This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer File: 5zU0-ODMucOEExGNd_3qToCP6jE.cer (raw, json) Hash identifier: uIxztaNsxB7dIzQzJOJwU9Qa1d/+gGMDqBqRM4PJs6k= Subject key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1AB1 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:14:25 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 165.231.0.0/16 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6833 (0x1ab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:14:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:1c:30:87:cb:5c:83:b6:70:cf:5f:5b:14: 93:63:0a:a7:5d:48:b0:af:98:9e:85:f3:8c:ba:0d: db:db:8e:26:58:1f:99:41:c2:13:d1:f3:ab:70:f6: 5c:61:f5:53:68:ef:b1:cc:a5:42:22:31:30:fa:7c: 37:d0:94:71:28:3f:b3:25:45:96:b5:33:e0:9e:34: 94:9e:37:bf:39:f1:23:4c:7a:d7:2e:d2:ea:fd:13: 3a:97:26:7a:39:b3:97:06:a5:4e:cb:df:5a:88:36: c8:f5:c4:b9:f1:3d:5e:04:2f:6f:c2:4c:89:da:1d: 6b:80:bb:43:4b:dc:76:68:5d:53:cf:e1:1a:4b:5e: 29:25:19:87:33:11:0b:74:5a:27:6a:86:07:c0:99: 90:e7:7c:4b:c3:45:44:96:4d:54:a8:25:09:04:46: 01:3b:a2:bd:5c:9e:86:67:db:22:20:a4:bc:2d:f4: 08:34:ea:72:ca:9b:8d:2a:11:dc:7a:89:0f:df:96: 93:5e:79:7a:bb:3d:86:49:01:3c:ae:14:75:28:55: 59:d4:34:b9:ae:12:f9:42:9a:fb:ce:78:14:d9:c3: a8:ed:f6:46:bb:87:71:40:d1:5d:c0:b6:60:87:e7: c6:26:7e:4c:7f:88:a3:0f:fa:b2:99:b5:85:d8:67: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft sbgp-ipAddrBlock: critical IPv4: 165.231.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:75:51:3f:62:36:74:f9:4d:a9:82:fe:44:b7:4d:6d:f4:fe: ca:f1:26:b0:1b:a5:43:9a:50:5f:cb:2e:c6:86:b2:08:2b:ef: b8:3d:11:e0:f3:43:dc:1d:14:0d:9a:0e:fe:5b:13:e0:a9:66: f5:85:5d:de:77:1c:a5:4d:80:ac:5a:0d:2e:94:e0:bb:cb:85: 11:15:e7:ee:6a:7f:7b:34:a7:20:90:bb:ad:a1:c3:a2:b0:c0: 91:e0:42:56:21:71:bc:4d:cf:30:27:a0:f5:68:e1:f3:54:a5: aa:1f:fb:f7:40:cf:63:4b:59:8d:3a:be:ee:83:b5:9a:22:0e: 72:5e:1c:ca:6b:85:7d:bb:f7:a4:db:a5:9c:f1:40:f8:89:4c: b1:3f:33:3a:d3:a7:c9:6d:9d:d7:ee:cb:67:55:7c:e8:9c:10: 59:b1:3a:89:be:0d:ca:65:58:cf:c7:d4:fb:20:cc:c4:f4:7f: 27:4a:8e:80:c2:5c:c7:aa:ce:69:7a:40:44:c1:73:60:b2:07: 6f:59:da:6c:bb:e7:72:1a:99:1f:a0:d0:8a:57:2a:47:9a:98: b5:5b:c0:49:51:02:ae:01:e0:05:44:c1:1d:33:c5:a0:a5:4b: ed:3c:5f:3b:25:80:dc:16:33:c1:b5:68:04:ff:ac:a6:65:98: 64:51:9a:40 -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgICGrEwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTE0MjVaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkY2MDM0QVIxMTAvBgNVBAUTKEU3MzUzNEY4RTBDQ0I5QzM4 NDEzMTE4RDc3RkRFQTRFODA4RkVBMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCujhwwh8tcg7Zwz19bFJNjCqddSLCvmJ6F84y6DdvbjiZYH5lBwhPR 86tw9lxh9VNo77HMpUIiMTD6fDfQlHEoP7MlRZa1M+CeNJSeN7858SNMetcu0ur9 EzqXJno5s5cGpU7L31qINsj1xLnxPV4EL2/CTInaHWuAu0NL3HZoXVPP4RpLXikl GYczEQt0WidqhgfAmZDnfEvDRUSWTVSoJQkERgE7or1cnoZn2yIgpLwt9Ag06nLK m40qEdx6iQ/flpNeeXq7PYZJATyuFHUoVVnUNLmuEvlCmvvOeBTZw6jt9ka7h3FA 0V3AtmCH58Ymfkx/iKMP+rKZtYXYZ68bAgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU 5zU0+ODMucOEExGNd/3qToCP6jEwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkY2MDM0L0VBMTc2 NzA0OTBGQzExRUE4QzRGNUI2RUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZGNjAzNC9FQTE3NjcwNDkwRkMxMUVBOEM0RjVCNkVGOEFFQTIy OC81elUwLU9ETXVjT0VFeEdOZF8zcVRvQ1A2akUubWZ0MB4GCCsGAQUFBwEHAQH/ BA8wDTALBAIAATAFAwMApecwDQYJKoZIhvcNAQELBQADggEBAIB1UT9iNnT5TamC /kS3TW30/srxJrAbpUOaUF/LLsaGsggr77g9EeDzQ9wdFA2aDv5bE+CpZvWFXd53 HKVNgKxaDS6U4LvLhREV5+5qf3s0pyCQu62hw6KwwJHgQlYhcbxNzzAnoPVo4fNU paof+/dAz2NLWY06vu6DtZoiDnJeHMprhX2796TbpZzxQPiJTLE/MzrTp8ltndfu y2dVfOicEFmxOom+DcplWM/H1PsgzMT0fydKjoDCXMeqzml6QETBc2CyB29Z2my7 53IamR+g0IpXKkeamLVbwElRAq4B4AVEwR0zxaClS+08XzslgNwWM8G1aAT/rKZl mGRRmkA= -----END CERTIFICATE-----Generated at Mon Jan 12 03:07:46 2026 by rpki-client