This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer File: NItUz_eZZeIbLbq5nyEB4xpWDps.cer (raw, json) Hash identifier: reLxRI8bCZ7GAzwGEvCkXH8UkYInrdIa05qYYI5JL/0= Subject key identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6F49 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft caRepository: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 08:31:23 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.226.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28489 (0x6f49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 2 08:31:23 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9145E01, serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:4f:78:da:62:e2:0e:c0:5d:12:f5:9c:db: 71:33:51:d2:c1:c1:6d:7a:6f:5b:c5:4e:8f:4c:82: 28:10:2e:ab:a2:6b:9b:d7:0d:4f:1c:fd:e4:0d:2b: 43:51:aa:8e:a2:4a:ae:2b:5c:08:8b:30:53:72:08: 2f:2e:47:69:6b:94:04:86:18:91:8f:51:51:ad:89: 28:65:46:b7:f9:22:ed:70:d4:f2:b1:90:bd:8a:19: 1a:90:ec:43:27:1e:97:45:88:d4:b4:3f:3c:47:8c: 96:7b:34:43:b3:2f:36:67:77:8a:e7:a5:5a:d5:3a: 76:f6:6b:9d:9d:64:31:10:43:5c:2c:8c:12:96:6e: 04:40:90:d7:72:38:50:f5:32:14:50:ae:d3:41:1b: 65:d6:d7:b9:5c:d9:d6:6f:4f:88:3e:28:03:60:9d: bc:81:57:ca:a0:96:02:34:41:05:85:ea:d8:b7:4e: 99:1b:b2:d1:bb:14:25:0e:47:ae:38:00:0c:32:08: 54:5e:ad:4a:c0:04:ba:41:b2:af:62:b4:ad:f3:c6: 51:c8:c4:b3:d0:66:5c:bc:5a:10:ee:6a:17:dc:e9: 28:77:c6:c8:e1:5a:30:20:c4:54:ff:79:48:7a:e7: 8e:0c:27:5d:a6:da:f0:2b:3e:f1:4e:fe:38:5e:7c: c2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.226.0/23 Signature Algorithm: sha256WithRSAEncryption a3:b6:a3:0f:cf:ba:c1:48:7b:99:72:ce:d0:15:f5:ff:42:27: fe:d0:0c:9a:f2:b7:77:0f:1d:53:bd:ff:4d:30:e1:0c:df:77: 4c:43:ce:c7:c9:29:a4:3f:50:d0:1e:48:db:80:bc:a8:7e:2e: ab:84:91:b6:d1:8f:e8:77:d1:a6:5b:9d:20:3c:b7:51:a1:74: f6:5d:e6:78:8d:88:a0:d8:fc:3f:97:71:2e:54:c7:9c:da:d5: 8a:45:fd:0c:b5:48:03:fd:c7:b6:60:35:5d:56:2e:1c:f8:d9: 97:98:40:69:2e:62:ef:13:70:97:b8:e2:9c:ff:ab:10:d6:09: af:b5:f7:b0:89:bd:ba:2d:b1:92:ff:fe:19:6e:01:6c:04:88: 1b:d0:43:0c:e1:11:64:bd:e4:1f:da:c5:af:48:31:6f:f2:4d: b8:03:5d:1a:b1:47:5d:43:58:bc:9b:c4:db:49:86:81:e5:74: 48:34:0a:08:e9:64:c6:47:d2:ed:b2:da:01:7e:c6:a5:cf:15: fc:4e:b2:ea:0c:39:b0:82:a5:f4:c8:39:2a:27:07:93:50:97: 51:ea:fc:0a:35:55:33:ca:51:c3:92:7b:87:2d:3c:ae:7e:69: a2:16:d0:4a:38:01:11:6d:49:6e:dc:18:37:a2:7f:26:7c:aa: e6:e6:da:ca -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICb0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjAyMDgzMTIzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE0NUUwMTExMC8GA1UEBRMoMzQ4QjU0Q0ZGNzk5NjVFMjFCMkRCQUI5 OUYyMTAxRTMxQTU2MEU5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMnzT3jaYuIOwF0S9ZzbcTNR0sHBbXpvW8VOj0yCKBAuq6Jrm9cNTxz95A0rQ1Gq jqJKritcCIswU3IILy5HaWuUBIYYkY9RUa2JKGVGt/ki7XDU8rGQvYoZGpDsQyce l0WI1LQ/PEeMlns0Q7MvNmd3iuelWtU6dvZrnZ1kMRBDXCyMEpZuBECQ13I4UPUy FFCu00EbZdbXuVzZ1m9PiD4oA2CdvIFXyqCWAjRBBYXq2LdOmRuy0bsUJQ5HrjgA DDIIVF6tSsAEukGyr2K0rfPGUcjEs9BmXLxaEO5qF9zpKHfGyOFaMCDEVP95SHrn jgwnXaba8Cs+8U7+OF58wvsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ0i1TP95ll 4hsturmfIQHjGlYOmzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVFMDEvNDY5MjdGMTRDRjU5MTFGMDg1QkJERDExQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ1RTAxLzQ2OTI3RjE0Q0Y1OTExRjA4NUJCREQxMUM0RjlBRTAyL05JdFV6X2Va WmVJYkxicTVueUVCNHhwV0Rwcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAYr84jANBgkqhkiG9w0BAQsFAAOCAQEAo7ajD8+6wUh7mXLO0BX1 /0In/tAMmvK3dw8dU73/TTDhDN93TEPOx8kppD9Q0B5I24C8qH4uq4SRttGP6HfR pludIDy3UaF09l3meI2IoNj8P5dxLlTHnNrVikX9DLVIA/3HtmA1XVYuHPjZl5hA aS5i7xNwl7jinP+rENYJr7X3sIm9ui2xkv/+GW4BbASIG9BDDOERZL3kH9rFr0gx b/JNuANdGrFHXUNYvJvE20mGgeV0SDQKCOlkxkfS7bLaAX7Gpc8V/E6y6gw5sIKl 9Mg5KicHk1CXUer8CjVVM8pRw5J7hy08rn5pohbQSjgBEW1JbtwYN6J/Jnyq5uba yg== -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:32 2025 by rpki-client