This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer File: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer (raw, json) Hash identifier: oyibIpq+nGSDShuGTFyUlERJaIR9I1b+snxaR7l50/I= Subject key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 198E Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:36:18 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 165.169.0.0/16 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6542 (0x198e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:36:18 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:4b:ea:03:03:2c:d7:0c:8e:63:bd:32:95: 46:57:44:16:ff:d0:a7:b7:f9:91:12:f4:88:12:2f: 17:b1:cb:89:dd:79:8a:e8:55:92:d6:07:f8:da:31: c3:81:64:08:e8:f3:77:41:f2:fe:49:a7:ce:0e:20: 1e:b0:95:7b:2f:96:15:e6:4f:9b:9f:f7:35:75:b9: 0d:71:9a:e9:85:8f:b7:60:76:75:c2:ca:45:5c:de: 25:c3:85:5e:53:68:91:51:8c:95:d4:9c:6d:6b:9e: 9f:43:4f:04:c7:ef:fd:c2:f8:c7:09:78:da:7b:9f: 71:4e:1b:af:22:19:a2:9d:36:ff:9c:8b:79:53:fa: 17:68:1d:25:a7:5e:a6:8d:3b:35:78:47:35:58:b6: a6:81:db:f2:79:0f:9a:bb:ee:28:1c:53:75:27:e7: b3:f0:44:00:8d:cb:67:03:8c:c9:8a:4d:11:5d:1d: 0a:70:cc:ee:2c:14:55:28:51:1d:fa:5d:e7:a5:7f: aa:f2:fb:c2:a9:3b:dc:2e:bb:29:ee:a0:28:a5:4c: 79:47:06:6f:6b:09:2e:2e:72:e4:0d:16:a7:df:bb: 8f:61:73:ee:74:74:de:39:80:ad:d6:e6:fa:83:22: c9:58:15:ad:1c:24:9f:fa:8e:81:d5:26:1b:4f:aa: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft sbgp-ipAddrBlock: critical IPv4: 165.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:a6:ea:28:9f:36:e2:fd:a9:aa:be:b0:2a:e8:dc:33:39:fa: 07:c4:8c:a6:e2:55:80:75:bc:da:4d:20:71:50:d6:58:e4:fb: b6:a1:f7:64:70:6e:ea:d2:e9:a1:e6:3c:2d:c6:de:9b:1b:72: a7:b7:35:ef:51:0b:c0:1c:82:9d:26:14:95:47:6a:81:d5:2e: f7:8d:c2:0c:55:4b:80:45:77:ba:87:0b:12:d8:0c:98:8c:24: 55:ed:e3:d4:80:50:5a:d9:01:66:32:13:3b:47:d9:0d:ed:22: 3d:cc:e6:68:7f:10:37:fb:85:2f:d1:9e:10:1c:24:6a:99:fd: b6:d6:83:3b:ce:01:dd:5f:46:a3:e0:55:ba:16:05:39:6f:eb: 2e:bc:e4:44:34:90:9b:eb:1b:2a:79:6c:92:03:e3:3e:d0:bb: f2:96:b1:98:95:f6:14:09:90:f6:a3:e1:35:93:1e:e7:7c:fb: 3f:e4:86:cf:13:67:65:1e:83:d6:36:80:6c:a0:ac:1f:9e:c8: 1b:64:79:7b:32:dc:be:5f:30:3b:6a:b7:de:e5:42:13:33:30: 57:9b:9b:33:6b:05:03:ed:c1:0f:d8:71:8e:43:96:87:77:11: 43:26:e4:67:97:e6:4f:2e:d0:bf:d1:70:b6:9b:98:75:84:3d: f2:b6:cb:38 -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgICGY4wDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDM2MThaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjRFNjdDQVIxMTAvBgNVBAUTKDcxMkVFNDZDQ0YxMzI4MDg3 RjJFM0YyODY1NzYxMThDMTA2OUI5N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDIYEvqAwMs1wyOY70ylUZXRBb/0Ke3+ZES9IgSLxexy4ndeYroVZLW B/jaMcOBZAjo83dB8v5Jp84OIB6wlXsvlhXmT5uf9zV1uQ1xmumFj7dgdnXCykVc 3iXDhV5TaJFRjJXUnG1rnp9DTwTH7/3C+McJeNp7n3FOG68iGaKdNv+ci3lT+hdo HSWnXqaNOzV4RzVYtqaB2/J5D5q77igcU3Un57PwRACNy2cDjMmKTRFdHQpwzO4s FFUoUR36Xeelf6ry+8KpO9wuuynuoCilTHlHBm9rCS4ucuQNFqffu49hc+50dN45 gK3W5vqDIslYFa0cJJ/6joHVJhtPqgqrAgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU cS7kbM8TKAh/Lj8oZXYRjBBpuX0wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjRFNjdDLzgyMjBC RTZBMjkxNjExRTk5NEExRTM2NUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY0RTY3Qy84MjIwQkU2QTI5MTYxMUU5OTRBMUUzNjVGOEFFQTIy OC9jUzdrYk04VEtBaF9MajhvWlhZUmpCQnB1WDAubWZ0MB4GCCsGAQUFBwEHAQH/ BA8wDTALBAIAATAFAwMApakwDQYJKoZIhvcNAQELBQADggEBAKym6iifNuL9qaq+ sCro3DM5+gfEjKbiVYB1vNpNIHFQ1ljk+7ah92RwburS6aHmPC3G3psbcqe3Ne9R C8Acgp0mFJVHaoHVLveNwgxVS4BFd7qHCxLYDJiMJFXt49SAUFrZAWYyEztH2Q3t Ij3M5mh/EDf7hS/RnhAcJGqZ/bbWgzvOAd1fRqPgVboWBTlv6y685EQ0kJvrGyp5 bJID4z7Qu/KWsZiV9hQJkPaj4TWTHud8+z/khs8TZ2Ueg9Y2gGygrB+eyBtkeXsy 3L5fMDtqt97lQhMzMFebmzNrBQPtwQ/YcY5Dlod3EUMm5GeX5k8u0L/RcLabmHWE PfK2yzg= -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:53 2026 by rpki-client