This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer File: WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer (raw, json) Hash identifier: HG0qfUpr0fRs+BvstHDSlSxym2dvUCtNtJGbZeeo/Nc= Subject key identifier: 5A:C6:07:C4:9C:D3:30:41:F5:8C:EE:E5:4C:76:60:E0:45:9B:F7:27 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1AC9 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:17:44 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.255.176.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 01:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6857 (0x1ac9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:17:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36FCA07AR, serialNumber=5AC607C49CD33041F58CEEE54C7660E0459BF727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:d7:bf:71:7a:e2:11:ec:e7:79:8c:bf:b9: 52:f6:25:cb:99:1d:15:8a:47:85:ce:59:e2:a9:ed: 1b:ac:c5:fa:41:15:5d:d3:41:75:0d:fd:52:92:cf: c6:2b:e3:8b:b1:49:63:b8:ee:c3:25:2d:e1:7e:2f: 8f:ff:8a:4b:3d:f9:6a:21:17:ad:ce:ed:bf:99:6e: b1:f2:12:ca:75:2a:30:6f:c7:05:f7:5a:88:3f:3b: d9:8e:d5:39:da:26:44:04:a1:f8:a0:cb:b0:ad:07: 88:d0:f3:4d:bc:7a:8d:d1:41:1a:a9:d4:f6:c5:3b: 0d:0d:ea:7d:7d:92:fe:f8:26:02:71:5b:74:8f:ef: 37:1f:a1:27:f1:fa:f3:2d:16:50:50:f9:aa:d3:69: b1:be:aa:a8:0c:fe:ee:60:d1:c4:6b:78:d6:36:27: f4:3d:13:e2:f2:61:c6:b0:e0:d7:1e:65:d3:d8:a6: 28:73:03:32:d2:f7:26:bc:75:0d:b1:87:30:c2:c7: e0:f3:c1:3a:cb:99:ba:3f:46:a3:04:06:96:8e:ce: 0a:c9:1c:be:04:01:0e:45:0e:67:8f:e5:73:be:78: f1:e8:b6:63:b1:af:11:c9:0b:a2:e9:51:61:40:88: b4:ce:ce:44:b0:84:12:51:95:aa:96:f5:94:ae:67: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C6:07:C4:9C:D3:30:41:F5:8C:EE:E5:4C:76:60:E0:45:9B:F7:27 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft sbgp-ipAddrBlock: critical IPv4: 169.255.176.0/22 Signature Algorithm: sha256WithRSAEncryption 07:8f:6a:e8:1b:34:2d:cd:3a:2a:d9:3d:b0:cf:48:6a:1f:d5: 99:4a:83:9a:e0:df:18:dd:35:5d:f0:da:94:d2:b1:4e:ce:5d: f6:7b:90:d5:5a:de:4d:76:e6:06:00:10:99:a1:49:6b:5c:72: 89:47:e4:a4:d0:0d:ec:8f:70:67:f5:91:b4:fb:5c:58:8b:33: dd:9e:5c:5b:5b:71:48:4f:4f:61:0e:c1:37:0b:7a:d4:66:b2: 08:7c:7e:c1:07:40:dd:93:fc:9b:14:5e:a9:c8:cd:12:82:8a: be:a0:06:a8:d8:ca:97:0d:33:11:7a:8d:ce:be:39:41:a7:3c: 55:3b:2a:5c:b7:61:13:bf:eb:2f:87:f9:08:22:5d:96:0a:3f: d1:33:cf:46:be:fd:09:21:57:8a:48:f1:19:9c:0a:77:0f:58: a8:7e:67:b2:23:37:f0:39:f3:c3:ee:d7:b1:69:ea:7d:aa:60: c9:30:4e:74:be:02:29:42:8d:fb:ad:21:62:9f:73:15:8a:fc: a4:e8:b0:e8:7c:47:26:7e:74:1c:bc:32:dd:41:9c:8d:d0:14: 2d:2f:91:4a:90:58:12:53:9f:cb:7f:03:f0:9a:42:53:43:60: 05:20:7d:65:01:ff:9a:21:ad:7d:13:b7:39:35:42:81:27:ca: f8:d9:8e:f1 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGskwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTE3NDRaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkZDQTA3QVIxMTAvBgNVBAUTKDVBQzYwN0M0OUNEMzMwNDFG NThDRUVFNTRDNzY2MEUwNDU5QkY3MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDUu9e/cXriEezneYy/uVL2JcuZHRWKR4XOWeKp7RusxfpBFV3TQXUN /VKSz8Yr44uxSWO47sMlLeF+L4//iks9+WohF63O7b+ZbrHyEsp1KjBvxwX3Wog/ O9mO1TnaJkQEofigy7CtB4jQ8028eo3RQRqp1PbFOw0N6n19kv74JgJxW3SP7zcf oSfx+vMtFlBQ+arTabG+qqgM/u5g0cRreNY2J/Q9E+LyYcaw4NceZdPYpihzAzLS 9ya8dQ2xhzDCx+DzwTrLmbo/RqMEBpaOzgrJHL4EAQ5FDmeP5XO+ePHotmOxrxHJ C6LpUWFAiLTOzkSwhBJRlaqW9ZSuZ1DDAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU WsYHxJzTMEH1jO7lTHZg4EWb9ycwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkZDQTA3Lzc4OEM5 QzcyNzJCMTExRUU4OUMxQjU2RDRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZGQ0EwNy83ODhDOUM3MjcyQjExMUVFODlDMUI1NkQ0QUQ5RTZG Qy9Xc1lIeEp6VE1FSDFqTzdsVEhaZzRFV2I5eWMubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqf+wMA0GCSqGSIb3DQEBCwUAA4IBAQAHj2roGzQtzToq 2T2wz0hqH9WZSoOa4N8Y3TVd8NqU0rFOzl32e5DVWt5NduYGABCZoUlrXHKJR+Sk 0A3sj3Bn9ZG0+1xYizPdnlxbW3FIT09hDsE3C3rUZrIIfH7BB0Ddk/ybFF6pyM0S goq+oAao2MqXDTMReo3OvjlBpzxVOypct2ETv+svh/kIIl2WCj/RM89Gvv0JIVeK SPEZnAp3D1iofmeyIzfwOfPD7texaep9qmDJME50vgIpQo37rSFin3MVivyk6LDo fEcmfnQcvDLdQZyN0BQtL5FKkFgSU5/LfwPwmkJTQ2AFIH1lAf+aIa19E7c5NUKB J8r42Y7x -----END CERTIFICATE-----Generated at Thu Jan 1 12:29:15 2026 by rpki-client