This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
File:                     zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer (raw, json)
Hash identifier:          J5OERNAfhJQIgAQxIuhuOpUDNjDzs9dmnhZEjTY8q3g=
Subject key identifier:   CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1A26
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:57:49 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 164.160.184.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Jan 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6694 (0x1a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 00:57:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3698125AR, serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:7f:93:44:79:b4:99:4a:49:eb:ae:69:6e:
                    53:5b:09:76:a4:83:4a:24:02:2e:3c:c8:38:56:ac:
                    1d:e2:bd:36:00:e0:bc:4f:b8:81:78:49:5b:ea:99:
                    57:2b:2d:a6:60:99:78:49:a0:7d:ad:5a:35:c6:b1:
                    37:85:c5:b9:51:cc:cd:95:6d:f4:05:36:6f:33:5f:
                    e2:f1:73:70:d8:d2:0c:77:0f:ff:6a:71:63:6e:c2:
                    e6:38:d7:39:eb:e5:b8:ae:ce:59:4a:02:01:3d:26:
                    ca:c0:41:0f:d6:c8:1e:b2:b9:9d:23:23:8e:d3:54:
                    b6:0c:ac:3b:23:40:49:46:8d:29:73:34:9f:86:94:
                    06:97:5b:74:dc:1a:28:9d:a2:1c:ab:ea:30:0e:2c:
                    0a:8a:cf:70:53:21:46:09:aa:5c:1c:77:41:5b:46:
                    14:59:89:f5:c9:1c:b2:0e:42:69:ab:8c:6c:fe:bf:
                    37:a8:9d:c4:c0:43:94:1d:11:f9:f1:65:b6:16:02:
                    59:79:3d:9d:9f:01:f3:0d:ee:74:d5:70:bf:b7:a1:
                    a5:d5:e2:b6:98:bf:92:2b:b7:74:e3:66:f6:1a:8f:
                    41:a5:fb:a4:36:3d:49:c8:f8:04:1c:9f:e9:1c:72:
                    ae:c7:29:c2:61:6e:3e:a5:a7:62:9a:c1:45:c5:68:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:8a:ad:ec:40:96:96:e0:87:1b:66:56:50:ec:3e:99:cc:53:
         13:e9:b1:b0:91:bd:7a:99:0d:5d:41:40:fb:42:73:fa:7d:1c:
         f0:31:ee:5b:86:13:1e:5b:d3:60:5b:02:93:cb:74:8c:2e:d0:
         b9:c3:e0:c7:bf:7c:57:ef:f3:9e:d9:f7:cf:02:c7:d6:37:e4:
         32:d4:68:b5:df:8d:3c:20:28:a6:95:92:1c:e7:cf:b6:8c:61:
         43:07:25:b9:be:e4:f6:b0:14:8f:17:c8:45:5e:50:7a:b4:24:
         12:1f:dc:2a:b1:1e:72:ed:d8:95:44:69:32:53:12:5b:c7:38:
         ae:e0:b3:fa:eb:52:0a:af:00:39:08:64:cd:04:b6:59:c5:9c:
         c5:bf:96:1a:ed:81:b2:dc:11:c3:bb:60:42:df:b5:e3:9a:48:
         ea:26:54:56:47:32:db:65:98:44:ae:12:a8:96:a4:7a:2b:96:
         4c:56:0e:0a:c9:7d:49:90:87:a6:ab:f7:db:cc:29:12:23:04:
         30:d1:da:6c:57:a1:5c:03:5c:c9:a8:c8:bd:d8:cd:91:85:51:
         35:65:57:31:eb:e5:be:0d:dc:a9:0f:7f:70:9d:aa:dc:93:c9:
         40:48:e8:c0:dc:be:f8:c8:2e:ff:50:b4:70:24:a2:87:a6:fb:
         2b:db:38:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:48:39 2026 by rpki-client