This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer File: DjU23jQviMVeSslMS36nCgwn6aE.cer (raw, json) Hash identifier: bbDx6KcDfFMkCHSNytLgYDkpWVl/3KssHAA0wVa7wYg= Subject key identifier: 0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A36 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:59:49 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 129.122.128.0/17 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6710 (0x1a36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:59:49 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A1CEFAR, serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:c3:f2:5c:45:60:0f:bb:06:0a:e0:a8:e4: c5:fd:9c:30:b6:6f:42:f0:8c:7b:4c:2b:3b:9f:d0: 08:f6:e6:9c:66:71:f9:c2:da:a4:bb:98:8a:df:65: 40:df:03:13:74:2b:10:e1:48:69:5c:b3:38:52:50: d8:98:a6:34:47:d3:e6:ba:ef:58:1c:b6:89:1c:cd: 1a:72:f9:77:f9:d2:e9:97:56:ec:14:e4:06:64:1c: ee:5d:c3:ad:b5:ff:fb:87:38:a9:b9:88:79:56:e6: e9:5b:05:59:a4:fd:ad:c8:89:0a:30:9c:b8:ef:9c: 36:ab:9f:50:86:a7:e1:fb:95:ac:66:78:59:18:ca: b4:4c:5e:a0:95:74:91:b3:8f:0c:38:d0:2b:fb:2a: f8:e6:71:1f:c0:6d:38:05:35:c0:e6:8a:d5:33:fa: d2:b2:2a:16:4f:44:78:fa:ac:41:5f:75:bc:2c:3b: 31:a4:e4:2f:c6:c0:d9:f0:ce:b1:cf:4b:45:2a:de: 4f:8f:a8:af:c3:22:dd:87:ca:8e:c1:ce:dc:bc:44: ac:8f:0b:e6:5f:b5:92:29:c1:9a:32:46:ad:60:0f: a8:c4:00:c1:c0:de:ad:66:fe:f0:16:33:e2:07:a7: fe:bf:60:f3:d5:ef:e0:56:03:d1:d0:de:b5:b9:32: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft sbgp-ipAddrBlock: critical IPv4: 129.122.128.0/17 Signature Algorithm: sha256WithRSAEncryption 85:e2:ce:d3:a6:c4:a8:96:ea:b7:b6:79:21:a9:73:32:c5:6f: b0:01:eb:7e:f6:c3:22:f4:f3:81:85:56:97:ad:12:69:c6:f1: db:e1:e2:49:e0:78:32:77:b9:f5:82:71:18:67:63:f7:f3:16: cc:4a:df:f2:1d:46:b4:04:87:9d:7e:80:af:4e:b5:cd:07:89: cd:0c:ee:b6:74:b0:aa:91:98:2f:28:ec:70:3a:b8:7c:6d:9b: 3a:db:df:fe:c4:e2:c5:34:5f:57:db:5d:75:c2:b5:c4:06:4f: 06:27:53:20:40:88:be:30:a8:44:e0:87:ad:f2:72:71:f1:16: 2a:49:b5:f9:5a:4b:f1:a6:b0:64:34:cb:46:07:40:d8:06:08: 42:da:6c:c3:f1:ee:9f:27:2c:19:d7:83:fb:ec:13:2e:66:bd: 5c:fd:db:4c:96:c2:0d:93:33:c7:8a:2b:d2:7d:0a:1d:3a:29: 4e:3f:62:71:6e:ff:1f:e8:37:1a:1f:f9:f4:56:d6:65:f9:6d: 3d:0a:b7:44:19:43:15:b1:6c:8e:67:b1:1e:18:99:82:3b:5b: 73:12:60:f2:50:eb:7d:c4:18:4e:9b:c9:42:81:25:bc:05:03: 44:91:4e:1e:f7:cf:c7:27:94:16:4e:b0:ae:d9:47:47:f9:87: 29:72:62:4e -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGjYwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDU5NDlaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkExQ0VGQVIxMTAvBgNVBAUTKDBFMzUzNkRFMzQyRjg4QzU1 RTRBQzk0QzRCN0VBNzBBMEMyN0U5QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC1acPyXEVgD7sGCuCo5MX9nDC2b0LwjHtMKzuf0Aj25pxmcfnC2qS7 mIrfZUDfAxN0KxDhSGlcszhSUNiYpjRH0+a671gctokczRpy+Xf50umXVuwU5AZk HO5dw621//uHOKm5iHlW5ulbBVmk/a3IiQownLjvnDarn1CGp+H7laxmeFkYyrRM XqCVdJGzjww40Cv7KvjmcR/AbTgFNcDmitUz+tKyKhZPRHj6rEFfdbwsOzGk5C/G wNnwzrHPS0Uq3k+PqK/DIt2Hyo7Bzty8RKyPC+ZftZIpwZoyRq1gD6jEAMHA3q1m /vAWM+IHp/6/YPPV7+BWA9HQ3rW5MhsBAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU DjU23jQviMVeSslMS36nCgwn6aEwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkExQ0VGLzczRDQy OEZBRjEzODExRUJBNThDQkYxN0Q4QTAxNENFLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZBMUNFRi83M0Q0MjhGQUYxMzgxMUVCQTU4Q0JGMTdEOEEwMTRD RS9EalUyM2pRdmlNVmVTc2xNUzM2bkNnd242YUUubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQHgXqAMA0GCSqGSIb3DQEBCwUAA4IBAQCF4s7TpsSoluq3 tnkhqXMyxW+wAet+9sMi9POBhVaXrRJpxvHb4eJJ4Hgyd7n1gnEYZ2P38xbMSt/y HUa0BIedfoCvTrXNB4nNDO62dLCqkZgvKOxwOrh8bZs629/+xOLFNF9X2111wrXE Bk8GJ1MgQIi+MKhE4Iet8nJx8RYqSbX5WkvxprBkNMtGB0DYBghC2mzD8e6fJywZ 14P77BMuZr1c/dtMlsINkzPHiivSfQodOilOP2Jxbv8f6DcaH/n0VtZl+W09CrdE GUMVsWyOZ7EeGJmCO1tzEmDyUOt9xBhOm8lCgSW8BQNEkU4e98/HJ5QWTrCu2UdH +YcpcmJO -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:45 2026 by rpki-client