This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer File: DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer (raw, json) Hash identifier: Vlnr4tGZaoYLUytGLfeHulNePkVV/sUuMXNCdnHARYw= Subject key identifier: 0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 198C Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:35:58 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.255.20.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6540 (0x198c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:35:58 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F364C81DAR, serialNumber=0D27394E9CDE92155E4599D68410992D708BF244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:94:67:7c:9d:cf:0a:be:dc:c3:8e:d6:24: 55:cc:87:44:df:aa:eb:f5:70:f3:eb:48:93:fb:f1: ac:e8:80:a1:ef:0d:de:e1:fd:3b:fd:d2:67:c1:b0: 12:d0:fa:b6:b4:d9:56:32:f7:0b:ab:0e:59:f8:f2: 9b:d9:4f:8d:44:43:d5:d5:12:64:00:e1:2c:05:72: df:b9:41:eb:65:c8:c7:21:32:8b:95:1e:7f:86:e5: ef:5b:1b:3c:de:8f:39:9b:79:04:18:56:02:3a:79: bd:24:84:ad:73:fd:de:3f:18:df:f1:b0:fd:3b:71: 7d:53:3b:b8:0a:85:88:e6:db:2f:cf:37:8b:96:9d: 95:ec:41:bd:30:c2:df:db:d9:f2:20:a4:6a:6d:78: fe:64:cc:74:d2:03:09:89:bf:4a:50:4d:a9:ad:64: 34:14:75:7a:d7:3f:af:66:8a:14:aa:b7:85:fb:33: e2:08:ca:0f:af:56:92:d2:d1:08:c0:cc:2a:51:d6: eb:f9:1a:78:ae:f7:20:f1:21:ef:d1:db:4c:7e:da: da:08:03:86:77:46:de:fb:1a:e4:99:5b:76:1f:4c: 5a:eb:3f:bf:bc:35:ea:d1:77:30:ad:a9:d2:ea:2e: ed:66:7c:a8:36:a4:ac:91:68:cc:41:6f:21:5b:36: d0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft sbgp-ipAddrBlock: critical IPv4: 169.255.20.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:5b:4a:53:d2:8e:77:98:90:2f:f7:f4:86:fc:b4:15:11:af: dc:e6:1b:90:3d:6a:a4:8e:7e:63:1a:49:a3:b8:60:3f:15:5b: 0f:13:9d:a0:60:4d:a4:e7:8a:dd:b7:23:1a:7f:cc:3e:8d:c0: 38:3d:94:54:fd:43:17:26:16:95:28:65:11:6e:f3:b9:a8:a7: 1e:69:ad:5a:f1:fa:4a:31:02:05:75:e3:b3:95:13:bb:ca:bc: b9:37:2f:b8:01:2e:86:0d:fb:9a:78:c4:e0:a4:52:b2:15:4d: 9f:e6:70:77:71:8b:cd:3c:28:77:77:67:55:b7:2b:96:7d:a3: d2:8c:b6:83:a0:69:f8:02:ec:86:4e:1b:25:26:6a:f6:a8:27: 41:4b:f0:f7:75:7a:28:f2:5a:45:1a:87:31:f0:c6:f0:3d:d1: e4:43:9d:e6:d3:b3:49:70:35:53:60:2e:48:82:61:d7:68:d3: 27:53:1c:25:71:8c:e4:2d:12:b2:d5:80:f9:8f:21:49:6f:83: f4:7b:53:96:79:e2:04:db:75:16:ef:d2:2a:67:2e:ef:9c:a0: ce:e3:73:1f:de:c3:b0:2d:58:39:28:72:fb:78:34:53:70:1b: a5:61:c2:c8:6a:09:83:cb:5a:d3:07:2b:80:bc:af:a3:76:8d: c9:78:48:11 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGYwwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDM1NThaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjRDODFEQVIxMTAvBgNVBAUTKDBEMjczOTRFOUNERTkyMTU1 RTQ1OTlENjg0MTA5OTJENzA4QkYyNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDQD5RnfJ3PCr7cw47WJFXMh0Tfquv1cPPrSJP78azogKHvDd7h/Tv9 0mfBsBLQ+ra02VYy9wurDln48pvZT41EQ9XVEmQA4SwFct+5QetlyMchMouVHn+G 5e9bGzzejzmbeQQYVgI6eb0khK1z/d4/GN/xsP07cX1TO7gKhYjm2y/PN4uWnZXs Qb0wwt/b2fIgpGpteP5kzHTSAwmJv0pQTamtZDQUdXrXP69mihSqt4X7M+IIyg+v VpLS0QjAzCpR1uv5Gniu9yDxIe/R20x+2toIA4Z3Rt77GuSZW3YfTFrrP7+8NerR dzCtqdLqLu1mfKg2pKyRaMxBbyFbNtBhAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU DSc5TpzekhVeRZnWhBCZLXCL8kQwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjRDODFELzU3MDY5 RUNDODkwRTExRTk4RTE1RjA2MkY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY0QzgxRC81NzA2OUVDQzg5MEUxMUU5OEUxNUYwNjJGOEFFQTIy OC9EU2M1VHB6ZWtoVmVSWm5XaEJDWkxYQ0w4a1EubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqf8UMA0GCSqGSIb3DQEBCwUAA4IBAQCMW0pT0o53mJAv 9/SG/LQVEa/c5huQPWqkjn5jGkmjuGA/FVsPE52gYE2k54rdtyMaf8w+jcA4PZRU /UMXJhaVKGURbvO5qKceaa1a8fpKMQIFdeOzlRO7yry5Ny+4AS6GDfuaeMTgpFKy FU2f5nB3cYvNPCh3d2dVtyuWfaPSjLaDoGn4AuyGThslJmr2qCdBS/D3dXoo8lpF Gocx8MbwPdHkQ53m07NJcDVTYC5IgmHXaNMnUxwlcYzkLRKy1YD5jyFJb4P0e1OW eeIE23UW79IqZy7vnKDO43Mf3sOwLVg5KHL7eDRTcBulYcLIagmDy1rTByuAvK+j do3JeEgR -----END CERTIFICATE-----Generated at Mon Jan 12 09:12:04 2026 by rpki-client