This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ArXPFjFQrdgukDYq5V8xc9l0nwU.cer File: ArXPFjFQrdgukDYq5V8xc9l0nwU.cer (raw, json) Hash identifier: dczkvURWwRVNsLHnS1zZwAnijGg/Su5r+tV/UfCRhcU= Subject key identifier: 02:B5:CF:16:31:50:AD:D8:2E:90:36:2A:E5:5F:31:73:D9:74:9F:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33E39B340DF5A77D94584A16C377C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft caRepository: rsync://krill.signalx.cloud/repo/signalx-rpki/4/ Notify URL: https://krill.signalx.cloud/rrdp/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206788 IP: 2001:67c:28d4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3e:39:b3:40:df:5a:77:d9:45:84:a1:6c:37:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02b5cf163150add82e90362ae55f3173d9749f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c5:1e:ea:eb:48:9e:ab:1d:7b:af:f6:ed:6c: b1:6e:b8:be:9e:94:9e:49:c4:8e:be:14:2d:32:ff: 80:7c:1d:7c:75:94:35:f0:15:bb:46:9d:5b:2b:55: b4:e6:86:90:b5:73:c3:ad:00:f4:df:c2:8a:a7:8e: a5:f0:42:68:c8:0b:6b:8e:d2:18:9a:85:69:24:3b: 68:1f:2f:51:fa:68:bc:72:f2:57:d8:16:71:b3:2d: ce:c5:61:41:c4:fe:4a:08:52:40:c4:4a:b4:49:ac: a9:f9:90:6d:37:4d:7a:2a:1b:b8:84:41:43:0d:94: 03:ba:07:1e:3e:b3:6e:6c:bb:74:48:46:dd:fb:6f: 5f:90:b4:a1:49:95:c0:29:b3:25:59:4f:34:eb:fa: 89:47:23:17:83:b5:3a:b0:be:23:3b:2a:f6:33:a4: 5a:15:e1:87:a6:a9:b7:66:1d:a7:0c:22:0e:aa:47: ac:65:84:3d:48:14:e0:26:57:e8:82:c9:e9:b2:60: 46:23:05:ff:04:6e:7f:86:ab:5d:06:8e:c1:41:2a: 42:ce:a2:bb:87:e9:c1:c2:ad:fa:f6:d8:98:cf:81: 84:65:6e:c5:44:c0:6b:e3:70:5d:b3:24:ab:3e:5e: 8e:c7:ff:8d:74:4f:af:e4:dc:0c:45:5f:09:31:43: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B5:CF:16:31:50:AD:D8:2E:90:36:2A:E5:5F:31:73:D9:74:9F:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/4/ RPKI Manifest - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/4/02B5CF163150ADD82E90362AE55F3173D9749F05.mft RPKI Notify - URI:https://krill.signalx.cloud/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:28d4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206788 Signature Algorithm: sha256WithRSAEncryption ad:91:23:d2:4c:ed:82:59:1e:f1:71:cf:83:de:53:14:1d:be: ae:43:0d:66:5e:a2:0e:34:0f:af:8c:bb:1b:38:a3:72:6d:98: 11:ce:a3:60:4b:9d:6e:e8:1c:c2:af:89:a8:01:6e:d5:5b:05: 93:05:24:9e:af:e9:3b:6e:0f:df:e0:12:d3:25:1d:46:28:2e: 38:9d:c0:c2:14:01:fe:f2:b6:42:42:27:ac:af:ce:3a:a9:bb: 04:04:42:60:5b:c8:b7:be:b9:d4:99:a9:d8:e1:fe:07:f7:59: c8:f7:07:40:0c:c9:d4:72:59:a5:51:06:85:03:e9:a9:a5:ab: 92:71:b4:62:d8:cb:06:5f:72:21:71:e9:84:46:bc:08:f1:95: 77:4d:74:f8:24:de:41:72:76:ba:8c:95:ef:85:10:7e:a3:e8: 2b:0b:25:5e:89:2d:01:58:74:43:4c:3e:45:f7:2f:a0:05:5f: cc:2b:50:04:5f:31:11:86:19:64:38:5b:1b:2a:1c:71:51:92: 1f:f4:b5:dc:18:56:a8:79:73:10:2a:c2:cc:e0:1d:89:7e:ef: 72:f3:13:79:f5:c7:84:ce:97:0e:a5:14:db:00:8e:ff:74:69: 92:b3:1c:3e:9d:41:8f:b5:f7:64:85:5f:14:d8:12:c6:0a:e6: 8c:7a:6f:71 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZt4oz45s0DfWnfZRYShbDd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmI1Y2YxNjMxNTBhZGQ4MmU5MDM2MmFlNTVmMzE3M2Q5NzQ5ZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcUe6utInqsde6/27Wyxbri+npSe ScSOvhQtMv+AfB18dZQ18BW7Rp1bK1W05oaQtXPDrQD038KKp46l8EJoyAtrjtIY moVpJDtoHy9R+mi8cvJX2BZxsy3OxWFBxP5KCFJAxEq0Sayp+ZBtN016Khu4hEFD DZQDugcePrNubLt0SEbd+29fkLShSZXAKbMlWU806/qJRyMXg7U6sL4jOyr2M6Ra FeGHpqm3Zh2nDCIOqkesZYQ9SBTgJlfogsnpsmBGIwX/BG5/hqtdBo7BQSpCzqK7 h+nBwq369tiYz4GEZW7FRMBr43BdsySrPl6Ox/+NdE+v5NwMRV8JMUPYfwIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFAK1zxYxUK3YLpA2KuVfMXPZdJ8FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgfcGCCsGAQUFBwELBIHqMIHnMDwGCCsGAQUFBzAFhjByc3lu YzovL2tyaWxsLnNpZ25hbHguY2xvdWQvcmVwby9zaWduYWx4LXJwa2kvNC8waAYI KwYBBQUHMAqGXHJzeW5jOi8va3JpbGwuc2lnbmFseC5jbG91ZC9yZXBvL3NpZ25h bHgtcnBraS80LzAyQjVDRjE2MzE1MEFERDgyRTkwMzYyQUU1NUYzMTczRDk3NDlG MDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczovL2tyaWxsLnNpZ25hbHguY2xvdWQv cnJkcC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8v cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpu SEMyUUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCjUMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMnxDANBgkqhkiG9w0BAQsFAAOCAQEArZEj0kztglke8XHPg95TFB2+ rkMNZl6iDjQPr4y7Gzijcm2YEc6jYEudbugcwq+JqAFu1VsFkwUknq/pO24P3+AS 0yUdRiguOJ3AwhQB/vK2QkInrK/OOqm7BARCYFvIt7651Jmp2OH+B/dZyPcHQAzJ 1HJZpVEGhQPpqaWrknG0YtjLBl9yIXHphEa8CPGVd010+CTeQXJ2uoyV74UQfqPo KwslXoktAVh0Q0w+RfcvoAVfzCtQBF8xEYYZZDhbGyoccVGSH/S13BhWqHlzECrC zOAdiX7vcvMTefXHhM6XDqUU2wCO/3RpkrMcPp1Bj7X3ZIVfFNgSxgrmjHpvcQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:15 2026 by rpki-client