This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/5A4616047B182390E89624F93C238F3F455C65B0.cer File: 5A4616047B182390E89624F93C238F3F455C65B0.cer (raw, json) Hash identifier: ypkYBweAdX6Mq6/2cFbecL3t1wEcf73t1ml4NcwDGE4= Subject key identifier: 5A:46:16:04:7B:18:23:90:E8:96:24:F9:3C:23:8F:3F:45:5C:65:B0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 468C925851A4BCD3DE54412367E630248ECE64F8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 15:00:27 +0000 Certificate not after: Fri 01 Jan 2027 15:05:27 +0000 Subordinate resources: IP: 2a05:dfc3:fa00::/40 IP: 2a0a:6044:6400::/40 IP: 2a0a:6044:aa10::/48 IP: 2a0a:6044:c110::/44 IP: 2a0f:6286::/32 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8c:92:58:51:a4:bc:d3:de:54:41:23:67:e6:30:24:8e:ce:64:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jan 2 15:00:27 2026 GMT Not After : Jan 1 15:05:27 2027 GMT Subject: CN=5A4616047B182390E89624F93C238F3F455C65B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:0e:cb:e4:6f:57:c4:95:1b:ec:49:56:e5: 8f:1b:47:0e:af:f3:ee:24:53:35:ec:c3:3e:8d:35: 12:b1:4f:d7:b6:bc:7b:97:20:a5:d7:c0:27:b4:4d: 06:0e:3a:18:a1:b5:0b:da:a5:8f:a5:66:03:b5:14: 0a:06:76:94:17:e9:53:8a:70:0d:b7:ad:e8:01:c3: 0f:ec:ac:82:8c:35:21:89:89:5c:60:c7:fd:56:cd: 17:38:e8:5e:cd:f4:79:fd:0c:ed:ec:85:da:b3:6d: 26:e7:79:be:8b:05:9e:60:f9:e9:57:7e:34:d6:d4: 5b:e9:79:87:80:9b:73:26:a8:0b:6c:f7:65:3c:51: cd:c8:14:a5:5c:aa:2a:11:42:87:18:5a:9b:30:6c: c3:b6:2d:0f:f1:2d:8c:07:48:cb:54:8a:41:f9:75: 7a:ac:90:9c:cb:64:43:18:ab:54:f3:04:73:4a:4a: 18:b9:36:a6:54:cd:d9:9f:70:4e:2a:96:39:34:33: e0:ed:02:4c:e6:23:a5:1e:dc:25:ec:9f:09:b8:93: 3d:00:3d:de:cc:11:b6:7c:ab:d2:c4:2b:85:8a:62: db:63:3e:91:ce:35:c6:83:24:90:fa:1d:d9:9b:23: 2f:32:10:74:5c:cc:80:ad:8e:0a:93:be:d4:a8:fc: 56:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:46:16:04:7B:18:23:90:E8:96:24:F9:3C:23:8F:3F:45:5C:65:B0 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fa00::/40 2a0a:6044:6400::/40 2a0a:6044:aa10::/48 2a0a:6044:c110::/44 2a0f:6286::/32 Signature Algorithm: sha256WithRSAEncryption 5b:fc:1c:66:8d:ef:71:ae:26:dd:aa:b8:8b:13:1e:72:4b:89: 33:d1:e0:9b:a7:7e:85:58:8b:86:56:db:6b:98:6b:bb:24:a7: 6d:09:9d:1e:cb:e6:41:07:94:9c:1a:4d:78:17:c0:29:43:25: 55:10:7e:98:e9:e4:2f:26:15:9c:c6:6d:07:fb:d6:be:eb:98: 18:fb:d1:03:ee:bf:98:55:bb:41:55:b0:5c:a1:bb:3f:32:4b: 20:8d:8b:47:42:81:4a:00:e2:0c:7e:10:c2:6e:6f:09:b1:68: 6d:1f:8d:a0:70:ac:2f:cc:35:a4:7d:91:00:82:69:5c:d8:88: 9d:a2:37:80:59:12:04:d4:75:bd:43:ca:d0:9a:69:e5:bd:ac: 6b:20:64:2d:8f:3f:4d:e2:b8:79:06:c6:81:61:e2:9e:34:5b: 41:eb:a9:43:f1:91:15:e6:95:0b:e1:e7:a9:a1:6d:dc:f8:04: f5:1e:99:15:7c:a6:24:ce:bc:7e:f7:7d:67:4c:45:04:4b:8d: d4:43:5b:5c:7a:af:6e:4b:a7:e5:b7:e9:71:59:4a:5e:99:8b: a4:fa:2a:c7:0e:ea:a8:a8:70:18:ec:35:2e:9c:f2:a2:a2:c1: 55:52:15:ac:e5:b8:56:44:13:11:12:41:e3:57:00:72:fe:c1: 9f:ee:52:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURoySWFGkvNPeVEEjZ+YwJI7OZPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAxMDIxNTAwMjdaFw0yNzAxMDExNTA1MjdaMDMxMTAvBgNV BAMTKDVBNDYxNjA0N0IxODIzOTBFODk2MjRGOTNDMjM4RjNGNDU1QzY1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDag7L5G9XxJUb7ElW5Y8bRw6v 8+4kUzXswz6NNRKxT9e2vHuXIKXXwCe0TQYOOhihtQvapY+lZgO1FAoGdpQX6VOK cA23regBww/srIKMNSGJiVxgx/1WzRc46F7N9Hn9DO3shdqzbSbneb6LBZ5g+elX fjTW1FvpeYeAm3MmqAts92U8Uc3IFKVcqioRQocYWpswbMO2LQ/xLYwHSMtUikH5 dXqskJzLZEMYq1TzBHNKShi5NqZUzdmfcE4qljk0M+DtAkzmI6Ue3CXsnwm4kz0A Pd7MEbZ8q9LEK4WKYttjPpHONcaDJJD6HdmbIy8yEHRczICtjgqTvtSo/FZXAgMB AAGjggMCMIIC/jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaRhYEexgjkOiW JPk8I48/RVxlsDAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzRhNjIxNzNlLWU2YWYtNDBiYy1hYmE4LTFmNjgxYjEyNDBmOC8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNGE2MjE3M2UtZTZhZi00MGJjLWFiYTgtMWY2ODFiMTI0MGY4LzIv NUE0NjE2MDQ3QjE4MjM5MEU4OTYyNEY5M0MyMzhGM0Y0NTVDNjVCMC5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEH AQH/BDMwMTAvBAIAAjApAwYAKgXfw/oDBgAqCmBEZAMHACoKYESqEAMHBCoKYETB EAMFACoPYoYwDQYJKoZIhvcNAQELBQADggEBAFv8HGaN73GuJt2quIsTHnJLiTPR 4JunfoVYi4ZW22uYa7skp20JnR7L5kEHlJwaTXgXwClDJVUQfpjp5C8mFZzGbQf7 1r7rmBj70QPuv5hVu0FVsFyhuz8ySyCNi0dCgUoA4gx+EMJubwmxaG0fjaBwrC/M NaR9kQCCaVzYiJ2iN4BZEgTUdb1DytCaaeW9rGsgZC2PP03iuHkGxoFh4p40W0Hr qUPxkRXmlQvh56mhbdz4BPUemRV8piTOvH73fWdMRQRLjdRDW1x6r25Lp+W36XFZ Sl6Zi6T6KscO6qiocBjsNS6c8qKiwVVSFazluFZEExESQeNXAHL+wZ/uUtQ= -----END CERTIFICATE-----Generated at Sat Jan 10 14:24:04 2026 by rpki-client