This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer File: kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer (raw, json) Hash identifier: MmRWRX8RqI7DyflKdQ7i02ZfZeP0im6FB+QlrWts+Nc= Subject key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1950 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:28:42 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 146.231.0.0/16 IP: 192.42.99.0/24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 14 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6480 (0x1950) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:28:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:69:b7:89:e5:05:78:81:1a:1f:1f:25:d4: 7c:6e:53:25:47:ac:82:ae:d4:9f:89:3f:e8:ed:f2: d0:6f:eb:7d:0c:80:d3:dc:ba:7d:7c:09:0a:bb:b5: 07:47:1f:4a:81:32:7a:30:d6:46:3c:5d:3d:0c:01: 13:19:5c:e2:c5:9c:85:28:8a:52:14:00:fd:d8:b9: e3:19:da:fb:4d:58:96:69:d0:2f:6c:50:07:d9:2c: 40:0b:be:b5:c5:4b:31:ce:c9:56:bb:5c:a0:6d:82: 85:8c:7e:cf:af:b4:68:61:35:76:ef:2c:f8:16:0e: ee:f1:dc:28:cc:eb:cb:6a:ce:2c:01:9b:02:29:aa: e5:29:9c:fb:0b:e0:7e:42:8f:63:6d:45:77:c6:7e: 46:47:a7:ae:9a:71:e9:26:ae:63:20:58:d4:fc:c7: 8e:ad:d3:c6:1c:54:30:b3:af:99:dc:3d:ba:6c:63: bc:ac:67:b9:bc:f1:ff:4d:ad:99:d1:45:ea:38:2d: 3b:8d:18:8b:51:88:d5:16:2e:d6:1d:4b:33:fe:45: aa:0d:da:8a:a5:43:be:17:c8:dd:3e:84:b7:0a:b8: f1:5a:5a:e4:68:66:82:84:a2:a7:6b:a3:58:a3:70: 06:43:79:9d:ea:26:e9:00:7a:9a:8e:9c:bb:9d:07: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft sbgp-ipAddrBlock: critical IPv4: 146.231.0.0/16 192.42.99.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:a5:b8:27:17:85:97:12:84:f5:14:1f:6b:4e:50:33:c9:0f: 14:c0:84:d3:84:b6:cc:50:f5:14:15:35:d7:bb:7c:b5:6f:01: 18:15:73:54:cf:7a:9d:b1:88:97:c5:d8:f0:fd:88:5e:01:69: 27:a2:43:c7:c0:30:eb:8e:7a:e3:fa:e7:2c:56:49:bc:84:ef: 66:75:bf:31:87:9f:b2:84:7f:c4:d5:31:bc:92:35:85:a4:03: c9:25:df:98:b8:fc:fb:aa:c6:4d:61:92:7d:08:dc:67:9c:67: 15:b9:40:ca:eb:65:d8:bb:4f:90:82:82:e5:45:c8:a0:01:59: 97:ea:7e:70:a4:b1:de:c0:1f:76:43:ca:d0:42:0c:63:02:cd: 54:fa:2a:dc:e8:72:21:ef:c1:78:2e:af:a5:1b:bb:13:1f:68: f5:f4:8a:ab:f8:4d:ca:67:8c:86:9a:b4:cf:cb:91:3b:07:17: e8:7c:5e:ac:36:7d:54:ae:b8:19:c7:94:63:d6:50:85:88:8a: 94:5f:a0:4c:08:86:f7:1a:91:88:7a:26:84:22:46:0f:31:c9: 72:7f:85:dd:bf:5d:fc:0e:96:0a:a8:d2:69:ed:72:c3:6a:7f: 81:f1:09:45:28:c0:6c:68:41:0d:75:e0:61:e3:fb:2c:0e:30: cc:b7:33:37 -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgICGVAwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDI4NDJaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjJBRjAyQVIxMTAvBgNVBAUTKDkzM0UwMjk2MUUwQUJEODM1 Q0JDN0VFMjgzRjE1NzE5NDc0NjMyM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC3LWm3ieUFeIEaHx8l1HxuUyVHrIKu1J+JP+jt8tBv630MgNPcun18 CQq7tQdHH0qBMnow1kY8XT0MARMZXOLFnIUoilIUAP3YueMZ2vtNWJZp0C9sUAfZ LEALvrXFSzHOyVa7XKBtgoWMfs+vtGhhNXbvLPgWDu7x3CjM68tqziwBmwIpquUp nPsL4H5Cj2NtRXfGfkZHp66acekmrmMgWNT8x46t08YcVDCzr5ncPbpsY7ysZ7m8 8f9NrZnRReo4LTuNGItRiNUWLtYdSzP+RaoN2oqlQ74XyN0+hLcKuPFaWuRoZoKE oqdro1ijcAZDeZ3qJukAepqOnLudB+mLAgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQU kz4Clh4KvYNcvH7ig/FXGUdGMj8wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjJBRjAyLzRGNkZE QTY2ODM4QzExRTlCMzY0RTkxMUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzYyQUYwMi80RjZGREE2NjgzOEMxMUU5QjM2NEU5MTFGOEFFQTIy OC9rejRDbGg0S3ZZTmN2SDdpZ19GWEdVZEdNajgubWZ0MCQGCCsGAQUFBwEHAQH/ BBUwEzARBAIAATALAwMAkucDBADAKmMwDQYJKoZIhvcNAQELBQADggEBAEuluCcX hZcShPUUH2tOUDPJDxTAhNOEtsxQ9RQVNde7fLVvARgVc1TPep2xiJfF2PD9iF4B aSeiQ8fAMOuOeuP65yxWSbyE72Z1vzGHn7KEf8TVMbySNYWkA8kl35i4/Puqxk1h kn0I3GecZxW5QMrrZdi7T5CCguVFyKABWZfqfnCksd7AH3ZDytBCDGMCzVT6Ktzo ciHvwXgur6UbuxMfaPX0iqv4TcpnjIaatM/LkTsHF+h8Xqw2fVSuuBnHlGPWUIWI ipRfoEwIhvcakYh6JoQiRg8xyXJ/hd2/XfwOlgqo0mntcsNqf4HxCUUowGxoQQ11 4GHj+ywOMMy3Mzc= -----END CERTIFICATE-----Generated at Mon Jan 12 05:54:46 2026 by rpki-client