This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer File: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer (raw, json) Hash identifier: tNAy3hstId3V3MqwdP3yBED7GuozVAJNqywZlUZrXY8= Subject key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 336724B8541196BFE1F98944036FDCDC7448EE9A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 11:27:47 +0000 Certificate not after: Wed 13 Jan 2027 11:32:47 +0000 Subordinate resources: IP: 2a0b:4e07:c00::/38 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:67:24:b8:54:11:96:bf:e1:f9:89:44:03:6f:dc:dc:74:48:ee:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jan 14 11:27:47 2026 GMT Not After : Jan 13 11:32:47 2027 GMT Subject: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:c1:73:7a:0b:b6:70:b7:e7:80:d0:1f:92: df:bb:ef:de:7d:6f:75:4f:d9:10:74:17:00:0d:5e: 4f:0a:18:c4:5a:cd:74:24:2a:8f:12:83:89:83:6f: 49:35:7d:91:e4:a7:ed:86:55:ee:e9:84:7d:46:91: 48:46:52:ec:f8:f4:ab:15:e5:f8:b1:7b:ea:e0:b6: eb:d9:12:31:06:42:7c:74:98:ba:d5:d6:65:67:90: 34:68:33:07:68:f0:e1:b9:4c:c6:85:ce:c0:4c:3f: 99:93:d0:ae:47:64:7b:4d:03:28:e4:98:be:53:3e: 28:14:55:b7:5a:4a:16:e7:a3:62:67:e7:5a:9f:dc: 75:35:cb:30:39:5d:52:58:69:3f:78:26:9d:be:0c: 46:c4:7e:eb:fa:f6:f1:a7:cf:8f:60:f7:eb:f6:92: 19:d9:5a:53:cf:da:f8:63:c1:d8:55:e4:c8:5d:fd: 11:09:8a:7b:a2:ad:24:6a:cc:fc:ab:95:fb:52:26: 2f:3e:92:ea:0f:f6:62:42:0d:aa:47:e6:90:15:26: e6:ed:de:bc:42:cf:af:81:aa:f4:2c:52:4c:dc:a7: da:d9:b8:81:f4:bc:6b:af:79:e7:2c:4a:fb:e5:06: 0b:fe:f0:fe:f4:81:75:74:8f:96:51:65:b3:7d:35: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:c00::/38 Signature Algorithm: sha256WithRSAEncryption 9a:fd:36:11:c1:2c:3b:47:22:8e:4c:c7:48:ae:69:a8:fa:7d: 03:9a:c3:73:32:50:b0:2b:31:af:69:32:ac:e5:a0:74:ef:71: f0:ff:47:d3:98:5b:31:3d:11:56:1b:14:ba:76:6a:ab:f4:b9: f1:d8:53:a2:11:6b:ad:e9:67:4b:3b:be:ba:25:6b:e0:bf:b4: f2:aa:41:d5:c1:aa:ea:a1:9f:c9:e3:59:5f:ad:ff:d5:1f:a4: 2d:e2:23:f1:31:b0:f8:d9:03:21:e4:6a:28:2c:9b:87:96:0b: 69:31:3d:76:0c:07:ec:55:44:10:61:29:09:50:38:a5:1e:c0: 93:81:e6:0c:42:62:36:fb:83:d3:74:a8:3d:19:0b:d7:8b:90: 79:e0:15:2d:3a:9d:74:ad:cf:16:64:00:76:b1:08:e0:56:d5: 0d:59:69:97:be:a6:95:10:63:6c:01:fa:09:f9:43:8d:cf:b7: f8:e8:e2:71:56:2b:52:7b:a7:0f:42:04:a1:58:a3:47:ab:ce: a3:74:a6:ef:66:1e:9e:c5:ac:68:4a:20:9f:31:54:cf:f2:f1: 01:46:2b:a5:af:9b:8c:8b:98:38:b5:40:8c:ed:58:ec:9e:86: fb:07:46:fc:93:1d:34:a9:da:06:85:66:d9:03:e1:3b:42:75: 30:3d:88:36 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUM2ckuFQRlr/h+YlEA2/c3HRI7powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAxMTQxMTI3NDdaFw0yNzAxMTMxMTMyNDdaMDMxMTAvBgNV BAMTKDg3OTI4MEE3RDlFNkRERERDQ0IyOUU5QTc3ODE5RDVDRTM4MjMxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/D8Fzegu2cLfngNAfkt+77959 b3VP2RB0FwANXk8KGMRazXQkKo8Sg4mDb0k1fZHkp+2GVe7phH1GkUhGUuz49KsV 5fixe+rgtuvZEjEGQnx0mLrV1mVnkDRoMwdo8OG5TMaFzsBMP5mT0K5HZHtNAyjk mL5TPigUVbdaShbno2Jn51qf3HU1yzA5XVJYaT94Jp2+DEbEfuv69vGnz49g9+v2 khnZWlPP2vhjwdhV5Mhd/REJinuirSRqzPyrlftSJi8+kuoP9mJCDapH5pAVJubt 3rxCz6+BqvQsUkzcp9rZuIH0vGuveecsSvvlBgv+8P70gXV0j5ZRZbN9NbUnAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHkoCn2ebd3cyy npp3gZ1c44IxhTAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzEvODc5 MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYCKgtOBwwwDQYJKoZIhvcNAQELBQADggEBAJr9NhHBLDtH Io5Mx0iuaaj6fQOaw3MyULArMa9pMqzloHTvcfD/R9OYWzE9EVYbFLp2aqv0ufHY U6IRa63pZ0s7vrola+C/tPKqQdXBquqhn8njWV+t/9UfpC3iI/ExsPjZAyHkaigs m4eWC2kxPXYMB+xVRBBhKQlQOKUewJOB5gxCYjb7g9N0qD0ZC9eLkHngFS06nXSt zxZkAHaxCOBW1Q1ZaZe+ppUQY2wB+gn5Q43Pt/jo4nFWK1J7pw9CBKFYo0erzqN0 pu9mHp7FrGhKIJ8xVM/y8QFGK6Wvm4yLmDi1QIztWOyehvsHRvyTHTSp2gaFZtkD 4TtCdTA9iDY= -----END CERTIFICATE-----Generated at Sat Jan 17 08:38:37 2026 by rpki-client