This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
File:                     LjUlNVWULww8pjeATUbZWgKk-ek.cer (raw, json)
Hash identifier:          jmxsQSh1NwSXlTmF6PFxiJOkQiroScrhBOGHkvIBQLY=
Subject key identifier:   2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       194E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:28:28 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 165.233.0.0/16
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6478 (0x194e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:28:28 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3627BD6AR, serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:3e:c0:27:f2:a1:ea:25:bb:3e:fa:fd:d6:
                    66:05:b6:41:c2:c7:a3:64:f0:97:e3:90:1b:02:94:
                    81:a9:78:3b:d8:b7:a0:79:2a:92:8e:43:4b:4d:55:
                    13:6c:bb:23:c4:de:ff:55:b6:63:73:c5:7b:bf:f0:
                    ff:e7:39:24:55:8f:e3:a5:19:a6:cc:c0:c7:e7:5a:
                    1a:da:97:ff:b5:0f:36:e0:2a:f8:3e:a9:10:aa:2a:
                    30:97:3e:e5:0e:38:8d:f9:d2:fa:a9:84:31:7d:da:
                    72:12:0e:69:ce:f8:48:fd:fe:2f:75:4b:57:6c:11:
                    2c:b8:4e:17:43:f1:53:74:5c:05:c3:f3:2f:f3:66:
                    61:91:24:ca:94:6b:21:f2:1d:d9:c6:5d:42:5e:c6:
                    f6:e3:ca:83:0d:e4:a0:e0:0f:26:9e:7c:0d:7c:87:
                    3a:52:f7:4d:a1:29:06:da:32:9f:8c:c2:e9:6c:0c:
                    d9:73:96:b7:26:b3:7e:2f:47:ec:f6:b5:bf:18:20:
                    82:ac:8e:e8:b4:e5:ab:00:42:b8:03:db:cc:e7:c7:
                    5a:76:44:02:42:84:1e:29:be:23:e5:57:0e:cd:11:
                    f2:d5:b8:4c:0d:3b:62:31:4a:f4:c3:1d:3a:15:94:
                    67:df:87:f6:7b:39:6a:04:92:cd:f2:b6:a3:6f:ff:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.233.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:7d:bc:7e:a0:2d:21:b3:04:ff:6b:91:b1:d4:d7:61:88:
         16:27:8c:38:52:2d:67:b2:06:25:d3:23:9f:be:4b:d1:46:d8:
         63:31:3e:4b:e9:96:10:65:25:0d:ab:e7:5c:03:35:5f:b8:a4:
         30:2d:85:1f:7b:72:41:6a:a9:98:f9:43:b2:9e:9d:c4:2b:07:
         bb:02:85:65:95:90:75:fc:ad:b2:38:d0:5c:23:c7:c5:30:f6:
         41:16:07:be:86:f1:21:68:48:9c:3c:e7:d9:2e:93:2e:90:38:
         fe:9c:ba:5e:c7:a7:29:59:d1:81:30:e9:9c:6e:9d:29:a5:59:
         ce:41:6a:ec:58:ac:e3:b5:3f:13:ec:ce:bb:81:47:09:91:06:
         40:0a:04:e7:be:5d:49:4a:8d:7b:7f:b3:4e:eb:88:b3:f1:07:
         68:e1:ac:cc:ea:96:5a:e5:89:b6:dd:09:a6:45:d3:aa:f9:fe:
         32:24:fc:e6:fd:e8:27:70:b5:25:5d:8a:00:03:32:d8:d2:6d:
         82:db:90:0a:80:6e:79:0a:15:14:fc:01:fa:1a:86:9e:1d:78:
         25:df:f8:46:8e:b5:c7:3e:17:61:93:78:07:89:3a:df:65:98:
         02:90:ec:bf:c8:8c:df:2f:cf:71:32:99:ad:f6:de:04:be:13:
         0a:2f:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:18:47 2026 by rpki-client