This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer (raw, json) Hash identifier: 9m/9RKmRza4axFtDJfo8u65hjYEex1KXlRQFENqhvro= Subject key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 5CB3DBC74ED1A388D3BF713466B671FEC0726B0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 15 Nov 2025 18:22:43 +0000 Certificate not after: Sat 14 Nov 2026 18:27:43 +0000 Subordinate resources: IP: 206.53.0.0/24 IP: 2a0d:d905::/32 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b3:db:c7:4e:d1:a3:88:d3:bf:71:34:66:b6:71:fe:c0:72:6b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 15 18:22:43 2025 GMT Not After : Nov 14 18:27:43 2026 GMT Subject: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:7e:33:0f:c3:f6:fc:c7:f2:eb:87:ed:b6: ff:28:38:fe:9e:a9:bb:bc:1a:2d:13:54:8a:4a:6e: 8d:12:42:46:40:8f:87:ee:4f:ca:43:25:c7:f9:9c: 60:30:f9:d8:86:47:d0:16:64:a0:b4:a3:2f:c3:cb: 12:6d:da:a7:de:a6:cd:3b:0d:f5:77:ab:64:8c:5a: 03:07:c1:26:34:a5:33:6d:2e:46:bf:08:9b:48:d2: 35:70:63:bf:31:71:31:77:f8:40:00:80:c9:a6:9f: a8:48:03:84:2d:79:d4:1d:d8:2b:f0:69:5e:26:4a: 51:5b:b2:15:aa:82:74:72:ab:d7:48:41:d3:56:82: 0e:8c:32:6b:28:ad:4c:53:71:05:ad:bc:01:56:a4: 29:1c:b0:77:94:e9:8e:20:ea:b1:ed:ab:25:4a:97: b5:00:9c:ed:df:b1:67:5f:71:91:34:38:84:3c:7c: 09:3e:c8:a8:bf:0e:cd:c7:1b:cc:2d:28:38:6f:b1: 49:b7:f7:08:03:a5:8f:1b:c3:f8:4a:5a:45:64:34: b3:39:36:25:4b:05:ff:22:d8:3e:26:aa:31:da:5f: 49:e9:19:a5:bd:ab:90:3a:a2:ce:bd:f4:e4:d1:6d: 2b:a4:35:71:dc:59:e8:f0:af:34:53:7e:12:6c:da: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.53.0.0/24 IPv6: 2a0d:d905::/32 Signature Algorithm: sha256WithRSAEncryption c1:b1:4a:5f:f3:9e:8c:78:02:9f:9e:73:a8:4d:e3:42:ad:63: d4:ce:1d:8f:ad:3f:0c:7a:fe:22:d1:2e:72:5e:9c:ff:44:75: b1:47:4e:96:70:2b:e9:c3:64:66:aa:56:10:4f:df:1f:c9:be: de:af:c5:8f:56:66:db:84:f7:21:40:a7:0d:b6:8b:61:48:3c: 64:16:1d:72:d1:13:06:31:9c:e8:87:a8:5e:6b:b0:61:bb:33: 6f:e6:09:f6:4c:43:d7:f1:e0:77:88:2b:cb:0a:ec:61:56:b7: e2:a2:cf:1c:4e:5a:0b:32:6c:00:e6:3a:23:50:6e:cc:62:2f: 0d:14:cb:bb:51:40:a5:ad:b6:67:e1:f2:97:4d:d9:45:6c:b5: 94:55:0f:e4:d8:6a:1f:c7:9b:56:e7:60:5d:4e:cb:ab:34:da: 41:f6:27:3f:31:8e:22:56:df:18:74:0e:2f:8e:dd:f7:dc:53: 20:c6:f2:b0:ea:36:2a:21:ee:0b:ba:2d:96:5b:64:f4:09:a0: ce:cc:99:ff:c4:1e:c1:d6:93:fe:cf:01:bd:4d:ee:80:2b:f0: 11:ac:e2:6a:51:ff:2f:2b:b6:12:39:5d:a5:6a:fe:b7:5b:81: 31:61:69:f5:ac:22:cd:9c:7e:b1:f2:27:a1:c9:b1:6f:62:00: 43:2d:9a:66 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUXLPbx07Ro4jTv3E0ZrZx/sByawowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTExMTUxODIyNDNaFw0yNjExMTQxODI3NDNaMDMxMTAvBgNV BAMTKEFDN0Y5QkMzMEMwNEIzQTIzNkJERjhBNDMwODY5RUNBMUEyOEIzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsu34zD8P2/Mfy64fttv8oOP6e qbu8Gi0TVIpKbo0SQkZAj4fuT8pDJcf5nGAw+diGR9AWZKC0oy/DyxJt2qfeps07 DfV3q2SMWgMHwSY0pTNtLka/CJtI0jVwY78xcTF3+EAAgMmmn6hIA4QtedQd2Cvw aV4mSlFbshWqgnRyq9dIQdNWgg6MMmsorUxTcQWtvAFWpCkcsHeU6Y4g6rHtqyVK l7UAnO3fsWdfcZE0OIQ8fAk+yKi/Ds3HG8wtKDhvsUm39wgDpY8bw/hKWkVkNLM5 NiVLBf8i2D4mqjHaX0npGaW9q5A6os699OTRbSukNXHcWejwrzRTfhJs2ghBAgMB AAGjggLgMIIC3DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsf5vDDASzoja9 +KQwhp7KGiizJDAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5 bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRi MC1lMzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS8wgYsGCCsGAQUFBzAKhn9y c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzlkY2Ni NGIwLWUzMGUtNDI2Yy04NGRjLTQ2NGZkMTg5OTExNi8xL0FDN0Y5QkMzMEMwNEIz QTIzNkJERjhBNDMwODY5RUNBMUEyOEIzMjQubWZ0MDwGCCsGAQUFBzANhjBodHRw czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw BgMEAM41ADANBAIAAjAHAwUAKg3ZBTANBgkqhkiG9w0BAQsFAAOCAQEAwbFKX/Oe jHgCn55zqE3jQq1j1M4dj60/DHr+ItEucl6c/0R1sUdOlnAr6cNkZqpWEE/fH8m+ 3q/Fj1Zm24T3IUCnDbaLYUg8ZBYdctETBjGc6IeoXmuwYbszb+YJ9kxD1/Hgd4gr ywrsYVa34qLPHE5aCzJsAOY6I1BuzGIvDRTLu1FApa22Z+Hyl03ZRWy1lFUP5Nhq H8ebVudgXU7LqzTaQfYnPzGOIlbfGHQOL47d99xTIMbysOo2KiHuC7otlltk9Amg zsyZ/8QewdaT/s8BvU3ugCvwEazialH/Lyu2EjldpWr+t1uBMWFp9awizZx+sfIn ocmxb2IAQy2aZg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:48:11 2025 by rpki-client