This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer File: HWc407_GEdh98N50A9JdoPZOseA.cer (raw, json) Hash identifier: DTG78+5MNX7EQ+5pbnmXFxqGiFKeugSniXmIHnDg3Yg= Subject key identifier: 1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A18 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:56:08 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.119.80.0/21 IP: 169.255.192.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6680 (0x1a18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:56:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3690C51AR, serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:fd:b3:4a:23:ba:81:91:48:6d:25:2d:3f: bf:74:7e:53:bf:ff:f7:48:b9:8f:c5:23:78:f3:72: 4b:81:3a:33:6e:c1:bb:40:d2:fd:e1:ed:fa:0e:81: a9:b7:03:c6:81:3c:37:2b:af:ce:db:ad:ee:d2:ee: c3:0e:94:9f:19:49:e7:6e:9e:2f:b5:ad:18:ad:2a: 9c:3a:1a:59:24:63:ec:75:b4:42:b9:26:38:8c:a5: 28:04:23:75:35:ca:7f:94:0a:bc:9d:0c:16:79:61: b7:e0:4f:2f:45:90:b9:4a:45:f3:68:f2:49:70:ff: de:c5:20:fb:f9:ce:28:5a:12:a6:35:1c:f3:6d:1b: 26:47:fd:73:ae:5f:93:1e:b7:32:ef:54:18:f4:87: bb:89:b8:fd:88:0d:69:77:fe:f4:4c:8d:52:00:30: 69:77:c8:c8:0f:a2:d4:f7:0a:8a:a2:dc:f9:4f:d4: 26:11:ff:cd:69:53:ef:f3:6a:ac:7e:63:be:fc:0b: 19:75:2a:9d:f8:79:a4:9a:4f:38:48:43:12:4f:43: 4b:78:43:73:13:be:38:a8:17:79:f4:8d:52:b5:68: 18:96:39:63:f8:e1:4a:60:96:d3:3c:a1:3b:5a:55: 16:dd:04:7a:2d:a2:aa:f1:e7:c6:2c:96:08:8c:9e: 22:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft sbgp-ipAddrBlock: critical IPv4: 160.119.80.0/21 169.255.192.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:d4:49:92:ec:b9:cc:dc:34:68:6d:4b:57:84:4e:ed:3e:2b: 66:17:84:3a:1a:9e:52:9e:74:11:38:c6:ba:bd:9a:22:5b:e5: cb:5e:67:37:46:d9:6b:36:87:00:9e:8c:5a:f5:1a:88:84:f1: 47:e1:c1:42:2a:87:ae:ce:e1:14:d7:8c:2b:33:62:17:6c:c3: 8b:15:66:0a:a0:d5:dd:7c:35:5e:28:bc:79:24:73:1e:73:c8: 2e:a8:c1:84:86:2f:16:66:5e:f5:c6:24:5b:1b:81:36:e6:14: e3:fb:59:84:bf:3c:cb:91:65:d7:22:76:03:84:9b:5a:27:f9: 61:44:4d:41:ea:2b:00:58:49:01:db:3a:48:a4:94:ce:48:a3: 49:dd:09:b9:6d:80:ec:62:9c:e3:cd:c9:d2:1c:a3:c8:0b:b5: 98:dd:dc:b4:e0:89:04:f3:11:ad:6c:2b:75:f0:6b:4f:d3:d0: 14:56:a6:41:40:c4:e2:f5:88:96:c1:11:dc:12:41:10:05:38: 93:2a:9b:b3:5f:8e:56:15:24:9f:94:9a:25:6b:80:e9:bc:a9: ff:72:70:44:8d:4b:8c:41:15:b4:9a:e5:6e:5f:66:ef:48:eb: 05:16:9c:0b:a2:0d:c7:46:74:7c:5f:1c:72:60:94:bb:73:ff: 44:4b:01:be -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgICGhgwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDU2MDhaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjkwQzUxQVIxMTAvBgNVBAUTKDFENjczOEQzQkZDNjExRDg3 REYwREU3NDAzRDI1REEwRjY0RUIxRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDRfP2zSiO6gZFIbSUtP790flO///dIuY/FI3jzckuBOjNuwbtA0v3h 7foOgam3A8aBPDcrr87bre7S7sMOlJ8ZSeduni+1rRitKpw6GlkkY+x1tEK5JjiM pSgEI3U1yn+UCrydDBZ5YbfgTy9FkLlKRfNo8klw/97FIPv5zihaEqY1HPNtGyZH /XOuX5MetzLvVBj0h7uJuP2IDWl3/vRMjVIAMGl3yMgPotT3Coqi3PlP1CYR/81p U+/zaqx+Y778Cxl1Kp34eaSaTzhIQxJPQ0t4Q3MTvjioF3n0jVK1aBiWOWP44Upg ltM8oTtaVRbdBHotoqrx58YslgiMniJtAgMBAAGjggL3MIIC8zAdBgNVHQ4EFgQU HWc407/GEdh98N50A9JdoPZOseAwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjkwQzUxL0M3NDJG Mzg2QTY3RjExRUZCQTU0NjA4Mjc2MkU5NTFBLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY5MEM1MS9DNzQyRjM4NkE2N0YxMUVGQkE1NDYwODI3NjJFOTUx QS9IV2M0MDdfR0VkaDk4TjUwQTlKZG9QWk9zZUEubWZ0MCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQDoHdQAwQCqf/AMA0GCSqGSIb3DQEBCwUAA4IBAQBv1EmS 7LnM3DRobUtXhE7tPitmF4Q6Gp5SnnQROMa6vZoiW+XLXmc3RtlrNocAnoxa9RqI hPFH4cFCKoeuzuEU14wrM2IXbMOLFWYKoNXdfDVeKLx5JHMec8guqMGEhi8WZl71 xiRbG4E25hTj+1mEvzzLkWXXInYDhJtaJ/lhRE1B6isAWEkB2zpIpJTOSKNJ3Qm5 bYDsYpzjzcnSHKPIC7WY3dy04IkE8xGtbCt18GtP09AUVqZBQMTi9YiWwRHcEkEQ BTiTKpuzX45WFSSflJola4DpvKn/cnBEjUuMQRW0muVuX2bvSOsFFpwLog3HRnR8 XxxyYJS7c/9ESwG+ -----END CERTIFICATE-----Generated at Mon Jan 12 16:39:47 2026 by rpki-client