This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer File: -sDqJCqAq1tZab-mHdXZlLIVbrU.cer (raw, json) Hash identifier: njz7pjyllbDV5SZcMbCVToZ/ahsEQI5T/bw/H+hvSY0= Subject key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 197C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:33:59 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 156.38.4.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6524 (0x197c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:33:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F364379DAR, serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:54:6d:17:f2:fc:60:c4:c2:cd:a7:cd:56: 52:dc:e8:31:0a:8b:c0:1f:6d:07:c6:8a:a4:d7:39: e0:b1:d7:ba:3c:89:d5:37:ff:d4:ab:62:79:1a:bf: 5a:71:b1:8e:a0:3c:35:07:18:c7:ee:55:d0:b0:38: 73:77:73:02:a9:2f:0f:19:92:29:b7:3c:37:c1:e1: f5:ad:4e:d3:10:b0:30:24:32:7f:e6:56:5c:1c:36: 49:41:1b:a2:8f:fc:91:74:7d:50:b6:15:68:9f:f3: e6:7a:3c:68:29:50:b5:e3:0f:f7:7c:c6:0b:7a:9b: 7d:05:b7:2c:5a:8a:f5:af:ba:5f:34:c8:51:2a:8c: 2a:41:45:e7:9e:37:09:0c:ff:6c:16:87:1b:da:29: 5b:3a:72:5d:39:ba:b5:41:77:3f:89:82:9a:64:7e: e4:d3:42:11:c1:6c:05:e5:d2:40:2c:c1:97:dc:1b: 03:2f:6e:94:72:61:a3:3f:43:d3:12:77:c9:65:90: d8:37:85:5a:04:c4:70:b0:2e:a6:67:53:68:5a:6e: 1d:9a:04:93:40:aa:36:97:e4:19:42:18:d7:02:26: e0:1a:a6:18:12:0d:4f:e5:a3:18:16:5b:73:06:91: cc:21:2b:c6:5e:cb:ca:ab:cd:b9:a2:46:ee:6f:48: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft sbgp-ipAddrBlock: critical IPv4: 156.38.4.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:ed:7d:ac:75:d1:58:a0:85:51:0b:d9:6a:3c:85:24:55:8d: f9:85:5d:aa:e6:47:07:09:c6:ea:38:b1:dc:6c:42:14:86:38: 21:df:f1:1f:a1:92:0b:22:6e:90:a7:5b:35:8d:b6:27:2e:f6: a1:87:3b:4c:75:b3:34:e2:d1:58:ab:ea:b4:9c:fb:73:ba:5c: 8a:2e:6a:fe:94:7d:09:a8:79:29:84:96:73:23:7e:b0:a8:28: ea:c0:c6:fe:a1:85:ad:94:1d:e7:6c:71:b1:5d:5a:6c:66:f7: 6e:cb:f2:51:5b:65:0a:af:56:01:9a:21:f2:bb:4a:a1:41:8b: ef:8d:a1:e3:b0:85:31:d3:50:ce:e4:3a:35:2b:10:4a:f5:4c: 7d:e7:11:6f:17:8a:65:ff:f7:cb:f9:ee:9a:80:9c:4e:2b:ca: 04:b4:5e:38:53:45:cf:70:19:d4:e7:d2:d5:0d:ea:2f:0b:da: b5:6c:39:bb:65:60:aa:fa:1a:be:d4:8a:ad:f4:5c:1d:0a:8b: 66:d3:39:83:c5:fd:df:34:41:41:4e:b4:16:f0:07:a2:e9:bd: a3:39:fb:a8:32:9e:cd:62:11:6e:4e:2a:19:6d:4a:e8:87:97: 37:a3:8d:32:8f:7a:c5:c0:9d:3f:e6:ac:9f:56:a5:d0:93:20: ff:7d:16:10 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGXwwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDMzNTlaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjQzNzlEQVIxMTAvBgNVBAUTKEZBQzBFQTI0MkE4MEFCNUI1 OTY5QkZBNjFERDVEOTk0QjIxNTZFQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDT6VRtF/L8YMTCzafNVlLc6DEKi8AfbQfGiqTXOeCx17o8idU3/9Sr Ynkav1pxsY6gPDUHGMfuVdCwOHN3cwKpLw8Zkim3PDfB4fWtTtMQsDAkMn/mVlwc NklBG6KP/JF0fVC2FWif8+Z6PGgpULXjD/d8xgt6m30FtyxaivWvul80yFEqjCpB ReeeNwkM/2wWhxvaKVs6cl05urVBdz+JgppkfuTTQhHBbAXl0kAswZfcGwMvbpRy YaM/Q9MSd8llkNg3hVoExHCwLqZnU2habh2aBJNAqjaX5BlCGNcCJuAaphgSDU/l oxgWW3MGkcwhK8Zey8qrzbmiRu5vSCCvAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU +sDqJCqAq1tZab+mHdXZlLIVbrUwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjQzNzlELzUwMkE5 N0Q0QkYzRDExRURCOERCNDBGMUYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY0Mzc5RC81MDJBOTdENEJGM0QxMUVEQjhEQjQwRjFGMTIyMjQ2 OC8tc0RxSkNxQXExdFphYi1tSGRYWmxMSVZiclUubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCnCYEMA0GCSqGSIb3DQEBCwUAA4IBAQAs7X2sddFYoIVR C9lqPIUkVY35hV2q5kcHCcbqOLHcbEIUhjgh3/EfoZILIm6Qp1s1jbYnLvahhztM dbM04tFYq+q0nPtzulyKLmr+lH0JqHkphJZzI36wqCjqwMb+oYWtlB3nbHGxXVps Zvduy/JRW2UKr1YBmiHyu0qhQYvvjaHjsIUx01DO5Do1KxBK9Ux95xFvF4pl//fL +e6agJxOK8oEtF44U0XPcBnU59LVDeovC9q1bDm7ZWCq+hq+1Iqt9FwdCotm0zmD xf3fNEFBTrQW8Aei6b2jOfuoMp7NYhFuTioZbUroh5c3o40yj3rFwJ0/5qyfVqXQ kyD/fRYQ -----END CERTIFICATE-----Generated at Mon Jan 12 17:19:14 2026 by rpki-client