This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer File: C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer (raw, json) Hash identifier: h1BNpwrRAwOE+4aS3qkUIIfptwmdc7rhRnmylBTNXRs= Subject key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 2811E4EBECD5AA3CC5585DFCC5612F2A4F4E72AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Manifest: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft caRepository: rsync://krill.47272.net/repo/HYEHOST/5/ Notify URL: https://krill.47272.net/rrdp/notification.xml Certificate not before: Sat 22 Nov 2025 18:24:17 +0000 Certificate not after: Sat 21 Nov 2026 18:29:17 +0000 Subordinate resources: IP: 199.47.240.0/24 IP: 2a05:dfc2::/31 IP: 2a06:1281::/32 IP: 2a06:1284::/32 IP: 2a09:54c4::/30 IP: 2a0a:6044::/32 IP: 2a0f:6280::/29 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:11:e4:eb:ec:d5:aa:3c:c5:58:5d:fc:c5:61:2f:2a:4f:4e:72:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 22 18:24:17 2025 GMT Not After : Nov 21 18:29:17 2026 GMT Subject: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9b:60:27:2c:0a:28:30:3f:45:40:13:82:75: 03:60:a6:9f:0e:b2:64:ca:9a:59:f3:9e:32:82:d5: 64:63:79:6a:39:b0:5c:43:f7:3c:98:d2:62:33:99: c8:70:7d:b2:0a:4b:b7:e4:37:c5:a3:4e:15:eb:42: 3b:06:4e:59:90:cb:b1:1f:58:a0:e0:0a:66:3d:9a: 2a:1c:41:7e:47:ab:35:91:f7:e5:eb:b2:85:ee:83: 1a:bc:80:94:8d:b6:f0:96:be:6f:af:6d:83:b4:56: 73:34:8c:80:cc:a5:5f:f9:3e:9f:7d:a8:1a:e2:c6: 92:10:09:71:5b:6c:8a:80:47:29:63:b4:5c:53:59: e6:96:7d:48:99:53:af:d9:a4:cc:50:a0:5c:ff:65: f3:f3:9e:f3:2d:2e:c5:b0:75:61:13:ff:a3:11:c5: 92:9e:3b:cb:3a:01:f3:93:29:7e:af:bc:4f:1b:86: 1d:f9:e9:55:03:b1:e6:ef:39:cd:83:13:2d:a8:ec: 2d:d2:0e:3e:3a:b3:f8:42:cb:f4:00:3b:69:f4:be: f5:11:ef:d4:ad:8f:a5:f0:f9:85:f3:3e:a5:4d:34: dd:4e:df:03:c6:79:24:42:b4:c5:6c:20:dc:8b:59: e6:3e:ef:0e:26:65:b5:98:f8:35:cf:1f:33:a1:ba: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: CA Repository - URI:rsync://krill.47272.net/repo/HYEHOST/5/ RPKI Manifest - URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft RPKI Notify - URI:https://krill.47272.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.47.240.0/24 IPv6: 2a05:dfc2::/31 2a06:1281::/32 2a06:1284::/32 2a09:54c4::/30 2a0a:6044::/32 2a0f:6280::/29 Signature Algorithm: sha256WithRSAEncryption 88:77:31:bc:20:05:87:99:ba:81:46:19:c9:d7:87:32:2a:d7: 7a:13:2d:f7:be:36:fc:47:fe:5f:9f:52:0a:9c:83:93:e4:50: e7:8d:63:87:d6:c8:e7:64:fb:7d:54:f8:a6:59:00:b4:c1:56: 0f:02:3c:d5:89:9d:fa:61:ad:d5:7e:52:4a:99:67:9b:ca:be: 85:45:f4:98:58:61:dd:b6:ee:2d:7d:e7:39:a6:ea:89:e5:4d: 0b:51:fa:2d:a7:08:b3:ee:f9:37:55:01:dc:bb:2a:8a:90:4d: 27:8c:ac:7f:12:3d:ee:d1:79:21:f4:af:3a:43:ad:d2:1a:57: 2b:44:b3:2b:12:00:f0:7f:08:71:f2:c3:7a:ac:a5:2b:d0:03: 42:55:8b:cf:d3:d5:a3:24:08:0d:e6:37:67:f4:74:72:a4:f2: 32:43:14:12:89:42:ee:a2:f8:a3:c5:62:4b:7e:e9:78:3e:03: 48:36:e5:8a:d5:46:d6:db:f8:72:34:61:01:41:85:eb:d1:fb: 1a:a7:c1:8f:52:a1:4d:4d:f7:57:38:01:07:06:ad:fd:31:d5: 49:15:92:24:9f:40:63:23:60:01:5f:57:e6:de:6f:f6:7d:56: 9b:0b:1f:c8:f6:91:b1:04:a0:4c:02:33:15:ba:35:2b:a0:de: 66:ee:05:37 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIUKBHk6+zVqjzFWF38xWEvKk9OcqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTExMjIxODI0MTdaFw0yNjExMjExODI5MTdaMDMxMTAvBgNV BAMTKEMzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUm2AnLAooMD9FQBOCdQNgpp8O smTKmlnznjKC1WRjeWo5sFxD9zyY0mIzmchwfbIKS7fkN8WjThXrQjsGTlmQy7Ef WKDgCmY9miocQX5HqzWR9+XrsoXugxq8gJSNtvCWvm+vbYO0VnM0jIDMpV/5Pp99 qBrixpIQCXFbbIqARyljtFxTWeaWfUiZU6/ZpMxQoFz/ZfPznvMtLsWwdWET/6MR xZKeO8s6AfOTKX6vvE8bhh356VUDsebvOc2DEy2o7C3SDj46s/hCy/QAO2n0vvUR 79Stj6Xw+YXzPqVNNN1O3wPGeSRCtMVsINyLWeY+7w4mZbWY+DXPHzOhunzFAgMB AAGjggKkMIICoDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTDz0GJiTbLnFc9 seqrlMbmaZUf1zAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv NmxRWGMuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TAzBggrBgEFBQcwBYYncnN5bmM6 Ly9rcmlsbC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvMF8GCCsGAQUFBzAKhlNy c3luYzovL2tyaWxsLjQ3MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9DM0NGNDE4OTg5 MzZDQjlDNTczREIxRUFBQjk0QzZFNjY5OTUxRkQ3Lm1mdDA5BggrBgEFBQcwDYYt aHR0cHM6Ly9rcmlsbC40NzI3Mi5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUQYIKwYBBQUHAQcBAf8EQjBAMAwEAgAB MAYDBADHL/AwMAQCAAIwKgMFASoF38IDBQAqBhKBAwUAKgYShAMFAioJVMQDBQAq CmBEAwUDKg9igDANBgkqhkiG9w0BAQsFAAOCAQEAiHcxvCAFh5m6gUYZydeHMirX ehMt9742/Ef+X59SCpyDk+RQ541jh9bI52T7fVT4plkAtMFWDwI81Ymd+mGt1X5S Splnm8q+hUX0mFhh3bbuLX3nOabqieVNC1H6LacIs+75N1UB3LsqipBNJ4ysfxI9 7tF5IfSvOkOt0hpXK0SzKxIA8H8IcfLDeqylK9ADQlWLz9PVoyQIDeY3Z/R0cqTy MkMUEolC7qL4o8ViS37peD4DSDblitVG1tv4cjRhAUGF69H7GqfBj1KhTU33VzgB Bwat/THVSRWSJJ9AYyNgAV9X5t5v9n1WmwsfyPaRsQSgTAIzFbo1K6DeZu4FNw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:03 2025 by rpki-client