This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer File: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer (raw, json) Hash identifier: xtoTeBt6WnZ/kgzfxH+lOv29LxNNhcTKpP4vm8O/bck= Subject key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1962 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:30:44 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 160.19.128.0/20 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6498 (0x1962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:30:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:87:48:3a:2c:f2:6e:59:c5:a4:4a:fa:c8: 85:bd:6b:c5:02:86:d1:04:37:f1:67:d5:82:d4:c8: 97:25:e8:51:f1:78:3a:26:00:c8:93:93:d0:c8:0e: 45:39:c1:19:ac:4f:08:d8:1c:04:a5:25:65:e1:b4: 72:3d:cc:89:46:9d:0a:41:e4:fb:3b:d5:72:7b:76: 16:e2:5d:96:80:e9:6c:b7:31:a2:f0:78:5f:4e:c4: 11:f6:7c:c8:c3:83:c6:d1:60:6e:42:83:91:58:ce: 6b:af:7d:63:11:db:8e:d4:01:7b:e3:ad:b8:ea:50: ff:8e:6b:40:0c:40:c7:a3:0f:b9:c2:1a:23:31:10: 3d:df:a6:a1:1f:2f:17:00:a4:81:d0:7d:92:4c:b8: 46:be:14:47:e1:86:6f:86:eb:e7:6d:dd:eb:80:eb: b9:ab:76:5a:e4:50:50:d5:62:82:87:9e:d6:dc:24: 2f:ff:2f:5b:f0:a6:2f:ff:fc:ec:2a:1c:66:9d:eb: 73:16:79:60:22:d1:18:4b:30:5d:ea:18:c4:c6:dc: 75:f9:23:43:7d:c7:aa:fd:ab:4c:7c:e2:c4:2a:f3: c1:70:5c:03:16:d5:3d:93:bb:33:be:ac:b2:32:5e: 26:da:99:d9:b2:2a:f9:2f:d7:e0:09:81:4d:29:b8: b6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft sbgp-ipAddrBlock: critical IPv4: 160.19.128.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:a3:28:44:0e:78:ba:83:88:0b:8d:57:ad:cc:dd:1f:dc:85: 8c:32:05:a3:0d:f3:87:9c:07:17:b4:26:a1:13:6a:eb:c7:5c: 2f:67:0f:8f:e4:bc:b7:d5:81:a5:86:d2:3f:49:5c:75:67:ef: 38:64:82:ab:f5:30:c4:a3:db:dc:5f:15:02:2d:97:85:58:cc: 17:f8:cb:95:2c:85:bd:42:30:f1:36:ad:29:e4:5c:46:8a:be: 01:68:e7:c0:3b:ad:80:0b:43:44:a1:42:3e:0c:be:66:7a:35: 3f:3f:96:3f:fc:09:d4:2e:a0:e7:df:b4:ea:b1:26:61:4b:e2: 37:86:82:28:94:4a:5b:e8:57:65:b5:2d:8b:e2:db:50:68:46: d9:2a:3f:57:fb:46:54:9f:73:ea:e4:f8:9d:e3:dc:a8:f4:d7: a8:9d:d3:74:ac:97:b5:45:b5:6d:1f:88:89:ba:51:3f:79:a9: c4:bc:d1:c2:86:17:da:19:ea:f3:46:ed:34:fb:4b:3a:5d:90: a3:bc:c5:35:a4:c9:e8:61:c9:28:48:02:05:6f:9f:a9:2a:4e: c9:fe:ad:bd:b9:bb:d4:23:3b:1a:4c:13:3e:09:75:ab:20:7e: 0a:7b:30:25:5b:da:20:b1:13:19:a0:b1:32:c5:a7:d9:4f:9b: e5:d7:e9:1c -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGWIwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDMwNDRaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjMyMTU5QVIxMTAvBgNVBAUTKDY3MjFBMTkyRkNGRDI2MUE3 N0MxQ0REQzQ3ODkxQzc4MTRGQUM3NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDAOodIOizyblnFpEr6yIW9a8UChtEEN/Fn1YLUyJcl6FHxeDomAMiT k9DIDkU5wRmsTwjYHASlJWXhtHI9zIlGnQpB5Ps71XJ7dhbiXZaA6Wy3MaLweF9O xBH2fMjDg8bRYG5Cg5FYzmuvfWMR247UAXvjrbjqUP+Oa0AMQMejD7nCGiMxED3f pqEfLxcApIHQfZJMuEa+FEfhhm+G6+dt3euA67mrdlrkUFDVYoKHntbcJC//L1vw pi///OwqHGad63MWeWAi0RhLMF3qGMTG3HX5I0N9x6r9q0x84sQq88FwXAMW1T2T uzO+rLIyXibamdmyKvkv1+AJgU0puLafAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU ZyGhkvz9Jhp3wc3cR4kceBT6x3cwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjMyMTU5LzhBMEE1 QUU4NEFCQzExRURBQ0ZEMzE4NEYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzYzMjE1OS84QTBBNUFFODRBQkMxMUVEQUNGRDMxODRGMTIyMjQ2 OC9aeUdoa3Z6OUpocDN3YzNjUjRrY2VCVDZ4M2MubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQEoBOAMA0GCSqGSIb3DQEBCwUAA4IBAQBvoyhEDni6g4gL jVetzN0f3IWMMgWjDfOHnAcXtCahE2rrx1wvZw+P5Ly31YGlhtI/SVx1Z+84ZIKr 9TDEo9vcXxUCLZeFWMwX+MuVLIW9QjDxNq0p5FxGir4BaOfAO62AC0NEoUI+DL5m ejU/P5Y//AnULqDn37TqsSZhS+I3hoIolEpb6FdltS2L4ttQaEbZKj9X+0ZUn3Pq 5Pid49yo9NeondN0rJe1RbVtH4iJulE/eanEvNHChhfaGerzRu00+0s6XZCjvMU1 pMnoYckoSAIFb5+pKk7J/q29ubvUIzsaTBM+CXWrIH4KezAlW9ogsRMZoLEyxafZ T5vl1+kc -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:44 2026 by rpki-client