This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer File: XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer (raw, json) Hash identifier: YXEzxdxnmbX/oIsWvgXmbT83d29YEjhqdd4ijReFjjM= Subject key identifier: 5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A89 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:09:54 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 168.253.192.0/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 10 Jan 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6793 (0x1a89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:09:54 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36D5F5AAR, serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6d:8c:89:28:44:a1:99:e4:27:bf:65:c6:7c: 2d:22:47:74:be:05:56:66:08:c5:c6:16:ab:cb:2c: 5a:a9:ce:cb:d5:a2:19:17:f5:23:b1:d6:30:21:72: 46:39:06:37:94:4e:07:d8:fd:d7:70:56:ee:5c:a5: 5f:cd:28:73:cc:c2:c2:01:27:58:7f:55:c5:6c:72: 7c:a1:eb:3e:98:58:a6:61:d5:02:c8:5b:03:c8:d2: d5:89:57:db:10:de:5f:71:4f:2c:5f:28:5b:7c:28: 39:f3:fb:0a:02:ff:cd:b7:67:ae:71:ad:c8:30:92: 3b:cd:55:5d:9c:91:a0:e6:23:5f:59:e6:87:f3:11: 20:b2:a2:de:ac:bf:53:f7:0f:ca:a5:39:4b:68:60: 28:70:a6:e5:19:2d:2d:fc:50:94:48:11:9c:d9:86: bd:42:87:6b:cc:ee:cf:ac:4a:b8:75:f2:06:e7:06: ea:88:c2:9e:f2:a8:8e:53:26:72:f8:2b:ec:20:35: b8:a6:21:ea:59:d5:16:c5:31:c1:47:ba:43:c2:a1: 9b:5f:59:eb:5c:11:9c:3c:56:a0:50:c2:9c:b8:d8: bf:4c:b0:1d:27:10:22:e8:c6:41:24:57:8b:f7:73: f3:01:9c:01:b1:2f:2f:f3:10:32:a6:68:f9:a6:83: e8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft sbgp-ipAddrBlock: critical IPv4: 168.253.192.0/20 Signature Algorithm: sha256WithRSAEncryption 03:f3:be:8b:f8:c8:57:5d:90:bb:fe:5f:dd:93:66:45:7e:46: e3:ff:a9:6f:d8:a0:fd:d7:0e:7d:6a:37:17:ca:13:54:bf:25: b8:36:d0:13:85:9c:23:d4:59:9f:56:64:ec:c9:7c:ed:38:95: a6:3b:c2:6f:5b:c3:ae:74:69:40:c7:e3:78:4d:d6:32:2c:20: e7:ee:23:87:10:ab:6a:ca:8c:d0:f4:83:0d:f8:cf:0b:c7:00: 84:bc:d1:e9:a0:69:c5:58:9a:15:20:a8:6d:44:85:32:de:a9: 6f:56:93:e1:30:63:cb:d0:4a:0c:b5:ad:8c:39:68:62:e5:f6: d7:0b:ed:8a:45:4c:2a:61:2b:19:15:83:65:0b:62:ab:f8:e6: dd:95:6a:fd:dc:be:f5:f8:59:ea:89:7d:e9:4c:ae:a7:39:27: 68:1a:66:74:b6:24:90:a8:3f:43:ef:c9:06:64:64:05:49:4a: 66:bc:d0:6f:20:62:13:32:27:73:83:6b:29:42:69:03:a3:7f: 13:eb:70:dd:08:eb:dc:59:1e:63:b9:57:ad:ac:0b:c9:69:73: 09:c8:0e:3c:e8:0f:c7:ba:b8:04:ce:ee:53:29:f4:2c:c2:7c: da:f4:4a:21:2b:21:76:a4:56:c2:4e:cf:81:c1:25:32:f8:e8: 7f:ff:d3:1c -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGokwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTA5NTRaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkQ1RjVBQVIxMTAvBgNVBAUTKDVFRUE1QTJGRTcyRjQzNDI4 NUY4MThCNjgyMzAyRDlCQzJBRDQ0QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDGbYyJKEShmeQnv2XGfC0iR3S+BVZmCMXGFqvLLFqpzsvVohkX9SOx 1jAhckY5BjeUTgfY/ddwVu5cpV/NKHPMwsIBJ1h/VcVscnyh6z6YWKZh1QLIWwPI 0tWJV9sQ3l9xTyxfKFt8KDnz+woC/823Z65xrcgwkjvNVV2ckaDmI19Z5ofzESCy ot6sv1P3D8qlOUtoYChwpuUZLS38UJRIEZzZhr1Ch2vM7s+sSrh18gbnBuqIwp7y qI5TJnL4K+wgNbimIepZ1RbFMcFHukPCoZtfWetcEZw8VqBQwpy42L9MsB0nECLo xkEkV4v3c/MBnAGxLy/zEDKmaPmmg+ihAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU XupaL+cvQ0KF+Bi2gjAtm8KtRL8wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkQ1RjVBLzNBQjkx ODdFREFBNjExRUQ5QjFFMDBDNTJGNkQ4QzFELzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZENUY1QS8zQUI5MTg3RURBQTYxMUVEOUIxRTAwQzUyRjZEOEMx RC9YdXBhTC1jdlEwS0YtQmkyZ2pBdG04S3RSTDgubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQEqP3AMA0GCSqGSIb3DQEBCwUAA4IBAQAD876L+MhXXZC7 /l/dk2ZFfkbj/6lv2KD91w59ajcXyhNUvyW4NtAThZwj1FmfVmTsyXztOJWmO8Jv W8OudGlAx+N4TdYyLCDn7iOHEKtqyozQ9IMN+M8LxwCEvNHpoGnFWJoVIKhtRIUy 3qlvVpPhMGPL0EoMta2MOWhi5fbXC+2KRUwqYSsZFYNlC2Kr+ObdlWr93L71+Fnq iX3pTK6nOSdoGmZ0tiSQqD9D78kGZGQFSUpmvNBvIGITMidzg2spQmkDo38T63Dd COvcWR5juVetrAvJaXMJyA486A/HurgEzu5TKfQswnza9EohKyF2pFbCTs+BwSUy +Oh//9Mc -----END CERTIFICATE-----Generated at Thu Jan 8 13:45:49 2026 by rpki-client