This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer File: XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer (raw, json) Hash identifier: URu0bRkBlhBAk00SdRxCfSro4Psj1GfzU39pvKTrNzI= Subject key identifier: 5D:56:25:6A:24:9D:56:47:5F:0F:E3:4A:42:84:A6:4C:52:2C:0F:B4 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1958 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:29:36 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.255.248.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6488 (0x1958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:29:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362BDD7AR, serialNumber=5D56256A249D56475F0FE34A4284A64C522C0FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:fb:d9:6b:94:35:d0:f4:89:6e:15:49:fd: 95:d9:3c:6d:ee:09:dc:2c:72:fa:e6:69:b1:4a:00: e3:96:20:63:f2:7f:c2:57:b0:49:d2:77:b8:63:6a: e9:ae:33:fa:e5:7e:76:3a:89:4f:f2:31:d7:d7:a9: 67:b8:ed:d0:82:18:72:d2:33:64:7b:40:50:6a:1d: fa:0e:c9:e7:b7:4f:2e:85:73:a4:b3:ad:6f:bd:ed: f9:3d:83:4b:37:a0:a5:81:9a:cc:e9:d8:a0:89:9a: 12:b2:b3:3a:59:61:82:ab:41:01:81:03:08:f0:2b: 20:0a:89:fc:49:56:16:e3:15:34:65:7e:2c:d5:c8: a2:1e:7c:15:84:8b:5b:47:a2:3d:8e:76:e8:5b:01: 14:2b:99:14:e2:5c:0f:15:aa:ac:c0:9d:d9:a2:8a: 44:47:cd:c8:c5:b1:85:ea:77:dd:f7:74:1b:0a:8a: 13:28:15:4b:d1:7c:10:f3:80:05:99:18:b4:ad:ce: 37:aa:09:c2:8c:07:7e:7f:b9:06:d9:7b:d1:13:d0: 2c:65:cb:82:bc:1b:d5:6d:16:7e:92:74:88:d9:fb: 86:e7:84:ca:84:62:a2:dc:50:0d:72:6f:4b:ec:e5: c7:bb:89:91:9e:9d:c4:40:ce:d4:55:e0:90:a9:66: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:56:25:6A:24:9D:56:47:5F:0F:E3:4A:42:84:A6:4C:52:2C:0F:B4 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft sbgp-ipAddrBlock: critical IPv4: 169.255.248.0/22 Signature Algorithm: sha256WithRSAEncryption b1:bb:4f:de:c5:ab:b4:46:ed:6c:5a:05:e2:2f:93:3b:c8:67: 87:59:5b:22:9f:3c:b8:27:38:fe:2c:a1:fc:aa:5d:99:6b:42: d7:1c:8a:9a:82:c3:ca:96:eb:ae:8b:12:fa:f4:3b:3c:32:92: f5:7e:a3:e8:40:9b:e9:9c:ff:a6:73:26:07:51:a9:70:6e:66: 36:c6:0e:69:a3:fc:24:22:8d:53:5c:e3:55:c4:55:54:31:89: e7:fa:06:7f:98:cb:31:92:eb:42:5d:25:db:6d:4b:9d:a0:dd: 2d:2f:dd:98:68:c3:7d:08:81:3a:b6:2c:47:31:8a:8b:db:96: 46:8e:92:25:a5:c6:93:1b:c4:b5:50:f6:e7:f2:9c:57:29:1c: f9:1b:a6:05:fa:e5:aa:73:57:33:eb:53:17:b4:d0:61:be:2c: 44:a4:b6:10:74:eb:7f:89:f2:a8:f3:4b:a9:d2:dc:16:d4:81: 56:64:e4:5c:8d:0f:9c:24:a7:32:39:44:e8:d0:cd:a0:31:9e: 73:98:b3:61:85:fa:1d:f8:ed:f3:95:ac:c4:c7:b9:2f:f9:29: f1:26:6a:c1:3f:49:0b:1c:e4:14:a6:88:00:89:59:3d:8a:c6: e6:2f:fa:4c:ef:69:79:e1:2d:f5:8c:dd:a1:87:4c:5c:ab:94: 36:eb:fc:3a -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGVgwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDI5MzZaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjJCREQ3QVIxMTAvBgNVBAUTKDVENTYyNTZBMjQ5RDU2NDc1 RjBGRTM0QTQyODRBNjRDNTIyQzBGQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCmY/vZa5Q10PSJbhVJ/ZXZPG3uCdwscvrmabFKAOOWIGPyf8JXsEnS d7hjaumuM/rlfnY6iU/yMdfXqWe47dCCGHLSM2R7QFBqHfoOyee3Ty6Fc6SzrW+9 7fk9g0s3oKWBmszp2KCJmhKyszpZYYKrQQGBAwjwKyAKifxJVhbjFTRlfizVyKIe fBWEi1tHoj2OduhbARQrmRTiXA8VqqzAndmiikRHzcjFsYXqd933dBsKihMoFUvR fBDzgAWZGLStzjeqCcKMB35/uQbZe9ET0Cxly4K8G9VtFn6SdIjZ+4bnhMqEYqLc UA1yb0vs5ce7iZGencRAztRV4JCpZloNAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU XVYlaiSdVkdfD+NKQoSmTFIsD7QwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjJCREQ3LzA5MDY2 OTdDODU2MjExRUZBNTdBMUY5RDc2MkU5NTFBLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzYyQkRENy8wOTA2Njk3Qzg1NjIxMUVGQTU3QTFGOUQ3NjJFOTUx QS9YVllsYWlTZFZrZGZELU5LUW9TbVRGSXNEN1EubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqf/4MA0GCSqGSIb3DQEBCwUAA4IBAQCxu0/exau0Ru1s WgXiL5M7yGeHWVsinzy4Jzj+LKH8ql2Za0LXHIqagsPKluuuixL69Ds8MpL1fqPo QJvpnP+mcyYHUalwbmY2xg5po/wkIo1TXONVxFVUMYnn+gZ/mMsxkutCXSXbbUud oN0tL92YaMN9CIE6tixHMYqL25ZGjpIlpcaTG8S1UPbn8pxXKRz5G6YF+uWqc1cz 61MXtNBhvixEpLYQdOt/ifKo80up0twW1IFWZORcjQ+cJKcyOUTo0M2gMZ5zmLNh hfod+O3zlazEx7kv+SnxJmrBP0kLHOQUpogAiVk9isbmL/pM72l54S31jN2hh0xc q5Q26/w6 -----END CERTIFICATE-----Generated at Sat Jan 3 02:25:04 2026 by rpki-client