This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer (raw, json) Hash identifier: ahqaV+4HiHOPpaj3qi3VIVptaYHuX0yC+1yMijM7WQI= Subject key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 435BD249D5C611A4B8BB048199473D7216CAADB0 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 04 Jul 2025 14:50:27 +0000 Certificate not after: Fri 03 Jul 2026 14:55:27 +0000 Subordinate resources: IP: 2a0a:6044:a300::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 11:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5b:d2:49:d5:c6:11:a4:b8:bb:04:81:99:47:3d:72:16:ca:ad:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 4 14:50:27 2025 GMT Not After : Jul 3 14:55:27 2026 GMT Subject: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:f5:b2:fd:e1:6b:ec:89:23:f1:ee:76:61: b7:52:0e:20:1c:34:53:c3:2a:bb:57:d3:95:f7:df: 6c:7b:ea:14:f6:ee:9e:04:17:a7:16:1f:70:a7:da: d4:d0:d8:d1:5d:69:46:46:84:c8:ac:73:c5:ba:79: bc:cb:34:60:8d:1e:0f:0e:14:ee:66:45:71:cb:0f: bd:7a:45:06:a1:ee:7d:b4:ff:52:09:cb:ed:39:06: fb:34:ad:ee:f2:d5:5f:00:61:1c:7b:8f:72:16:0a: 81:ef:86:00:73:06:fb:fe:43:24:ae:30:f9:2b:9a: 24:86:72:82:b4:5f:62:e5:82:09:b4:8d:c3:11:94: 33:af:e0:3f:68:65:ef:36:06:ce:34:8d:ab:70:f7: 76:6d:92:ce:f6:ca:2e:f4:df:a9:5c:12:5b:f7:60: 3d:d4:fd:7b:72:d5:0d:97:e2:21:9e:07:a1:bb:1d: cc:6d:fc:a3:cb:e4:5c:27:05:86:7d:2f:a6:ef:66: f8:84:7f:e2:6a:28:36:b1:71:82:d6:0e:21:8d:a7: ba:ae:36:b2:71:1e:c7:38:fc:33:3f:55:4f:cb:77: 53:5e:51:12:58:d1:7b:5a:71:70:f5:ca:17:8e:6d: 52:2b:05:b5:9e:8b:b5:61:da:f6:78:83:cb:4a:61: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a300::/40 Signature Algorithm: sha256WithRSAEncryption 81:ee:52:5c:82:41:48:32:be:da:46:c3:43:a1:84:1d:a6:74: dd:56:e1:df:63:fe:c9:8a:a8:28:af:d8:e9:47:e0:c9:e3:94: 38:96:d7:55:c0:90:10:c8:8d:03:b4:e0:0c:4b:32:34:55:68: b1:e9:29:06:bc:ad:b1:50:c7:75:72:ed:91:b1:e3:aa:69:d8: bc:ac:49:1b:18:48:0b:ca:50:48:4b:63:76:8c:1e:89:c6:b8: f5:2d:dd:8e:5d:ec:f3:c0:86:0a:d6:47:76:9c:bd:1c:30:41: b6:81:20:5a:c5:d7:64:90:27:52:6e:bf:97:ff:b6:bf:e1:99: bf:25:9e:2a:70:0b:70:2f:ed:36:fc:02:c1:33:88:1e:2e:e2: 0a:8a:e4:f9:e5:c4:fe:0f:90:05:d8:6c:b8:a6:61:28:83:b8: 64:7e:ad:70:48:1b:6f:51:86:9f:37:65:04:57:44:34:c9:96: 79:8c:f6:c9:06:91:f3:38:c0:aa:a3:94:d3:21:88:03:89:a0: 97:f4:7b:f3:7d:7a:ac:73:b9:e8:74:91:04:68:0c:c0:94:e5: d1:83:06:d5:4a:f4:a9:13:28:73:04:4c:90:e3:7d:c9:61:55: 3c:7a:0f:56:2b:e4:ee:4f:a2:0f:ae:d1:65:11:32:6a:2b:97: 5c:54:f6:bd -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQ1vSSdXGEaS4uwSBmUc9chbKrbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDQxNDUwMjdaFw0yNjA3MDMxNDU1MjdaMDMxMTAvBgNV BAMTKDJGMkMzMTI0MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZnfWy/eFr7Ikj8e52YbdSDiAc NFPDKrtX05X332x76hT27p4EF6cWH3Cn2tTQ2NFdaUZGhMisc8W6ebzLNGCNHg8O FO5mRXHLD716RQah7n20/1IJy+05Bvs0re7y1V8AYRx7j3IWCoHvhgBzBvv+QySu MPkrmiSGcoK0X2Llggm0jcMRlDOv4D9oZe82Bs40jatw93Ztks72yi7036lcElv3 YD3U/Xty1Q2X4iGeB6G7Hcxt/KPL5FwnBYZ9L6bvZviEf+JqKDaxcYLWDiGNp7qu NrJxHsc4/DM/VU/Ld1NeURJY0XtacXD1yheObVIrBbWei7Vh2vZ4g8tKYYzLAgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvLDEkASwH9nda YkHfxjvgQUyYrTAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4Lzkv MkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYAKgpgRKMwDQYJKoZIhvcNAQELBQADggEBAIHuUlyC QUgyvtpGw0OhhB2mdN1W4d9j/smKqCiv2OlH4MnjlDiW11XAkBDIjQO04AxLMjRV aLHpKQa8rbFQx3Vy7ZGx46pp2LysSRsYSAvKUEhLY3aMHonGuPUt3Y5d7PPAhgrW R3acvRwwQbaBIFrF12SQJ1Juv5f/tr/hmb8lnipwC3Av7Tb8AsEziB4u4gqK5Pnl xP4PkAXYbLimYSiDuGR+rXBIG29Rhp83ZQRXRDTJlnmM9skGkfM4wKqjlNMhiAOJ oJf0e/N9eqxzueh0kQRoDMCU5dGDBtVK9KkTKHMETJDjfclhVTx6D1Yr5O5Pog+u 0WURMmorl1xU9r0= -----END CERTIFICATE-----Generated at Sat Nov 22 21:57:08 2025 by rpki-client