This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer File: pqNDsn-fdirkHPfFvGtRFMKIWnc.cer (raw, json) Hash identifier: ky/8wEzGcH8x6cPoMyGxifxpHa4UVzmBDSCMmdl6oig= Subject key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 1976 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:33:15 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 45.208.0.0/14 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6518 (0x1976) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:33:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:36:58:ea:87:24:86:a5:67:db:9b:64:4b: 12:5a:54:83:ef:10:0e:69:af:51:57:06:2c:f3:14: 6e:ad:d8:e5:72:a1:17:74:84:08:3c:ba:44:50:e8: ee:3a:d1:2b:3c:99:b2:06:95:18:56:0b:18:99:17: e2:58:80:f8:96:7b:ca:49:f0:db:8b:1e:dc:9a:69: f2:3b:93:25:60:ce:59:6b:fc:a1:19:df:1b:d5:3e: 9a:c5:af:a1:e1:ac:b5:04:8c:e4:57:5f:23:97:a7: 2a:51:3a:67:f9:22:c8:25:7f:87:9c:ce:74:3b:9a: e1:5f:cb:cc:73:04:36:b3:8f:3d:d4:06:a0:9c:34: ff:55:54:2c:0c:82:69:5c:cf:d8:77:da:4a:48:e3: 5d:a1:e1:c1:04:24:01:c3:59:10:07:6c:be:f9:57: 95:9f:b7:dc:f2:d3:83:18:3e:9d:00:af:3a:09:b4: ed:74:f2:0a:03:eb:2f:b8:a6:10:8d:48:11:c8:ac: 4a:8d:79:6e:cb:e4:72:2f:da:cc:ff:ba:ff:00:a2: 70:61:3d:9d:d3:a6:78:32:d1:1f:ce:28:1a:35:ef: cd:80:7a:c7:0c:ea:5c:86:8b:0d:1d:38:7c:78:e4: a7:f3:4b:fb:29:b6:d4:f9:10:05:3a:72:6d:4a:56: bc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft sbgp-ipAddrBlock: critical IPv4: 45.208.0.0/14 Signature Algorithm: sha256WithRSAEncryption 84:d0:ba:c8:24:40:ef:66:69:79:f9:2f:c0:cf:30:68:b1:69: db:8d:57:99:65:21:1c:b6:d8:30:52:ea:45:a2:7f:f5:01:df: 79:93:9f:07:d6:57:a3:ed:84:1c:84:01:21:21:ea:48:a2:24: 4a:46:95:c8:60:a2:d5:34:4d:ba:49:b2:88:cb:6d:33:80:04: 36:33:86:16:5a:4e:db:03:d6:87:17:32:c0:36:55:75:4c:90: 33:96:21:3a:e4:83:00:33:d1:70:ca:18:19:9f:cc:a1:7a:56: 0a:fb:a1:9b:67:f2:3f:18:0b:a0:fa:4a:41:7e:d4:81:b4:ab: e9:d0:25:07:c8:83:47:ac:7a:af:89:4a:d1:9f:1c:3f:61:39: 5a:33:36:9d:a0:b3:c7:14:84:bf:83:98:97:b2:51:77:c6:9d: 70:b7:5b:52:e9:52:20:7e:58:8a:ec:a1:8a:97:69:c6:6c:f7: f2:f0:31:3f:1d:d2:df:39:31:b9:0b:45:d9:a1:a3:c4:a7:bb: 19:04:9a:f3:26:8b:c8:30:7c:fe:60:a5:f8:24:28:dc:d5:76: b2:54:60:e9:82:85:c5:1f:75:2d:c0:90:71:ef:51:ec:32:8c: 4b:5e:42:68:37:d6:1b:48:e2:43:f1:e1:84:5f:cd:56:a2:79: 2a:2c:50:aa -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgICGXYwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDMzMTVaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjQyQ0IxQVIxMTAvBgNVBAUTKEE2QTM0M0IyN0Y5Rjc2MkFF NDFDRjdDNUJDNkI1MTE0QzI4ODVBNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC1fjZY6ockhqVn25tkSxJaVIPvEA5pr1FXBizzFG6t2OVyoRd0hAg8 ukRQ6O460Ss8mbIGlRhWCxiZF+JYgPiWe8pJ8NuLHtyaafI7kyVgzllr/KEZ3xvV PprFr6HhrLUEjORXXyOXpypROmf5Isglf4ecznQ7muFfy8xzBDazjz3UBqCcNP9V VCwMgmlcz9h32kpI412h4cEEJAHDWRAHbL75V5Wft9zy04MYPp0ArzoJtO108goD 6y+4phCNSBHIrEqNeW7L5HIv2sz/uv8AonBhPZ3Tpngy0R/OKBo1782AescM6lyG iw0dOHx45KfzS/spttT5EAU6cm1KVrwNAgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU pqNDsn+fdirkHPfFvGtRFMKIWncwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjQyQ0IxLzQyODBD RTYwMzQ4OTExRUZBQTE4NjZBMjc2MkU5NTFBLzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY0MkNCMS80MjgwQ0U2MDM0ODkxMUVGQUExODY2QTI3NjJFOTUx QS9wcU5Ec24tZmRpcmtIUGZGdkd0UkZNS0lXbmMubWZ0MB4GCCsGAQUFBwEHAQH/ BA8wDTALBAIAATAFAwMCLdAwDQYJKoZIhvcNAQELBQADggEBAITQusgkQO9maXn5 L8DPMGixaduNV5llIRy22DBS6kWif/UB33mTnwfWV6PthByEASEh6kiiJEpGlchg otU0TbpJsojLbTOABDYzhhZaTtsD1ocXMsA2VXVMkDOWITrkgwAz0XDKGBmfzKF6 Vgr7oZtn8j8YC6D6SkF+1IG0q+nQJQfIg0eseq+JStGfHD9hOVozNp2gs8cUhL+D mJeyUXfGnXC3W1LpUiB+WIrsoYqXacZs9/LwMT8d0t85MbkLRdmho8SnuxkEmvMm i8gwfP5gpfgkKNzVdrJUYOmChcUfdS3AkHHvUewyjEteQmg31htI4kPx4YRfzVai eSosUKo= -----END CERTIFICATE-----Generated at Fri Jan 2 16:55:57 2026 by rpki-client