This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/arin/vy5RyFo6gX_2x_zGkwZPizx6mcY.cer File: vy5RyFo6gX_2x_zGkwZPizx6mcY.cer (raw, json) Hash identifier: RnqiPqwqEnZa2ytYbhtr3QUpSp4d1r/RSkcbMD3z6H8= Subject key identifier: BF:2E:51:C8:5A:3A:81:7F:F6:C7:FC:C6:93:06:4F:8B:3C:7A:99:C6 Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Certificate serial: 19B2 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:40:47 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 169.239.0.0/22 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 15 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6578 (0x19b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455 Validity Not Before: Jan 1 00:40:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F3660137AR, serialNumber=BF2E51C85A3A817FF6C7FCC693064F8B3C7A99C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:62:eb:79:d0:13:4b:df:a7:0c:ad:4a:b0: f2:63:2f:14:6c:0f:95:fa:35:84:32:1a:92:d6:9b: cd:2e:2b:d5:ad:fa:ac:97:f2:5a:6b:87:e6:e7:58: 5e:7c:f9:e1:0c:4b:04:13:13:29:c8:59:58:3b:4f: 08:32:56:cb:d5:9d:d0:4e:c7:ff:2c:43:82:69:86: 2f:09:0e:4b:f0:8b:1f:67:d5:d2:b1:9b:f9:6e:6b: 91:4a:aa:bd:e4:8c:5b:70:20:69:d5:31:1a:e6:92: 86:1b:99:45:c3:ca:35:df:a2:dc:02:ff:3f:2d:32: 18:bb:24:07:53:92:a9:a3:86:5d:54:cd:61:b3:0a: ef:70:19:0d:2b:ed:fe:5f:52:6f:85:7a:f0:14:24: 02:39:cc:c6:66:40:bd:f9:84:8d:df:a2:ad:b1:83: be:98:01:5c:3a:11:60:ac:69:4e:2f:5a:21:16:3c: 0e:7f:d6:af:b6:c8:0d:5b:4e:2c:96:61:5a:d9:fc: 6f:46:3f:7b:ce:83:80:dd:e7:ad:d7:62:e1:be:b7: ef:85:47:1c:b0:f9:72:c0:c3:51:6c:f9:90:b2:0e: 0e:75:54:95:90:a9:63:e1:4c:48:9e:46:a2:2f:40: 57:d4:b5:21:21:ba:c2:d5:76:9f:41:92:6d:fd:46: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2E:51:C8:5A:3A:81:7F:F6:C7:FC:C6:93:06:4F:8B:3C:7A:99:C6 X509v3 Authority Key Identifier: keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.mft sbgp-ipAddrBlock: critical IPv4: 169.239.0.0/22 Signature Algorithm: sha256WithRSAEncryption 50:f3:f2:18:cd:e2:fd:ee:58:7a:9f:b6:15:fc:ed:1f:81:00: 75:17:2d:94:7d:72:be:af:09:80:61:61:48:d8:22:06:0b:b1: 21:79:77:1f:49:74:f8:a1:76:96:67:6f:ca:dd:ee:b3:75:e8: 60:5a:8a:04:3c:37:8a:a3:79:fa:ca:c1:b7:0d:e8:2f:67:a1: 1a:fa:97:60:80:a7:41:ce:0c:b5:8b:61:e8:65:38:1a:69:7a: 83:20:7a:c8:f0:1c:50:54:28:cf:8f:f4:17:b0:54:a1:a5:be: ba:54:cc:c8:d4:16:c1:69:0b:ce:38:db:b3:97:03:17:c2:de: 03:68:ec:a6:74:18:ca:f0:11:b2:ae:2a:13:23:cf:4e:22:b5: fe:f7:11:ae:5e:e8:56:5b:36:56:f6:d7:ca:22:51:bc:39:e8: e2:78:22:ed:9a:4b:bb:5f:26:6e:82:ab:3f:49:83:88:63:91: 3f:1b:b2:af:b9:82:e4:7d:ed:34:29:68:14:e3:c4:88:85:a0: 23:41:dd:a8:48:1e:95:38:08:bc:0f:9f:6f:e3:ca:98:28:9a: 00:9d:8a:60:74:8f:4e:f7:eb:e8:00:63:f1:df:51:83:21:c6: 80:1f:e8:25:a9:a8:eb:7f:8d:ba:ac:75:4e:dc:dd:47:be:57: 80:66:73:d0 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgICGbIwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0 NkQ0NTQxRDUxMTQ1NTAeFw0yNjAxMDEwMDQwNDdaFw0yNzAzMzEwMDAwMDBaMEgx EzARBgNVBAMTCkYzNjYwMTM3QVIxMTAvBgNVBAUTKEJGMkU1MUM4NUEzQTgxN0ZG NkM3RkNDNjkzMDY0RjhCM0M3QTk5QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDL/2LredATS9+nDK1KsPJjLxRsD5X6NYQyGpLWm80uK9Wt+qyX8lpr h+bnWF58+eEMSwQTEynIWVg7TwgyVsvVndBOx/8sQ4Jphi8JDkvwix9n1dKxm/lu a5FKqr3kjFtwIGnVMRrmkoYbmUXDyjXfotwC/z8tMhi7JAdTkqmjhl1UzWGzCu9w GQ0r7f5fUm+FevAUJAI5zMZmQL35hI3foq2xg76YAVw6EWCsaU4vWiEWPA5/1q+2 yA1bTiyWYVrZ/G9GP3vOg4Dd563XYuG+t++FRxyw+XLAw1Fs+ZCyDg51VJWQqWPh TEieRqIvQFfUtSEhusLVdp9Bkm39Ro6dAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU vy5RyFo6gX/2x/zGkwZPizx6mcYwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjYwMTM3LzM0MUQ2 NDNFNUMxQzExRUNCRDZGRUI2RDVBNDBENTc3LzA1BggrBgEFBQcwDYYpaHR0cHM6 Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw b3NpdG9yeS9GMzY2MDEzNy8zNDFENjQzRTVDMUMxMUVDQkQ2RkVCNkQ1QTQwRDU3 Ny92eTVSeUZvNmdYXzJ4X3pHa3daUGl6eDZtY1kubWZ0MB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCqe8AMA0GCSqGSIb3DQEBCwUAA4IBAQBQ8/IYzeL97lh6 n7YV/O0fgQB1Fy2UfXK+rwmAYWFI2CIGC7EheXcfSXT4oXaWZ2/K3e6zdehgWooE PDeKo3n6ysG3DegvZ6Ea+pdggKdBzgy1i2HoZTgaaXqDIHrI8BxQVCjPj/QXsFSh pb66VMzI1BbBaQvOONuzlwMXwt4DaOymdBjK8BGyrioTI89OIrX+9xGuXuhWWzZW 9tfKIlG8OejieCLtmku7XyZugqs/SYOIY5E/G7KvuYLkfe00KWgU48SIhaAjQd2o SB6VOAi8D59v48qYKJoAnYpgdI9O9+voAGPx31GDIcaAH+glqajrf426rHVO3N1H vleAZnPQ -----END CERTIFICATE-----Generated at Tue Jan 13 05:30:25 2026 by rpki-client