This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
File:                     TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer (raw, json)
Hash identifier:          c2341+VzVoI6SL/X9+4aVWb5W3sTCkwcerEziKRUkx0=
Subject key identifier:   4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1AA3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:12:50 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 192.231.237.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6819 (0x1aa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:12:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36ED8A8AR, serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:ca:35:f4:16:94:13:5f:d2:b0:cd:87:a5:
                    a9:1a:56:71:39:da:58:6a:de:a2:55:62:5a:94:7e:
                    39:da:4d:e1:d8:fd:4a:b9:db:17:7a:a1:66:c1:62:
                    d2:b0:93:d8:36:16:94:59:22:63:06:eb:23:2e:d4:
                    f3:a0:9c:6f:12:fc:9c:aa:f6:70:f3:f6:0b:81:48:
                    89:14:1c:10:2c:07:fe:8d:0e:5e:cc:40:9b:3e:8b:
                    45:4a:bb:77:b4:07:2a:a3:81:8b:ed:07:c6:47:a4:
                    22:19:05:2c:1c:9c:ed:d6:00:c5:a9:c1:e2:a8:13:
                    0e:27:b1:53:25:f3:c8:f1:04:49:9c:a6:5b:5d:d4:
                    ef:1b:db:52:c3:c3:30:d8:97:03:99:74:43:c3:86:
                    6b:9e:cf:98:d7:63:f3:d8:5a:e6:5a:23:b5:20:d6:
                    71:41:15:1b:fd:86:76:a3:f2:90:d9:46:a2:6c:c1:
                    30:a9:95:26:26:44:31:90:80:22:01:1c:d3:d1:b0:
                    15:91:6d:7e:13:1c:14:ee:9c:1a:cf:51:2a:fb:14:
                    3b:93:33:ad:78:34:77:e0:60:4d:89:35:b9:03:c9:
                    fa:43:a8:22:82:8c:92:3e:94:f4:1c:28:64:2f:50:
                    2d:f4:50:e7:f3:74:b2:3f:8c:78:fa:70:93:82:4f:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:2b:d6:28:f7:c6:5f:d2:e7:59:88:d9:fc:51:08:5e:1d:44:
         7b:5b:45:25:a6:61:32:77:7d:9a:7f:f9:cf:b0:38:d5:41:2b:
         6a:12:7a:f9:06:d7:9c:f5:9d:9c:20:7e:67:ba:c3:ef:8b:da:
         5b:d7:23:68:f6:d3:63:de:e6:3e:07:07:1e:23:11:da:f2:9c:
         c0:bb:f4:55:f1:15:da:01:86:dd:ae:3c:40:d5:1c:2f:9b:c2:
         d9:1a:8a:a3:0e:65:5b:29:84:a0:1e:b1:4e:f5:01:cd:b5:50:
         1d:d9:ed:f6:44:02:8e:b4:20:a3:8f:c8:ab:d0:3b:a1:00:c2:
         24:1b:a7:3b:ce:ae:65:96:31:d7:a3:1e:67:45:4c:b3:5a:b8:
         2a:13:0e:53:08:33:a5:6c:3a:cd:08:08:63:98:9b:1b:a4:25:
         5e:36:6d:b1:c9:74:29:20:50:c0:16:24:b2:ec:c4:b5:2f:30:
         52:6c:a6:0c:17:b6:47:55:d5:f4:34:00:cc:c4:f7:5b:aa:07:
         67:e9:c0:53:e8:5d:73:2e:53:9f:72:ac:ee:bf:e4:17:28:b8:
         e3:bd:76:83:e9:20:f7:22:72:26:ac:99:b2:2e:32:82:c8:1c:
         a7:5a:b3:d4:85:fc:ca:f3:6e:a9:60:ce:23:6d:17:c0:6e:30:
         f1:6e:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:52:03 2026 by rpki-client