This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer File: 3537F961668E4765578095AB33A4351BB72C9A63.cer (raw, json) Hash identifier: W4dbyxkB9LM9Gz+Gk6mdwSv3w57zeNIGG5viZTpc170= Subject key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 1C2E644FA5022AA8B6E5AFB25747D6B763066C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 31 Dec 2025 21:09:42 +0000 Certificate not after: Wed 30 Dec 2026 21:14:42 +0000 Subordinate resources: IP: 27.0.234.0/23 IP: 89.187.68.0/23 IP: 2a06:1282::/32 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2e:64:4f:a5:02:2a:a8:b6:e5:af:b2:57:47:d6:b7:63:06:6c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 31 21:09:42 2025 GMT Not After : Dec 30 21:14:42 2026 GMT Subject: CN=3537F961668E4765578095AB33A4351BB72C9A63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:17:d3:2e:a9:97:3f:2d:80:83:79:f5:46: d9:cf:b9:9a:f4:19:00:85:e1:41:76:70:81:79:13: 41:54:b8:5b:6f:12:c4:da:3c:73:8b:67:ed:2a:fd: eb:6f:0d:b1:5c:d7:19:54:bd:37:65:b4:3e:52:99: 65:52:e5:27:e2:6b:9f:2d:bd:52:05:21:94:7b:e8: 37:e0:2f:97:2c:8d:46:e4:fa:e6:72:d6:eb:e1:51: f4:2d:9f:3e:73:67:82:42:c2:5c:84:d7:1a:c9:5c: d2:e7:c2:8b:ee:99:54:5b:05:af:de:eb:cd:18:1d: 58:8d:27:9a:d1:fa:de:7c:ed:1c:5a:01:ed:e9:f5: 7d:a5:db:e1:11:ef:d0:12:24:23:36:e0:c5:0e:dd: 9e:78:e1:be:63:75:18:19:9d:75:23:24:8b:80:c3: 11:e4:c7:0b:0e:59:42:ae:09:13:27:98:e8:01:86: db:e6:75:2f:c1:10:c7:34:90:86:9e:77:6f:50:00: 21:6c:f6:0c:ae:55:f1:7a:40:a4:cf:61:00:b4:a8: 11:79:5f:27:79:b2:39:5b:47:63:ec:33:98:c2:7e: ba:11:08:0e:5d:6f:41:b0:1a:8d:d1:b0:16:d1:dd: ff:b1:f7:97:df:d2:ae:b9:d3:a8:1a:d5:2e:75:5e: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.234.0/23 89.187.68.0/23 IPv6: 2a06:1282::/32 Signature Algorithm: sha256WithRSAEncryption 50:59:1b:e9:6b:77:25:38:8e:af:35:c6:7f:30:15:fd:19:51: af:2e:c6:65:c8:fe:0b:da:cf:70:d3:d7:b8:81:b2:5b:e4:1c: ad:b5:ed:bc:ac:0d:b9:bf:ae:06:68:70:3c:16:02:56:23:15: ff:cd:e1:b8:bf:de:d2:88:b4:5c:13:33:13:54:7f:6e:25:d4: 2e:d1:e0:b0:37:89:78:96:fe:3f:df:28:10:c8:ee:f2:f7:01: fd:5e:ae:bf:1c:96:d1:55:f4:38:c0:2d:ab:07:20:cf:fa:19: dc:2f:d8:aa:f3:52:8d:48:0e:5f:a2:d2:21:a5:46:fd:c1:e5: 57:1a:e6:b0:22:da:69:0f:10:a7:17:c2:59:91:9f:f4:93:65: 41:75:2f:fc:33:9a:63:6c:f5:fe:1a:81:54:10:c2:94:95:e4: b2:ac:3b:d9:af:92:34:2a:60:8f:28:40:5b:ba:bd:cd:93:fe: bf:13:06:35:46:d8:24:11:7b:30:6c:8e:5c:92:4a:7d:9d:61: 90:10:73:ac:a6:31:b0:48:11:b5:6d:9e:54:42:b7:d2:86:69: 4b:7f:98:f6:32:e4:24:d0:7a:02:4b:4a:85:3f:1c:ed:e4:2e: 0a:fc:46:7d:1f:26:61:35:fd:f4:35:f3:cf:ed:b3:e4:da:07: cd:28:22:95 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUHC5kT6UCKqi25a+yV0fWt2MGbAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMzEyMTA5NDJaFw0yNjEyMzAyMTE0NDJaMDMxMTAvBgNV BAMTKDM1MzdGOTYxNjY4RTQ3NjU1NzgwOTVBQjMzQTQzNTFCQjcyQzlBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ghfTLqmXPy2Ag3n1RtnPuZr0 GQCF4UF2cIF5E0FUuFtvEsTaPHOLZ+0q/etvDbFc1xlUvTdltD5SmWVS5Sfia58t vVIFIZR76DfgL5csjUbk+uZy1uvhUfQtnz5zZ4JCwlyE1xrJXNLnwovumVRbBa/e 680YHViNJ5rR+t587RxaAe3p9X2l2+ER79ASJCM24MUO3Z544b5jdRgZnXUjJIuA wxHkxwsOWUKuCRMnmOgBhtvmdS/BEMc0kIaed29QACFs9gyuVfF6QKTPYQC0qBF5 Xyd5sjlbR2PsM5jCfroRCA5db0GwGo3RsBbR3f+x95ff0q6506ga1S51Xs8nAgMB AAGjggLmMIIC4jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1N/lhZo5HZVeA laszpDUbtyyaYzAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5 bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTllOGMy Zi1lNTkwLTRhNGYtODQ2My04MzE3YzJhMWMwNDgvMS8wgYsGCCsGAQUFBzAKhn9y c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E1OWU4 YzJmLWU1OTAtNGE0Zi04NDYzLTgzMTdjMmExYzA0OC8xLzM1MzdGOTYxNjY4RTQ3 NjU1NzgwOTVBQjMzQTQzNTFCQjcyQzlBNjMubWZ0MDwGCCsGAQUFBzANhjBodHRw czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEw DAMEARsA6gMEAVm7RDANBAIAAjAHAwUAKgYSgjANBgkqhkiG9w0BAQsFAAOCAQEA UFkb6Wt3JTiOrzXGfzAV/RlRry7GZcj+C9rPcNPXuIGyW+QcrbXtvKwNub+uBmhw PBYCViMV/83huL/e0oi0XBMzE1R/biXULtHgsDeJeJb+P98oEMju8vcB/V6uvxyW 0VX0OMAtqwcgz/oZ3C/YqvNSjUgOX6LSIaVG/cHlVxrmsCLaaQ8QpxfCWZGf9JNl QXUv/DOaY2z1/hqBVBDClJXksqw72a+SNCpgjyhAW7q9zZP+vxMGNUbYJBF7MGyO XJJKfZ1hkBBzrKYxsEgRtW2eVEK30oZpS3+Y9jLkJNB6AktKhT8c7eQuCvxGfR8m YTX99DXzz+2z5NoHzSgilQ== -----END CERTIFICATE-----Generated at Fri Jan 9 18:11:25 2026 by rpki-client