This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.cer (raw, json)
Hash identifier:          6qZr8N6SYcfoOiOBTdYTNkPLkqJM0yz0W9d7PcVgBQA=
Subject key identifier:   55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       19F6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:50:40 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 155.0.0.0/16
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6646 (0x19f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:50:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:10:96:ae:56:a4:39:55:91:ac:36:74:26:
                    74:75:9f:03:6c:63:13:c0:0d:87:90:d7:82:61:ff:
                    cf:59:b5:04:4f:91:2e:83:cd:90:d8:64:27:20:35:
                    61:93:fd:2a:64:ae:66:e4:36:55:03:1a:47:99:db:
                    78:5f:91:8f:d1:95:f4:de:5a:21:31:aa:32:cd:63:
                    d3:25:f4:9b:e5:c6:e0:33:ea:60:28:24:51:af:76:
                    2c:d6:36:65:34:de:8c:fb:18:bd:5f:a5:cb:14:5f:
                    a4:b3:b8:60:58:fe:a7:c1:3f:e3:67:c2:7d:2a:7b:
                    81:34:70:1f:f5:0f:ae:3c:3a:49:c9:b6:6e:f2:ae:
                    a1:c0:bd:8a:c9:83:2e:eb:a4:84:0a:a0:56:6d:7a:
                    f4:e7:7a:d3:fe:a4:8a:41:60:55:86:bf:c0:2f:18:
                    59:3d:aa:5a:45:6c:48:e6:7c:20:b0:32:9a:68:6f:
                    e4:9a:54:76:86:5d:15:92:13:25:54:a5:5e:44:b1:
                    20:07:ce:4b:6b:35:62:e1:7a:b3:a7:05:74:0b:cb:
                    44:ac:e0:02:02:de:60:68:8e:a4:9d:54:1e:e2:dc:
                    11:8f:96:64:03:09:05:58:19:e1:0d:94:54:62:62:
                    59:80:15:15:70:f1:4a:1f:4f:53:31:bd:4f:34:12:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:12:83:c5:9d:c5:5f:1b:29:34:05:3c:80:b6:6b:4b:2c:
         4e:d5:a8:2e:de:84:08:87:52:cf:51:a5:c3:2f:4d:5c:ec:14:
         49:7b:74:a8:f0:ee:8d:be:32:35:e6:d2:5b:95:2e:08:f1:58:
         ac:34:a6:6c:c4:f2:dd:32:de:b6:b0:6d:23:a7:44:8c:a4:de:
         9f:f5:d7:d8:9c:6a:48:99:91:9d:4e:9a:1a:0d:b0:cb:4a:a2:
         f9:1f:0d:3c:21:94:a4:d5:be:0e:5a:bb:09:cb:c5:f7:8d:35:
         8e:36:a9:7c:21:f8:a9:26:6b:ca:fa:a2:3c:73:cc:41:fb:06:
         bd:05:1a:92:ba:c5:ca:87:08:b9:9d:f0:ab:7c:9c:7d:10:ea:
         2f:59:ff:f1:25:e7:76:62:7a:2a:e7:68:ac:62:f5:e6:e9:7e:
         fd:93:f0:5c:94:31:94:89:f8:98:7d:d9:69:26:fc:49:e8:a7:
         b2:8c:a6:fd:e0:72:51:11:e7:3e:e4:d5:0f:c3:7b:8b:77:8f:
         a1:39:5e:51:08:f3:72:9f:6f:fa:09:c4:a9:61:2a:2a:88:f7:
         62:2d:4b:0a:90:8c:45:00:e2:09:6b:11:10:d6:95:f5:9b:07:
         84:89:bb:aa:b1:8b:15:46:47:bc:75:09:bb:09:ff:07:18:fd:
         49:65:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:50:52 2026 by rpki-client