This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer File: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer (raw, json) Hash identifier: wZhHXiY3kMPRYU/mCQQ0ANpMLYdcs8BUxwwa0hJDauU= Subject key identifier: 18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 31699B405CE0C6C7E124D3F16CEE79063A297FDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 09 Jan 2026 11:31:53 +0000 Certificate not after: Fri 08 Jan 2027 11:36:53 +0000 Subordinate resources: IP: 111.235.151.0/24 IP: 2a09:54c3::/32 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:69:9b:40:5c:e0:c6:c7:e1:24:d3:f1:6c:ee:79:06:3a:29:7f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Jan 9 11:31:53 2026 GMT Not After : Jan 8 11:36:53 2027 GMT Subject: CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1a:8d:1b:a7:8f:7d:d6:d4:55:2a:9a:1e:e5: c5:d5:4e:20:5f:ce:51:55:ac:3e:62:37:02:95:b0: 56:bb:01:59:b4:54:20:ce:4b:24:ac:29:52:64:a9: 90:d2:53:24:84:b5:8e:36:cc:bd:92:d3:50:b6:b9: aa:06:0b:71:d6:27:9b:cf:1e:68:4a:36:b4:03:20: 55:bc:83:97:ac:1a:96:70:3c:af:36:13:63:f3:2c: 54:82:f8:40:42:f9:6f:21:e9:f7:85:68:b7:57:c6: 34:0e:b4:a5:b3:53:99:c9:7a:8a:6b:6e:43:a7:3f: ea:22:33:57:fc:7e:7e:ad:01:4a:bd:0f:45:82:0c: 35:3a:ec:dd:6e:88:e5:79:89:b5:2a:d1:4a:4a:77: 48:b6:0f:e8:51:f0:bb:41:36:31:be:f1:4c:78:4b: 52:47:79:1f:4b:9d:e3:50:fa:a5:d6:44:f2:03:c2: ae:be:b2:33:85:d1:c4:61:28:8d:99:67:54:e1:74: 4b:3f:32:df:9b:a5:a9:4f:84:60:9e:0f:4c:99:a7: 30:90:ff:f1:ba:fd:28:cc:7f:f2:b5:23:e4:bc:ab: 8d:be:cd:17:f8:3a:62:59:05:0e:0e:cb:94:02:95: 44:44:59:c0:df:9b:7b:f1:07:1e:e0:48:8a:54:4a: d2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.235.151.0/24 IPv6: 2a09:54c3::/32 Signature Algorithm: sha256WithRSAEncryption ad:c2:a4:1c:7c:b4:1d:d6:25:33:5c:cd:28:23:9f:8a:0d:46: 6c:a5:db:b8:5e:d5:cc:15:9d:2f:18:6d:49:ef:69:82:4d:8c: 3c:3f:28:40:e8:f2:23:4e:27:6a:b9:af:a3:6d:a3:f8:cb:b4: a9:a1:31:c1:1e:e5:37:61:a9:56:75:52:3a:92:37:53:30:da: e8:7e:0e:ab:5e:ba:10:7f:46:9a:30:2f:69:25:a0:40:3f:f2: 3f:18:ce:0b:fb:37:61:8c:95:9e:ea:bd:85:91:47:d8:e1:ed: 4a:d6:9f:f3:59:6e:e8:a9:29:99:9a:a4:16:7a:da:33:3d:4b: 8d:70:0f:c9:dc:d1:ae:bb:73:2f:5a:43:b0:46:52:ef:95:4a: 4e:ab:e8:9f:83:73:9f:7e:00:2c:11:80:7f:36:41:dc:8e:3b: 60:02:9a:b7:1e:c6:69:a1:7e:8b:f7:64:e1:2d:dd:a3:88:1a: 0c:76:d6:d3:b4:08:97:0a:4b:80:87:c4:01:5e:e7:60:4c:ed: ce:fe:0e:32:74:b1:81:29:20:be:2e:6e:6f:4d:55:39:2f:c5: 2c:5b:67:9b:d1:06:3f:d3:02:82:f7:1a:0d:ad:b8:fa:f3:90: 1d:24:82:e0:b6:60:9e:ab:34:65:34:82:57:82:4c:e0:db:8b: 3b:66:d0:28 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUMWmbQFzgxsfhJNPxbO55Bjopf94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNjAxMDkxMTMxNTNaFw0yNzAxMDgxMTM2NTNaMDMxMTAvBgNV BAMTKDE4ODA3OEVBOEFCRDU2MUU3QzEzRUZDRTkxMzFCQzY3MURFMjlGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGo0bp4991tRVKpoe5cXVTiBf zlFVrD5iNwKVsFa7AVm0VCDOSySsKVJkqZDSUySEtY42zL2S01C2uaoGC3HWJ5vP HmhKNrQDIFW8g5esGpZwPK82E2PzLFSC+EBC+W8h6feFaLdXxjQOtKWzU5nJeopr bkOnP+oiM1f8fn6tAUq9D0WCDDU67N1uiOV5ibUq0UpKd0i2D+hR8LtBNjG+8Ux4 S1JHeR9LneNQ+qXWRPIDwq6+sjOF0cRhKI2ZZ1ThdEs/Mt+bpalPhGCeD0yZpzCQ //G6/SjMf/K1I+S8q42+zRf4OmJZBQ4Oy5QClUREWcDfm3vxBx7gSIpUStK/AgMB AAGjggLgMIIC3DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQYgHjqir1WHnwT 786RMbxnHeKfljAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5 bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJi Yi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8wgYsGCCsGAQUFBzAKhn9y c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY4YWJh YmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi81LzE4ODA3OEVBOEFCRDU2 MUU3QzEzRUZDRTkxMzFCQzY3MURFMjlGOTYubWZ0MDwGCCsGAQUFBzANhjBodHRw czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw BgMEAG/rlzANBAIAAjAHAwUAKglUwzANBgkqhkiG9w0BAQsFAAOCAQEArcKkHHy0 HdYlM1zNKCOfig1GbKXbuF7VzBWdLxhtSe9pgk2MPD8oQOjyI04narmvo22j+Mu0 qaExwR7lN2GpVnVSOpI3UzDa6H4Oq166EH9GmjAvaSWgQD/yPxjOC/s3YYyVnuq9 hZFH2OHtStaf81lu6KkpmZqkFnraMz1LjXAPydzRrrtzL1pDsEZS75VKTqvon4Nz n34ALBGAfzZB3I47YAKatx7GaaF+i/dk4S3do4gaDHbW07QIlwpLgIfEAV7nYEzt zv4OMnSxgSkgvi5ub01VOS/FLFtnm9EGP9MCgvcaDa24+vOQHSSC4LZgnqs0ZTSC V4JM4NuLO2bQKA== -----END CERTIFICATE-----Generated at Fri Jan 9 18:13:58 2026 by rpki-client