This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
File:                     tKCUA2WAIUx9QccbjIZXpO4vQHI.cer (raw, json)
Hash identifier:          fFeVfK89xg1zAz+a4g9WTAZjeaMIu64Ye38weTXGdOk=
Subject key identifier:   B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       19E2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:47:34 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 66.8.0.0/17
                          IP: 209.212.96.0/19
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Jan 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6626 (0x19e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:47:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367678FAR, serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:2d:ab:2d:8b:29:a9:3f:54:87:0d:a3:4f:
                    64:49:80:c0:62:c2:a9:ea:d0:c9:5d:3f:69:4e:ac:
                    eb:cb:22:33:2c:66:7b:c4:a1:01:43:d6:50:03:cb:
                    01:3c:f7:28:5f:e2:e8:d3:0c:77:25:22:eb:47:10:
                    65:04:53:f5:c7:69:69:61:2c:03:e4:53:d4:69:22:
                    95:b4:b4:75:4b:67:33:d0:cb:eb:d4:c9:7e:ce:de:
                    e1:b6:2c:dc:b4:74:ca:84:0c:47:29:0f:72:60:97:
                    c3:d1:c6:33:1b:f2:bb:bb:91:f8:6e:4b:11:aa:cc:
                    b4:d9:1f:1f:8d:a8:cf:1f:86:5e:2e:fe:7b:59:6c:
                    28:75:53:ca:0c:f9:61:75:7e:85:6b:ac:56:42:fc:
                    e2:30:1e:4d:be:e8:78:28:b5:dd:6e:b2:4b:18:c6:
                    58:c8:5f:80:47:c8:cf:9f:06:5b:ad:e9:cc:1a:c9:
                    a0:0a:0c:86:94:da:75:90:9a:f2:62:a5:17:d3:ae:
                    73:bd:c6:46:5e:cd:dd:83:21:40:22:4b:5d:63:94:
                    67:26:2a:d9:b7:26:02:15:0d:29:0d:38:af:7a:2f:
                    7e:8a:e7:00:da:af:3e:c8:4d:da:ee:e1:fb:be:49:
                    c0:64:5c:b2:07:c9:58:4b:cc:85:e7:9f:02:c1:e4:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.8.0.0/17
                  209.212.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:86:61:8d:8f:fe:19:b2:5a:4a:a5:0b:53:4b:ce:00:95:bd:
         90:e6:59:78:f8:77:05:ff:88:35:79:dc:c9:15:09:ec:de:45:
         e5:c0:3e:50:25:14:6f:41:70:09:c9:e0:ce:f0:45:f1:32:bf:
         6d:56:7b:c3:44:c7:b1:47:65:a6:91:ee:93:97:a6:79:a8:07:
         22:17:ca:43:75:6e:bb:54:20:bc:40:3d:80:af:de:10:1b:08:
         28:7b:db:0c:d8:0b:c5:38:b9:98:b5:bb:6d:ad:bf:f5:89:ce:
         f7:d4:c5:fe:5a:dd:c1:4d:87:bd:d7:32:81:b2:9f:a0:83:86:
         a9:30:a9:81:9e:f2:18:e9:4b:88:a4:f7:31:74:c2:cd:af:b5:
         f8:5d:74:53:8a:3d:15:a9:68:62:9e:09:65:50:4d:c9:3c:a5:
         7a:46:22:1f:90:7d:ae:f7:e7:d8:4e:c0:94:c2:59:9b:a7:dc:
         16:44:a9:c7:39:dc:f8:d5:01:d3:14:fb:c5:ba:dd:43:68:0c:
         76:ed:4c:0e:0f:b9:2b:4d:5d:50:88:95:b7:a1:1d:13:ce:88:
         2b:06:47:e5:fa:27:15:7d:aa:40:44:d8:d4:00:d0:bb:29:b9:
         36:e7:4f:ae:5f:53:f8:87:37:39:fb:a5:31:61:5a:bb:fd:f3:
         7a:c4:e1:dc
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgICGeIwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDQ3MzRaFw0yNzAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjc2NzhGQVIxMTAvBgNVBAUTKEI0QTA5NDAzNjU4MDIxNEM3
RDQxQzcxQjhDODY1N0E0RUUyRjQwNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDCvS2rLYspqT9Uhw2jT2RJgMBiwqnq0MldP2lOrOvLIjMsZnvEoQFD
1lADywE89yhf4ujTDHclIutHEGUEU/XHaWlhLAPkU9RpIpW0tHVLZzPQy+vUyX7O
3uG2LNy0dMqEDEcpD3Jgl8PRxjMb8ru7kfhuSxGqzLTZHx+NqM8fhl4u/ntZbCh1
U8oM+WF1foVrrFZC/OIwHk2+6Hgotd1usksYxljIX4BHyM+fBlut6cwayaAKDIaU
2nWQmvJipRfTrnO9xkZezd2DIUAiS11jlGcmKtm3JgIVDSkNOK96L36K5wDarz7I
Tdru4fu+ScBkXLIHyVhLzIXnnwLB5BvHAgMBAAGjggL3MIIC8zAdBgNVHQ4EFgQU
tKCUA2WAIUx9QccbjIZXpO4vQHIwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjc2NzhGL0FCMUMx
NUVFNjUwQjExRUY5MUM5RDk1Nzc2MkU5NTFBLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY3Njc4Ri9BQjFDMTVFRTY1MEIxMUVGOTFDOUQ5NTc3NjJFOTUx
QS90S0NVQTJXQUlVeDlRY2NiaklaWHBPNHZRSEkubWZ0MCUGCCsGAQUFBwEHAQH/
BBYwFDASBAIAATAMAwQHQggAAwQF0dRgMA0GCSqGSIb3DQEBCwUAA4IBAQAihmGN
j/4ZslpKpQtTS84Alb2Q5ll4+HcF/4g1edzJFQns3kXlwD5QJRRvQXAJyeDO8EXx
Mr9tVnvDRMexR2Wmke6Tl6Z5qAciF8pDdW67VCC8QD2Ar94QGwgoe9sM2AvFOLmY
tbttrb/1ic731MX+Wt3BTYe91zKBsp+gg4apMKmBnvIY6UuIpPcxdMLNr7X4XXRT
ij0VqWhingllUE3JPKV6RiIfkH2u9+fYTsCUwlmbp9wWRKnHOdz41QHTFPvFut1D
aAx27UwOD7krTV1QiJW3oR0TzogrBkfl+icVfapARNjUANC7Kbk250+uX1P4hzc5
+6UxYVq7/fN6xOHc
-----END CERTIFICATE-----
Generated at Mon Jan 12 10:49:28 2026 by rpki-client