This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer File: OckZvvVPpaxnw34-dWyhP7I0tT8.cer (raw, json) Hash identifier: BA1suFkV0IUIvPc1gkpkMDmrFy/pz+SfiW39i80UdN4= Subject key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1AB5 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:14:57 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 168.253.0.0/19 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 15 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6837 (0x1ab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:14:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:ed:a4:94:1c:8e:23:85:cb:56:2a:a0:16: 75:34:34:ea:71:d6:4b:ae:e7:4e:5d:be:6b:8c:03: b4:04:c3:fc:4b:8e:35:e3:46:d6:02:81:58:54:8d: da:80:ad:88:ff:d0:53:8b:5d:61:a1:4e:3a:c3:f8: d0:c1:90:01:93:27:a5:0a:4d:2d:b2:06:64:17:82: a4:bc:52:8a:4b:39:a3:08:e7:9b:67:0e:6e:7f:8d: 1b:56:d1:3f:89:77:63:a3:89:3c:bc:4f:5d:80:f7: ea:0d:e7:88:55:33:c4:f4:38:08:8a:be:12:2e:f9: 88:b6:9d:c5:f7:d1:57:18:de:ac:30:e2:3a:1f:c7: 6e:8f:e2:28:8e:02:22:5e:2f:5e:eb:97:38:60:a1: 8f:44:25:72:3e:a9:3d:32:3f:6c:e1:39:9d:47:d5: 9a:47:58:ac:72:98:80:e6:38:9d:aa:b8:7a:d9:36: 04:05:4e:ec:05:1d:b5:4f:96:c7:08:08:bd:4b:b0: c6:f3:dd:9f:73:28:a1:da:ef:b9:33:3b:69:e8:de: 40:3d:21:3a:a2:e6:50:72:e5:bc:62:d6:91:42:7a: de:14:38:31:85:7b:7f:93:82:14:f1:e5:85:b7:50: aa:e5:6f:08:43:43:4a:31:62:7d:5c:b1:88:a4:9f: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft sbgp-ipAddrBlock: critical IPv4: 168.253.0.0/19 Signature Algorithm: sha256WithRSAEncryption 6e:81:fe:a0:a8:7d:66:e6:a5:d9:b7:94:65:82:71:21:a0:ac: a7:0d:0c:17:d9:9a:22:40:e7:3a:fb:c5:a3:66:ee:c8:98:e0: 4f:c4:30:f0:30:26:83:68:49:58:b2:1b:8a:21:d2:b1:d1:b6: e7:8d:cb:66:a5:10:47:66:6c:85:31:f9:ca:dc:6d:96:3a:a8: e1:82:71:2c:bd:55:7e:12:0e:1a:2f:02:37:37:d6:d9:8f:a3: de:83:b1:87:84:e5:00:00:a6:96:7d:60:23:f9:9a:f3:b3:fe: ab:54:54:a9:4c:f8:77:f3:02:42:2b:14:66:60:76:43:56:6b: 3f:9d:61:11:5c:f0:e9:9f:d0:a7:6f:78:d2:ed:16:e7:65:50: 2f:e5:60:48:5d:96:c3:10:5e:03:b7:bc:e6:bb:5e:54:9b:96: d0:a4:03:68:1d:88:38:d2:7e:a4:0c:15:3c:12:9b:19:be:e9: b6:1e:ba:a5:77:92:15:0e:52:95:00:ad:3a:08:75:e4:76:7e: ea:59:84:0f:98:fe:eb:de:28:0e:6c:7a:1b:ca:fc:56:8a:b2: 12:73:1a:57:25:2a:70:74:4b:6f:3e:95:8d:f5:c3:49:47:da: 65:82:15:1a:92:36:bf:8a:74:85:ed:62:d5:fe:9d:5b:18:87: fe:7f:de:8d -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGrUwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTE0NTdaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkY2OEY0QVIxMTAvBgNVBAUTKDM5QzkxOUJFRjU0RkE1QUM2 N0MzN0UzRTc1NkNBMTNGQjIzNEI1M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDNw+2klByOI4XLViqgFnU0NOpx1kuu505dvmuMA7QEw/xLjjXjRtYC gVhUjdqArYj/0FOLXWGhTjrD+NDBkAGTJ6UKTS2yBmQXgqS8UopLOaMI55tnDm5/ jRtW0T+Jd2OjiTy8T12A9+oN54hVM8T0OAiKvhIu+Yi2ncX30VcY3qww4jofx26P 4iiOAiJeL17rlzhgoY9EJXI+qT0yP2zhOZ1H1ZpHWKxymIDmOJ2quHrZNgQFTuwF HbVPlscICL1LsMbz3Z9zKKHa77kzO2no3kA9ITqi5lBy5bxi1pFCet4UODGFe3+T ghTx5YW3UKrlbwhDQ0oxYn1csYikn7TtAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU OckZvvVPpaxnw34+dWyhP7I0tT8wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkY2OEY0LzY2RjM4 MzJBQzY3MzExRUVCM0RCNzNBNTc3NTQxMkU2LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZGNjhGNC82NkYzODMyQUM2NzMxMUVFQjNEQjczQTU3NzU0MTJF Ni9PY2tadnZWUHBheG53MzQtZFd5aFA3STB0VDgubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQFqP0AMA0GCSqGSIb3DQEBCwUAA4IBAQBugf6gqH1m5qXZ t5RlgnEhoKynDQwX2ZoiQOc6+8WjZu7ImOBPxDDwMCaDaElYshuKIdKx0bbnjctm pRBHZmyFMfnK3G2WOqjhgnEsvVV+Eg4aLwI3N9bZj6Peg7GHhOUAAKaWfWAj+Zrz s/6rVFSpTPh38wJCKxRmYHZDVms/nWERXPDpn9Cnb3jS7RbnZVAv5WBIXZbDEF4D t7zmu15Um5bQpANoHYg40n6kDBU8EpsZvum2Hrqld5IVDlKVAK06CHXkdn7qWYQP mP7r3igObHobyvxWirIScxpXJSpwdEtvPpWN9cNJR9plghUakja/inSF7WLV/p1b GIf+f96N -----END CERTIFICATE-----Generated at Tue Jan 13 07:51:43 2026 by rpki-client