This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer File: U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer (raw, json) Hash identifier: XqH0XFkAmWhd6KQRbhkaC7Nbfxu2hA2MhJAio4SxINg= Subject key identifier: 53:E0:78:37:A7:4E:9F:55:C2:B5:C2:2F:ED:9B:3A:CD:BE:56:AD:24 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A95 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:11:13 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.239.240.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6805 (0x1a95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:11:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E1EE5AR, serialNumber=53E07837A74E9F55C2B5C22FED9B3ACDBE56AD24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:43:bb:35:29:c1:68:2e:dc:d4:68:fc:ed: bf:ac:5b:11:b1:9e:e9:18:37:48:2c:20:dc:e8:d5: 34:b3:47:13:96:a4:0f:33:81:53:1d:e6:42:32:d5: ec:69:7a:71:03:12:7a:ad:bc:ee:1d:39:31:9e:7e: 41:89:cd:d5:fa:84:09:c9:d4:17:d2:26:5c:f2:d9: 84:fa:65:5d:c0:99:13:3e:3a:23:16:87:cc:26:fb: 00:ac:26:9b:fe:3b:8b:31:ab:fb:cc:92:51:5c:ce: 77:59:d6:b6:45:31:90:68:82:97:d1:fd:81:fe:29: 7c:93:e7:d1:3a:a0:b0:d6:1f:71:3a:5f:0f:36:43: 69:a3:3e:3c:59:b9:ce:8c:a6:97:a8:8d:7f:cb:5e: 22:0e:25:ff:74:5c:fb:03:3d:81:81:b4:08:27:ad: 84:d4:ac:39:8f:4b:5e:0d:a7:9a:fa:f8:0c:4c:f0: 7f:9e:59:0d:69:75:b8:cd:ab:e8:1a:cd:2b:15:87: 3c:9f:8f:14:55:1d:ae:14:71:e7:3d:46:9a:db:86: fc:05:54:3f:9d:6e:7e:c2:ab:a1:09:b5:9d:24:cf: 94:45:b3:87:9a:77:73:8e:3c:4a:ae:31:25:58:dc: 70:a7:9d:d8:d3:75:c3:ad:3f:10:5a:24:56:46:21: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E0:78:37:A7:4E:9F:55:C2:B5:C2:2F:ED:9B:3A:CD:BE:56:AD:24 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.mft sbgp-ipAddrBlock: critical IPv4: 169.239.240.0/22 Signature Algorithm: sha256WithRSAEncryption 67:b6:20:c4:cc:a8:90:2d:36:17:86:6d:b1:ad:f3:54:3a:b9: 51:c0:d8:d0:a2:3a:a0:f1:e1:1b:04:6d:93:69:30:93:9f:7a: 76:67:73:f6:bd:38:6d:13:5f:2a:93:e4:b3:a8:18:d0:b5:2e: 36:b2:53:c7:a6:fe:33:35:61:1c:70:f7:1c:c1:50:5a:16:c4: 7d:b5:e9:d4:9a:fc:6c:60:57:4d:b3:d2:46:3c:a7:74:48:f7: 5e:36:a0:43:d4:4d:6b:53:58:89:ba:4f:29:15:ad:90:80:22: 29:81:90:df:03:d2:06:a4:b6:14:03:b4:3e:4c:0b:43:14:76: 7e:50:59:3b:4a:24:f5:5d:1f:51:4a:32:16:0d:7f:34:4b:6f: e7:b1:8c:a5:88:eb:38:7a:03:ee:f7:f5:95:9e:12:a9:c6:2f: 1c:56:ad:b0:dd:59:d2:4c:d4:b2:cc:82:64:db:d7:8f:80:b7: c4:3e:ce:49:d2:17:df:a6:2f:bb:16:5f:37:11:d5:9c:0d:14: 4c:ef:8b:f9:aa:68:b8:a0:fa:af:f4:29:d6:98:a8:15:cc:91: 8a:42:17:48:3d:29:04:a9:a7:da:47:39:e0:c0:4d:56:69:42: 6d:9c:40:e3:ee:d3:5b:69:d4:c7:57:e8:f5:ba:ba:97:28:3a: 76:36:a5:f3 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGpUwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTExMTNaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkUxRUU1QVIxMTAvBgNVBAUTKDUzRTA3ODM3QTc0RTlGNTVD MkI1QzIyRkVEOUIzQUNEQkU1NkFEMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCyCUO7NSnBaC7c1Gj87b+sWxGxnukYN0gsINzo1TSzRxOWpA8zgVMd 5kIy1expenEDEnqtvO4dOTGefkGJzdX6hAnJ1BfSJlzy2YT6ZV3AmRM+OiMWh8wm +wCsJpv+O4sxq/vMklFczndZ1rZFMZBogpfR/YH+KXyT59E6oLDWH3E6Xw82Q2mj PjxZuc6MppeojX/LXiIOJf90XPsDPYGBtAgnrYTUrDmPS14Np5r6+AxM8H+eWQ1p dbjNq+gazSsVhzyfjxRVHa4Ucec9RprbhvwFVD+dbn7Cq6EJtZ0kz5RFs4ead3OO PEquMSVY3HCnndjTdcOtPxBaJFZGIQcLAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU U+B4N6dOn1XCtcIv7Zs6zb5WrSQwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkUxRUU1L0FGN0VE QTFBOTM0MTExRURCNzIyQUU4Q0YxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZFMUVFNS9BRjdFREExQTkzNDExMUVEQjcyMkFFOENGMTIyMjQ2 OC9VLUI0TjZkT24xWEN0Y0l2N1pzNnpiNVdyU1EubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqe/wMA0GCSqGSIb3DQEBCwUAA4IBAQBntiDEzKiQLTYX hm2xrfNUOrlRwNjQojqg8eEbBG2TaTCTn3p2Z3P2vThtE18qk+SzqBjQtS42slPH pv4zNWEccPccwVBaFsR9tenUmvxsYFdNs9JGPKd0SPdeNqBD1E1rU1iJuk8pFa2Q gCIpgZDfA9IGpLYUA7Q+TAtDFHZ+UFk7SiT1XR9RSjIWDX80S2/nsYyliOs4egPu 9/WVnhKpxi8cVq2w3VnSTNSyzIJk29ePgLfEPs5J0hffpi+7Fl83EdWcDRRM74v5 qmi4oPqv9CnWmKgVzJGKQhdIPSkEqafaRzngwE1WaUJtnEDj7tNbadTHV+j1urqX KDp2NqXz -----END CERTIFICATE-----Generated at Fri Jan 2 18:09:05 2026 by rpki-client