This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer File: 497EA28AB98266097873E53DF89DA97C44267B14.cer (raw, json) Hash identifier: KCE1MycDZewGfnjWOP5II3INH37vQ/A5KtbZXBXsgls= Subject key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 2C29B86463F34C6D094D14BC85BD89FE19890D83 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 13:51:38 +0000 Certificate not after: Thu 03 Dec 2026 13:56:38 +0000 Subordinate resources: IP: 2a0b:4e07:a00::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:29:b8:64:63:f3:4c:6d:09:4d:14:bc:85:bd:89:fe:19:89:0d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Dec 4 13:51:38 2025 GMT Not After : Dec 3 13:56:38 2026 GMT Subject: CN=497EA28AB98266097873E53DF89DA97C44267B14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:86:92:79:b6:71:3c:31:6b:b3:21:ac:99: 7b:a0:4c:c1:1d:82:b6:af:18:f2:3a:2c:17:ef:60: 5c:6d:27:ce:e2:c7:57:3d:cc:9b:8a:e9:42:91:c1: 76:ea:22:9c:5f:3e:9c:2a:4c:01:65:06:30:20:02: f2:8f:bc:e9:8c:68:d9:84:8a:c1:fe:9f:8e:d0:29: 6a:30:b8:5b:96:86:56:78:02:ee:f2:56:1e:f2:2b: 23:8d:ad:2e:14:e7:bb:7f:ab:d6:74:b0:b4:3e:5b: 9a:6b:fe:55:37:d6:f2:8e:08:ad:18:64:f4:75:6f: a5:10:7a:82:6a:c2:50:73:0d:5d:5b:42:f9:c8:91: 3d:85:f1:3c:00:89:6a:0c:7d:eb:11:0e:85:f5:46: a4:e8:58:23:a8:a6:1c:8c:a0:6f:be:a6:c6:22:68: 43:71:ea:56:44:e2:c2:0b:fa:42:d5:22:09:32:24: d2:0b:58:d1:a2:c4:b7:c8:f2:6f:88:ed:60:04:e8: 3a:19:a9:2b:ac:17:95:7f:78:87:c3:03:43:1a:d4: 02:dc:a5:87:73:f8:db:dd:6c:3f:fa:b3:02:29:d9: 1d:42:05:54:fb:be:a9:bd:9d:19:f9:a3:79:89:56: 0f:77:20:a8:5d:cf:25:f9:b0:8d:d4:6b:1d:7e:58: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a00::/40 Signature Algorithm: sha256WithRSAEncryption 58:17:ba:62:d0:55:78:7d:cf:d1:65:22:92:73:bf:df:36:5f: 7a:f5:44:9c:bb:1e:7d:80:bd:e1:0e:bc:83:c2:d7:31:9d:71: 73:01:81:c0:90:07:18:5c:6c:81:2b:80:88:65:44:87:87:55: 2b:be:da:cc:be:9d:95:ce:83:d7:f1:86:7c:74:c4:de:ca:87: 8a:b6:1a:4b:c5:27:eb:34:b1:3c:2d:a1:cd:de:5f:ce:97:5d: 2c:86:f7:74:0e:8b:1a:e7:d6:56:2f:7d:b5:2a:63:ab:66:63: 10:17:c7:6e:e1:4a:6c:ed:13:b2:e5:90:b2:03:df:7b:02:34: 39:9c:81:53:6b:d3:12:87:62:b0:80:ff:d9:e4:81:6f:03:b3: 6d:1f:e3:69:96:63:6b:71:0c:ee:a5:ef:36:d9:fb:17:07:ea: bb:47:30:04:81:d3:85:bc:29:4e:3f:7d:31:2b:69:e5:76:c1: b1:31:71:c9:00:01:ef:37:b2:a5:9e:04:aa:61:8f:bd:89:09: d2:2b:24:89:3d:c4:d9:06:84:97:3f:fd:05:85:21:11:21:30: 00:8e:11:e0:f6:66:b1:21:26:5f:c8:3d:21:38:90:1c:8b:4e: 23:c5:13:01:8b:84:88:81:40:d4:cb:d7:01:fd:96:33:1b:ce: b6:2f:6f:0c -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIULCm4ZGPzTG0JTRS8hb2J/hmJDYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTEyMDQxMzUxMzhaFw0yNjEyMDMxMzU2MzhaMDMxMTAvBgNV BAMTKDQ5N0VBMjhBQjk4MjY2MDk3ODczRTUzREY4OURBOTdDNDQyNjdCMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvI4aSebZxPDFrsyGsmXugTMEd gravGPI6LBfvYFxtJ87ix1c9zJuK6UKRwXbqIpxfPpwqTAFlBjAgAvKPvOmMaNmE isH+n47QKWowuFuWhlZ4Au7yVh7yKyONrS4U57t/q9Z0sLQ+W5pr/lU31vKOCK0Y ZPR1b6UQeoJqwlBzDV1bQvnIkT2F8TwAiWoMfesRDoX1RqToWCOophyMoG++psYi aENx6lZE4sIL+kLVIgkyJNILWNGixLfI8m+I7WAE6DoZqSusF5V/eIfDA0Ma1ALc pYdz+NvdbD/6swIp2R1CBVT7vqm9nRn5o3mJVg93IKhdzyX5sI3Uax1+WEvNAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJfqKKuYJmCXhz 5T34nal8RCZ7FDAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2I5MGU2ODYwLTM3MjEtNDhjNC1hM2ZlLTExYjFmMmMwZGY1Zi8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBkZjVmLzEvNDk3 RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAKgtOBwowDQYJKoZIhvcNAQELBQADggEBAFgXumLQVXh9 z9FlIpJzv982X3r1RJy7Hn2AveEOvIPC1zGdcXMBgcCQBxhcbIErgIhlRIeHVSu+ 2sy+nZXOg9fxhnx0xN7Kh4q2GkvFJ+s0sTwtoc3eX86XXSyG93QOixrn1lYvfbUq Y6tmYxAXx27hSmztE7LlkLID33sCNDmcgVNr0xKHYrCA/9nkgW8Ds20f42mWY2tx DO6l7zbZ+xcH6rtHMASB04W8KU4/fTEraeV2wbExcckAAe83sqWeBKphj72JCdIr JIk9xNkGhJc//QWFIREhMACOEeD2ZrEhJl/IPSE4kByLTiPFEwGLhIiBQNTL1wH9 ljMbzrYvbww= -----END CERTIFICATE-----Generated at Fri Dec 5 20:26:58 2025 by rpki-client