLVF5VTZxbFVhcmlMNVdoOGRyU3MubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqf/wMA0GCSqGSIb3DQEBCwUAA4IBAQAQWRF859Gp9lLu eW/YBChUfPwGgU9WQ72FOq79/eX4evRpK3T+MQSgEIMAsCtMz4KMbVEz/7IIUgms BZGwBeMJ/lGS2pjKtvUPzI1/6eh/ljfZAY3Ud29NXghm3bmJtfcHSFjSDq+w4NSG 3laJ2Oi2smhzRJHHrrbYubTmqm/z2HhBlPRGqS16E/lnjV5UJcMBoc6wUi71m5V0 wdN0GlBgzbrR3a9daV+8DlZurKSeNg+qWC5QS0pHfCvW947Bc/uTTIMoaVzA3yFH 3I2JdelsIwpz7qTu48SeMkHgLzdKB5OKtGts1SN5vzxu43wsb8G4n/Pr3GRBd/Cf 44Bb0sra -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:42 2026 by rpki-client