This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
File:                     mDG4OL4rkAR85SvUJaCCldQ2HvI.cer (raw, json)
Hash identifier:          tXPchP55BqNDJDyvEO4Z8Fh/Ic2mW22YwD1dweRadNU=
Subject key identifier:   98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1AAD
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 01:13:56 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 164.160.88.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Jan 2026 01:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6829 (0x1aad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:13:56 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36F56CAAR, serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:85:80:03:0a:57:02:29:3a:e4:18:62:ef:
                    aa:b2:03:72:f3:2d:d5:a4:22:ae:67:c1:fe:d5:1a:
                    d2:eb:d7:ee:99:0d:d3:86:81:7a:b3:e0:5d:1c:34:
                    98:03:5e:3e:ef:b0:d2:55:9f:fa:f2:8f:0f:a2:b4:
                    ae:db:8a:ae:2e:21:dc:dc:40:ad:bf:1c:73:e1:6b:
                    79:26:49:45:22:e1:99:47:cd:7d:1e:7a:72:13:de:
                    0e:f7:39:3b:95:38:21:ef:27:f0:3c:2b:10:be:c2:
                    6d:93:3b:3b:b4:6a:ff:a9:e6:bd:39:4f:5c:c4:a1:
                    62:38:fe:fa:90:0b:1c:e1:4d:0c:bd:92:98:81:f0:
                    cb:fc:56:28:b0:02:a2:6c:aa:8a:a9:90:61:42:e0:
                    29:76:44:c0:0b:ce:67:76:59:3e:6f:26:b9:95:9b:
                    13:c1:94:0c:5c:c9:a2:dd:93:4d:d4:a0:97:d5:43:
                    11:d8:03:b3:e6:7a:7f:53:9f:60:9c:07:d5:73:d8:
                    5a:07:2a:01:6f:e9:78:dc:b2:f2:0b:d6:c6:21:0e:
                    ed:ea:05:49:0e:20:82:5f:93:27:88:a6:2a:e7:8c:
                    71:51:69:5e:03:59:69:f0:18:b8:d2:b3:1c:c2:d5:
                    8e:09:56:95:5f:6e:95:17:14:2c:6f:f2:75:51:9f:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:bb:1a:c9:f8:50:10:a5:6d:46:c2:ec:5f:d5:df:ed:3d:a7:
         e9:1f:54:43:96:25:a3:e6:f7:ee:9c:f8:5b:b5:59:69:d7:65:
         2a:26:e4:a8:98:61:a9:9d:13:16:84:d6:48:6b:8b:59:c7:40:
         91:81:f2:84:71:74:fd:24:9d:35:53:54:d3:0d:5b:bd:40:06:
         34:53:39:00:98:af:c6:63:bf:48:47:da:f9:9c:49:df:3f:73:
         3a:aa:60:cd:36:cd:58:c1:42:50:bc:c5:b1:d2:da:69:86:1e:
         39:3b:7e:fe:a7:90:a0:e1:36:77:1b:8a:bf:6a:a0:0e:19:03:
         d0:68:0b:07:21:cd:81:78:28:7b:12:9e:0c:a2:4d:c0:fc:38:
         92:5c:d1:3e:80:4e:7f:1a:c7:7a:2d:fe:f2:38:e7:3a:7b:fb:
         b4:d2:4b:b9:5e:d1:c9:fd:ce:27:c0:72:2a:99:a2:86:ad:4b:
         28:0d:96:46:99:57:d7:df:90:de:76:57:18:b5:92:b4:91:03:
         fc:8d:4b:cf:cf:7d:ef:a6:c9:f5:f7:aa:49:b3:36:5b:2d:1f:
         85:b9:f8:8a:f3:3b:af:53:4c:91:c1:86:97:f9:45:60:05:12:
         0e:6f:48:8b:cc:7f:ff:4a:ef:93:15:cc:93:10:25:cf:1a:c1:
         60:ab:d2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:34:58 2026 by rpki-client