This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer File: 7362A987ABB0200A1FC035126DEA767619F0F15F.cer (raw, json) Hash identifier: 4GrNNGNSym5qUuDWv/IgFm/qVdSnZwAvBo1fDWiB0eQ= Subject key identifier: 73:62:A9:87:AB:B0:20:0A:1F:C0:35:12:6D:EA:76:76:19:F0:F1:5F Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 3C40B44C6BDA80EACE0D28CCACE4D960E5EF21B1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 09:28:23 +0000 Certificate not after: Tue 19 Jan 2027 09:33:23 +0000 Subordinate resources: IP: 2a0b:4e07:2::/48 IP: 2a0b:4e07:42::/48 IP: 2a0b:4e07:900::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:40:b4:4c:6b:da:80:ea:ce:0d:28:cc:ac:e4:d9:60:e5:ef:21:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jan 20 09:28:23 2026 GMT Not After : Jan 19 09:33:23 2027 GMT Subject: CN=7362A987ABB0200A1FC035126DEA767619F0F15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5f:af:d3:2b:1f:85:aa:c8:43:1d:39:4a:e3: 6c:28:b8:6c:98:0c:ba:e5:f7:99:d6:80:c9:52:ea: 9d:52:29:0e:2c:c2:d7:a3:17:51:de:bd:59:21:30: 8c:09:4b:74:5d:44:02:e5:91:b1:19:73:5a:6d:35: 4c:73:dc:71:54:2b:49:46:0a:32:35:a1:72:f2:78: 02:0c:1c:af:f5:b0:21:60:4b:4c:c2:28:f6:b1:6c: 41:b5:41:a5:49:ce:05:a6:41:e3:b1:d1:26:e3:79: f4:29:b9:20:ed:24:2d:10:a4:57:95:7e:db:90:0e: 1b:6c:a4:16:78:d9:52:9f:da:9b:b3:db:d0:a2:a7: c3:ab:6b:3e:ea:71:5e:c3:5d:45:6a:c9:7c:dc:16: bb:36:84:54:08:ea:90:37:01:55:29:3d:a1:3f:ab: 9b:f6:78:32:8a:65:fc:a9:30:83:ce:e9:58:7e:ba: 9d:77:1b:91:54:69:9a:65:44:ea:2f:53:34:26:6c: 37:99:0a:28:54:ba:85:2a:be:87:7c:ac:55:8b:c8: 22:65:a2:b9:ad:e0:6d:60:7b:f8:7c:10:ad:2f:c8: 7d:a5:5a:e9:d3:6f:fa:6d:b5:8d:ae:9a:35:dd:ca: f1:b2:64:d7:4c:68:ed:e1:8f:f8:a8:21:74:98:00: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:62:A9:87:AB:B0:20:0A:1F:C0:35:12:6D:EA:76:76:19:F0:F1:5F X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2::/48 2a0b:4e07:42::/48 2a0b:4e07:900::/40 Signature Algorithm: sha256WithRSAEncryption 55:f7:c2:30:68:32:96:21:d7:be:17:a4:9e:6d:8c:d3:f3:5d: 6d:14:76:7e:a9:f3:65:32:58:60:12:9d:39:e2:1e:54:90:67: e9:d3:fc:38:d0:4a:46:90:b4:a3:13:e3:84:dc:09:3c:59:99: 85:08:e9:a7:d9:05:bc:0c:7b:60:b8:80:31:f9:2b:ba:b7:5a: 27:79:39:a9:71:76:54:c3:f9:03:66:e3:5c:c8:97:47:73:fb: a4:f5:3f:02:8d:57:bd:e3:9b:57:3c:ee:91:20:6c:bf:24:6f: 82:3b:62:61:24:ee:42:17:82:eb:f5:d6:42:67:f8:67:20:b0: 99:17:33:11:20:77:42:f9:6c:ae:6c:dd:7d:e4:3b:90:6d:a9: 1f:8e:55:1c:93:8f:c4:5a:ba:f9:de:8a:04:a4:56:c7:ac:33: fc:2b:19:f4:75:69:9b:f4:68:f6:14:33:8e:78:08:5a:14:82: 18:c6:99:0e:d4:b7:e1:9d:c4:e8:9a:58:47:8c:6a:c4:d5:4a: 67:7d:fc:10:6e:d3:8c:29:71:a8:10:5b:c4:28:63:46:ef:ab: c9:8e:c1:12:cf:5e:e8:be:cc:75:20:a2:46:31:ae:90:b8:c4: b3:e5:2e:7f:6b:d4:07:89:05:5f:0d:74:99:51:4b:82:82:93: b4:f8:4e:96 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgIUPEC0TGvagOrODSjMrOTZYOXvIbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAxMjAwOTI4MjNaFw0yNzAxMTkwOTMzMjNaMDMxMTAvBgNV BAMTKDczNjJBOTg3QUJCMDIwMEExRkMwMzUxMjZERUE3Njc2MTlGMEYxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcX6/TKx+FqshDHTlK42wouGyY DLrl95nWgMlS6p1SKQ4swtejF1HevVkhMIwJS3RdRALlkbEZc1ptNUxz3HFUK0lG CjI1oXLyeAIMHK/1sCFgS0zCKPaxbEG1QaVJzgWmQeOx0SbjefQpuSDtJC0QpFeV ftuQDhtspBZ42VKf2puz29Cip8Oraz7qcV7DXUVqyXzcFrs2hFQI6pA3AVUpPaE/ q5v2eDKKZfypMIPO6Vh+up13G5FUaZplROovUzQmbDeZCihUuoUqvod8rFWLyCJl ormt4G1ge/h8EK0vyH2lWunTb/pttY2umjXdyvGyZNdMaO3hj/ioIXSYAKp5AgMB AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRzYqmHq7AgCh/A NRJt6nZ2GfDxXzAfBgNVHSMEGDAWgBRRJMMfz6ToLE0PbgmjCgSlXJd4vzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVkMzA1M2Y4 MjBmNS8xLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5 QTMwQTA0QTU1Qzk3NzhCRi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsG AQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2JmYzZmZDhmLTQ2YzMtNDY1Yi05ODEwLWQ4Zjc1YjgxNWY3Yi8wLzCBiwYI KwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvYmZjNmZkOGYtNDZjMy00NjViLTk4MTAtZDhmNzViODE1ZjdiLzAvNzM2 MkE5ODdBQkIwMjAwQTFGQzAzNTEyNkRFQTc2NzYxOUYwRjE1Ri5tZnQwPAYIKwYB BQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/ BCQwIjAgBAIAAjAaAwcAKgtOBwACAwcAKgtOBwBCAwYAKgtOBwkwDQYJKoZIhvcN AQELBQADggEBAFX3wjBoMpYh174XpJ5tjNPzXW0Udn6p82UyWGASnTniHlSQZ+nT /DjQSkaQtKMT44TcCTxZmYUI6afZBbwMe2C4gDH5K7q3Wid5OalxdlTD+QNm41zI l0dz+6T1PwKNV73jm1c87pEgbL8kb4I7YmEk7kIXguv11kJn+GcgsJkXMxEgd0L5 bK5s3X3kO5BtqR+OVRyTj8RauvneigSkVsesM/wrGfR1aZv0aPYUM454CFoUghjG mQ7Ut+GdxOiaWEeMasTVSmd9/BBu04wpcagQW8QoY0bvq8mOwRLPXui+zHUgokYx rpC4xLPlLn9r1AeJBV8NdJlRS4KCk7T4TpY= -----END CERTIFICATE-----Generated at Wed Jan 21 04:59:25 2026 by rpki-client