This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer (raw, json) Hash identifier: 1PqhYKoiKUuf3aMRjFNEk+KeKyOIIxV7W/nmkVhj5VQ= Subject key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 2E8E9E0343032C15E2B2B245D6D3FC67B6AC57FA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 05 Feb 2026 14:23:34 +0000 Certificate not after: Thu 04 Feb 2027 14:28:34 +0000 Subordinate resources: IP: 2a0b:4e07:5000::/36 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8e:9e:03:43:03:2c:15:e2:b2:b2:45:d6:d3:fc:67:b6:ac:57:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Feb 5 14:23:34 2026 GMT Not After : Feb 4 14:28:34 2027 GMT Subject: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:34:c0:09:23:2c:4a:35:a3:07:5a:2b:b7: f3:f3:c0:e9:ef:2a:83:ca:56:9a:db:aa:74:0c:6d: 7a:29:42:30:09:d2:89:53:95:1c:e0:27:81:66:14: f3:28:ef:e3:31:f1:dd:9c:07:49:8d:e7:62:4d:ff: 42:e9:eb:01:d3:62:f0:e3:81:29:51:23:ff:5d:95: 45:d5:6a:80:92:24:9e:53:04:08:92:4a:d7:57:6f: f4:51:56:4e:3b:8c:bc:76:2f:17:36:78:61:df:92: 7a:6c:0e:b1:6b:06:ea:53:d2:da:fc:8c:03:85:99: d9:42:04:1e:36:3f:ea:db:39:fd:79:db:40:ac:0a: 3b:34:82:a1:39:7c:ba:03:28:f2:59:b9:3c:1e:b0: fe:58:4c:fd:da:87:fb:16:d8:28:5a:ad:89:e6:46: 85:d9:bf:3a:2d:2c:c5:ce:9b:af:f9:e9:a3:aa:66: 4d:15:16:35:d6:06:b3:e8:df:17:5c:63:00:54:05: ba:71:03:0f:16:44:11:3c:b3:09:6a:9f:41:65:7d: 25:6e:03:ea:3b:87:07:d8:f3:06:d3:07:01:fb:fe: d3:c1:46:43:11:ea:c2:c7:f2:b2:b0:48:59:e0:5c: 6f:e1:c8:5e:c8:61:47:01:f8:9e:6b:56:6c:1c:2c: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:5000::/36 Signature Algorithm: sha256WithRSAEncryption 21:e0:ee:10:58:99:f6:a3:79:e8:bc:e7:a2:47:0c:6b:2a:13: 28:b8:b3:c1:ce:42:da:17:4c:d3:3a:cf:3e:3d:a2:d8:52:5b: 70:66:9f:b0:fe:6c:74:9b:5e:ef:a1:ad:41:3b:d0:59:bb:d1: cd:89:a8:e5:bf:91:9c:0e:b1:70:f2:b2:eb:ec:f3:42:ae:bc: e8:53:4c:ea:de:95:59:e6:ab:49:98:8d:a5:a5:14:df:7b:e5: 58:d4:39:ad:de:49:ff:2c:ab:b6:3c:34:f8:64:8e:a9:7d:13: 45:b2:3e:f4:cc:f5:ec:1e:55:78:51:24:2a:8e:fa:2e:45:a6: 51:47:ec:8f:d6:5a:dd:d4:93:99:cf:c7:c8:6a:d6:94:a8:27: 16:32:49:c4:f5:71:fb:58:70:29:a7:12:43:ff:4e:42:3f:7b: fa:21:ba:2c:79:72:b5:68:30:2e:e2:3a:b8:d3:60:14:96:0e: 89:03:ac:f6:c2:b8:5c:07:e0:6f:36:a2:fc:86:0c:43:e6:3e: 9a:73:4d:40:97:07:d7:58:da:54:86:68:a1:b3:8f:e7:5e:cf: 89:73:25:22:01:43:c6:79:8f:9e:d2:ae:0c:17:d4:74:60:10: a3:54:57:75:f4:79:1a:79:a7:17:a3:21:9a:53:03:8d:1d:9f: 7a:8d:4b:83 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIULo6eA0MDLBXisrJF1tP8Z7asV/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAyMDUxNDIzMzRaFw0yNzAyMDQxNDI4MzRaMDMxMTAvBgNV BAMTKDcxQURCQ0I4MDVFRUVFNDRBN0ZEQzA3Q0E1NEFENjYxMEM4MUUxQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmDTACSMsSjWjB1ort/PzwOnv KoPKVprbqnQMbXopQjAJ0olTlRzgJ4FmFPMo7+Mx8d2cB0mN52JN/0Lp6wHTYvDj gSlRI/9dlUXVaoCSJJ5TBAiSStdXb/RRVk47jLx2Lxc2eGHfknpsDrFrBupT0tr8 jAOFmdlCBB42P+rbOf1520CsCjs0gqE5fLoDKPJZuTwesP5YTP3ah/sW2CharYnm RoXZvzotLMXOm6/56aOqZk0VFjXWBrPo3xdcYwBUBbpxAw8WRBE8swlqn0FlfSVu A+o7hwfY8wbTBwH7/tPBRkMR6sLH8rKwSFngXG/hyF7IYUcB+J5rVmwcLHpTAgMB AAGjggMOMIIDCjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxrby4Be7uRKf9 wHylStZhDIHhszAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5LzZlN2Y3NDdlLWZmNjgtNGZhMi1iMmUzLWY2ZWRlNTQ4YTMyMC8xLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhhMzIwLzEvNzFB REJDQjgwNUVFRUU0NEE3RkRDMDdDQTU0QUQ2NjEwQzgxRTFCMy5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYEKgtOB1AwDQYJKoZIhvcNAQELBQADggEBACHg7hBYmfaj eei856JHDGsqEyi4s8HOQtoXTNM6zz49othSW3Bmn7D+bHSbXu+hrUE70Fm70c2J qOW/kZwOsXDysuvs80KuvOhTTOrelVnmq0mYjaWlFN975VjUOa3eSf8sq7Y8NPhk jql9E0WyPvTM9eweVXhRJCqO+i5FplFH7I/WWt3Uk5nPx8hq1pSoJxYyScT1cftY cCmnEkP/TkI/e/ohuix5crVoMC7iOrjTYBSWDokDrPbCuFwH4G82ovyGDEPmPppz TUCXB9dY2lSGaKGzj+dez4lzJSIBQ8Z5j57SrgwX1HRgEKNUV3X0eRp5pxejIZpT A40dn3qNS4M= -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:51 2026 by rpki-client