This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
File:                     DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer (raw, json)
Hash identifier:          +SlVt+vmXsjUESUQZj3IMFfv/IOuP5TmcOvmeEgL0Q4=
Subject key identifier:   0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       19A8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:39:34 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 169.239.132.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6568 (0x19a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:39:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F365E03DAR, serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:f6:18:75:4b:be:80:5a:dd:6e:4f:d2:13:
                    8b:04:7a:0f:35:38:c7:83:74:14:27:3e:1d:74:af:
                    1e:4b:9a:97:3c:3d:9a:29:af:0a:67:02:62:d0:35:
                    3c:c4:5d:96:85:96:20:64:a4:55:05:de:3a:93:bc:
                    a2:e3:bd:e1:48:fc:21:0b:f0:e4:21:0f:80:cd:1b:
                    cd:81:8c:7b:47:14:9a:64:01:0c:b1:13:87:bf:dc:
                    2c:31:a1:69:f8:e8:7e:58:77:9d:57:dd:a3:e7:df:
                    54:34:0e:4c:bf:ee:0b:ce:1e:a2:60:f0:e4:4f:96:
                    b9:d7:b7:c6:db:4c:33:ca:f8:c9:07:88:45:bc:ea:
                    61:15:01:3e:69:79:62:9c:93:f7:eb:85:49:14:49:
                    10:70:bc:17:49:be:61:e5:0d:98:79:47:3e:fb:a4:
                    ac:12:db:16:f7:e8:e8:af:76:81:61:3d:01:6c:1d:
                    4c:0d:fd:7f:44:91:01:09:07:24:d9:7c:05:b7:15:
                    f3:3c:fa:45:74:ea:ef:40:d0:bf:37:75:61:da:26:
                    ec:09:e1:f5:14:a0:f3:b0:3e:6b:2e:df:7e:da:f4:
                    be:dd:74:d0:63:9b:96:36:33:c6:66:81:55:ec:ef:
                    bd:b4:f1:d2:a7:9c:d7:bc:55:36:d0:a7:fb:78:96:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:dd:14:3c:f7:c1:62:58:ec:19:9b:f3:54:c1:cd:ca:8f:b9:
         10:7f:23:36:ee:59:fa:4a:e4:a4:8c:24:08:cc:ff:2c:ce:97:
         e3:41:eb:dc:88:a5:d2:fb:fb:3c:c8:0b:de:62:27:42:61:70:
         47:0a:bd:d3:f9:40:f7:de:7f:78:62:29:75:31:53:3a:2a:1b:
         d8:34:ec:48:7e:3a:9c:69:51:0a:e0:cf:30:39:72:88:ef:27:
         48:99:2a:43:42:43:ed:e6:83:89:6d:4b:be:8a:0d:60:4a:db:
         e4:92:6a:10:fb:e6:94:92:95:27:12:94:7e:09:39:e2:73:18:
         09:be:e3:35:5b:27:2b:df:b6:cd:bd:d2:57:4e:4b:61:c7:c5:
         51:3d:c0:c3:18:6e:ed:2b:d9:65:2a:d9:0c:bf:47:f3:2b:2b:
         01:54:e3:a9:02:62:42:46:b5:9f:a9:73:c2:d1:09:81:e2:01:
         82:fb:50:30:d6:be:56:e9:a4:70:4f:e2:70:f5:c7:87:ed:74:
         12:73:dd:89:fb:ba:64:ad:5a:55:00:a2:45:d8:fb:12:5c:48:
         0d:35:6e:f7:81:89:94:d0:66:c9:bb:7f:b1:24:7e:44:71:e9:
         16:97:cc:6a:60:ed:06:18:1d:d0:e7:a5:87:04:4e:23:6a:e6:
         b6:13:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:18:48 2026 by rpki-client