This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer File: YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer (raw, json) Hash identifier: 2BUSjECJdZhMUr5Tf7TMXMwmlosu2P6pJ2a5SHdoshM= Subject key identifier: 61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1A44 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 01:01:58 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.119.100.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6724 (0x1a44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 01:01:58 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A42DFAR, serialNumber=6189BF938C94C534D7843A7A034C5B6A8237D596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:48:05:c6:9f:95:6b:e8:6c:d3:4b:1a:20: 06:b4:bf:60:06:36:7f:3b:1f:5e:b6:d2:7c:3c:1d: 9f:20:6b:76:5e:96:e9:31:29:36:20:23:90:8b:c6: 12:8b:cf:47:bf:5b:ed:37:38:ac:30:26:bd:26:bc: ea:27:ea:e7:25:bc:f7:14:e0:35:5d:c6:56:d8:fa: 5e:95:10:c5:a7:2e:ad:4c:bb:77:30:04:16:91:33: c0:f7:cb:a7:8e:a4:05:38:09:52:1b:ab:f4:2c:ae: 25:29:5d:47:e7:24:b6:e1:45:c3:85:82:a0:03:06: 0c:47:40:2c:b2:1f:32:3c:46:31:74:fa:77:5b:0e: 16:a3:50:5d:40:e4:1c:c3:2a:a3:d4:1c:df:e6:6a: 5e:26:c3:31:48:6a:55:d6:20:7b:09:e6:0e:33:de: b7:43:c5:36:06:bc:19:ee:31:ae:d7:50:6d:31:9c: d7:6e:6c:ee:2b:4f:81:4c:59:d6:20:30:56:13:2a: b9:a7:3e:1d:e0:98:77:4c:1f:0c:58:60:5b:42:5a: 8f:bf:27:13:78:01:92:5f:50:35:88:71:5a:67:d9: 57:3b:5f:02:97:ef:f0:5a:73:95:92:cc:ee:3d:21: bf:dd:58:ca:88:55:be:8c:95:d2:d9:13:52:7d:dc: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft sbgp-ipAddrBlock: critical IPv4: 160.119.100.0/22 Signature Algorithm: sha256WithRSAEncryption 59:8f:3b:a7:4f:f5:11:84:68:1a:68:76:43:d5:9b:0d:c4:ee: cd:eb:20:bc:66:84:e3:1f:e2:ad:9f:f5:f5:da:aa:3e:52:84: 24:5d:17:48:82:96:9f:32:f7:fb:e6:11:50:d7:7b:6b:bd:26: 8c:9d:21:a3:bd:da:de:ea:6e:e3:5c:00:07:bc:6c:d8:df:0c: a9:1c:8f:3f:47:3e:f8:1b:c8:11:ef:36:d6:d1:17:ed:58:e3: 8e:48:6a:bc:21:02:92:39:df:b6:2b:a3:d5:80:e4:43:c8:3e: 51:83:13:77:68:80:a6:02:4a:b0:05:e5:0f:cd:04:38:23:f0: a7:d5:89:37:f5:fe:d2:e2:bd:a9:8e:3c:6e:1d:2a:62:2a:0d: d2:9a:be:b4:e7:b9:a4:df:c0:a8:97:59:36:32:05:4c:77:77: ec:44:f4:5d:3d:91:48:db:9a:d0:c8:93:4c:fb:1e:fd:88:7e: 9b:1f:a3:72:b3:66:36:91:44:6c:e9:a9:d6:a1:47:4d:73:32: 5d:1c:24:04:a7:49:b0:9b:d2:2b:29:03:71:ff:61:64:ae:96: 5f:ad:6c:c7:20:97:a0:26:d1:ff:e8:e2:08:ff:ec:8e:05:cd: 54:ed:a5:da:5c:b4:81:64:c7:9c:47:98:30:4d:ec:a5:73:c3: d5:ec:8a:39 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGkQwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMTAxNThaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNkE0MkRGQVIxMTAvBgNVBAUTKDYxODlCRjkzOEM5NEM1MzRE Nzg0M0E3QTAzNEM1QjZBODIzN0Q1OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCr7UgFxp+Va+hs00saIAa0v2AGNn87H1620nw8HZ8ga3ZelukxKTYg I5CLxhKLz0e/W+03OKwwJr0mvOon6uclvPcU4DVdxlbY+l6VEMWnLq1Mu3cwBBaR M8D3y6eOpAU4CVIbq/QsriUpXUfnJLbhRcOFgqADBgxHQCyyHzI8RjF0+ndbDhaj UF1A5BzDKqPUHN/mal4mwzFIalXWIHsJ5g4z3rdDxTYGvBnuMa7XUG0xnNdubO4r T4FMWdYgMFYTKrmnPh3gmHdMHwxYYFtCWo+/JxN4AZJfUDWIcVpn2Vc7XwKX7/Ba c5WSzO49Ib/dWMqIVb6MldLZE1J93CSvAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU YYm/k4yUxTTXhDp6A0xbaoI31ZYwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkE0MkRGL0IzNkE5 QUY2NEQ2MzExRUU5Qjc3OUY4MTRBRDlFNkZDLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzZBNDJERi9CMzZBOUFGNjRENjMxMUVFOUI3NzlGODE0QUQ5RTZG Qy9ZWW1fazR5VXhUVFhoRHA2QTB4YmFvSTMxWlkubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCoHdkMA0GCSqGSIb3DQEBCwUAA4IBAQBZjzunT/URhGga aHZD1ZsNxO7N6yC8ZoTjH+Ktn/X12qo+UoQkXRdIgpafMvf75hFQ13trvSaMnSGj vdre6m7jXAAHvGzY3wypHI8/Rz74G8gR7zbW0RftWOOOSGq8IQKSOd+2K6PVgORD yD5RgxN3aICmAkqwBeUPzQQ4I/Cn1Yk39f7S4r2pjjxuHSpiKg3Smr6057mk38Co l1k2MgVMd3fsRPRdPZFI25rQyJNM+x79iH6bH6Nys2Y2kURs6anWoUdNczJdHCQE p0mwm9IrKQNx/2FkrpZfrWzHIJegJtH/6OII/+yOBc1U7aXaXLSBZMecR5gwTeyl c8PV7Io5 -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:38 2026 by rpki-client