This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.cer (raw, json) Hash identifier: LEYYi/AhFVOKo30aS8jwhmmPpbbdC/y6nCDpm75gZoo= Subject key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 63B1C8B58E4914AC1FFEE90B30748AF76B72C012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 17 Nov 2025 13:08:35 +0000 Certificate not after: Mon 16 Nov 2026 13:13:35 +0000 Subordinate resources: IP: 85.155.227.0/24 IP: 2a06:a005:d2d::/48 IP: 2a06:a005:1507::/48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b1:c8:b5:8e:49:14:ac:1f:fe:e9:0b:30:74:8a:f7:6b:72:c0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 17 13:08:35 2025 GMT Not After : Nov 16 13:13:35 2026 GMT Subject: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:7c:60:ad:98:e3:fd:42:e2:78:48:2d:d6: 67:4a:d2:2c:6b:37:c0:c1:59:2f:1f:91:74:86:65: 60:0b:09:f0:65:ae:f6:60:06:11:61:86:9c:ba:17: 23:64:84:64:77:4e:a6:ae:92:86:1a:d9:00:d7:1e: 3a:b6:6e:1c:11:05:18:a4:2e:f6:bd:69:dd:6a:d5: 95:a8:db:95:c3:e5:10:fe:c5:3a:62:cc:f3:ec:6f: 18:9d:e7:dc:b4:1c:d0:36:9b:83:41:76:42:98:5c: 7d:1a:87:22:12:88:ac:5c:87:03:6b:3b:c0:9e:76: b7:dc:a7:68:89:01:83:75:28:d3:35:b9:87:c9:17: 99:ac:ec:e5:c2:0a:c5:07:fd:5a:f2:4a:6a:85:85: 43:dc:5c:69:31:a6:29:12:eb:28:c1:86:7f:71:17: 87:0a:52:db:a1:01:76:86:0e:2a:21:4a:0c:69:6c: 61:6f:11:1b:fe:cf:a7:c8:fe:be:aa:90:2b:5f:21: 37:66:72:45:93:1e:42:36:cf:4b:81:66:6f:84:38: bb:b4:e2:a1:9b:96:d9:82:3d:b9:98:4a:be:ec:36: 94:b0:d7:38:15:2e:27:ec:94:ae:5d:d4:1e:62:9b: 18:9f:d7:32:ff:b1:0e:d3:66:ae:4c:e3:eb:f3:75: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.227.0/24 IPv6: 2a06:a005:d2d::/48 2a06:a005:1507::/48 Signature Algorithm: sha256WithRSAEncryption a0:57:1d:00:61:5a:d0:3b:bb:fc:e1:4f:e8:c3:49:53:73:f5: dd:5b:5a:21:3d:ba:2f:35:0c:69:48:e5:ae:5b:31:52:1f:37: 46:32:40:c3:ef:e9:3f:56:61:cd:7c:6e:27:20:96:96:04:77: 3c:51:ba:17:60:f0:39:3d:62:e2:54:88:2c:17:bd:3b:dc:b3: 34:9c:46:aa:11:bf:70:70:c3:4c:63:a0:8f:bf:10:38:3b:73: 50:71:82:71:3d:5f:55:e9:bb:2a:eb:b4:6c:3f:5b:55:cc:3e: d2:99:93:ae:62:39:1e:40:9c:05:4a:cd:6c:ee:b8:e4:4c:ec: bd:29:ab:71:63:dc:20:0e:1a:fd:4b:94:52:c5:d1:f2:e2:6d: 75:a2:fa:df:0f:bc:4d:5d:6a:45:cf:d5:2b:bb:48:e6:ec:74: 24:d0:6c:9c:f4:1d:60:22:7b:1f:69:48:8a:9b:cd:c6:14:38: d6:a9:f8:b6:75:5b:26:b0:fd:63:52:3b:81:c6:2c:d3:06:8d: 9e:86:28:bc:a2:db:65:dc:0e:23:69:4d:82:dc:c2:05:95:c8: bb:a2:4e:b4:10:3d:97:50:c6:3a:be:a2:23:e3:d7:e8:2f:81: 5d:ff:45:01:f4:6e:44:72:f0:12:5d:72:00:11:0f:23:4c:18: 0a:fc:98:23 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUY7HItY5JFKwf/ukLMHSK92tywBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTExMTcxMzA4MzVaFw0yNjExMTYxMzEzMzVaMDMxMTAvBgNV BAMTKDY1NzhFNzk2NjIwMDA0OTZFQjE1NDBEOEJEOEZBNjVFRDhENjNBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LHxgrZjj/ULieEgt1mdK0ixr N8DBWS8fkXSGZWALCfBlrvZgBhFhhpy6FyNkhGR3TqaukoYa2QDXHjq2bhwRBRik Lva9ad1q1ZWo25XD5RD+xTpizPPsbxid59y0HNA2m4NBdkKYXH0ahyISiKxchwNr O8Cedrfcp2iJAYN1KNM1uYfJF5ms7OXCCsUH/VrySmqFhUPcXGkxpikS6yjBhn9x F4cKUtuhAXaGDiohSgxpbGFvERv+z6fI/r6qkCtfITdmckWTHkI2z0uBZm+EOLu0 4qGbltmCPbmYSr7sNpSw1zgVLifslK5d1B5imxif1zL/sQ7TZq5M4+vzdc7VAgMB AAGjggLrMIIC5zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRleOeWYgAElusV QNi9j6Ze2NY6YjAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5 bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZi NC1lNWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC8wgYsGCCsGAQUFBzAKhn9y c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZDMw NmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC84LzY1NzhFNzk2NjIwMDA0 OTZFQjE1NDBEOEJEOEZBNjVFRDhENjNBNjIubWZ0MDwGCCsGAQUFBzANhjBodHRw czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEw BgMEAFWb4zAYBAIAAjASAwcAKgagBQ0tAwcAKgagBRUHMA0GCSqGSIb3DQEBCwUA A4IBAQCgVx0AYVrQO7v84U/ow0lTc/XdW1ohPbovNQxpSOWuWzFSHzdGMkDD7+k/ VmHNfG4nIJaWBHc8UboXYPA5PWLiVIgsF7073LM0nEaqEb9wcMNMY6CPvxA4O3NQ cYJxPV9V6bsq67RsP1tVzD7SmZOuYjkeQJwFSs1s7rjkTOy9KatxY9wgDhr9S5RS xdHy4m11ovrfD7xNXWpFz9Uru0jm7HQk0Gyc9B1gInsfaUiKm83GFDjWqfi2dVsm sP1jUjuBxizTBo2ehii8ottl3A4jaU2C3MIFlci7ok60ED2XUMY6vqIj49foL4Fd /0UB9G5EcvASXXIAEQ8jTBgK/Jgj -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:14 2025 by rpki-client