This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.cer (raw, json) Hash identifier: RIGRN6V+CO6a3xc17RsAFiusUaQN8uGVvl8hkAg7fLs= Subject key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 3F84A47707F271CD4836A07451CDA178B28A489D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 30 Dec 2025 06:17:38 +0000 Certificate not after: Tue 29 Dec 2026 06:22:38 +0000 Subordinate resources: IP: 85.155.227.0/24 IP: 2a06:a005:d2d::/48 IP: 2a06:a005:1507::/48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:84:a4:77:07:f2:71:cd:48:36:a0:74:51:cd:a1:78:b2:8a:48:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 30 06:17:38 2025 GMT Not After : Dec 29 06:22:38 2026 GMT Subject: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:7c:60:ad:98:e3:fd:42:e2:78:48:2d:d6: 67:4a:d2:2c:6b:37:c0:c1:59:2f:1f:91:74:86:65: 60:0b:09:f0:65:ae:f6:60:06:11:61:86:9c:ba:17: 23:64:84:64:77:4e:a6:ae:92:86:1a:d9:00:d7:1e: 3a:b6:6e:1c:11:05:18:a4:2e:f6:bd:69:dd:6a:d5: 95:a8:db:95:c3:e5:10:fe:c5:3a:62:cc:f3:ec:6f: 18:9d:e7:dc:b4:1c:d0:36:9b:83:41:76:42:98:5c: 7d:1a:87:22:12:88:ac:5c:87:03:6b:3b:c0:9e:76: b7:dc:a7:68:89:01:83:75:28:d3:35:b9:87:c9:17: 99:ac:ec:e5:c2:0a:c5:07:fd:5a:f2:4a:6a:85:85: 43:dc:5c:69:31:a6:29:12:eb:28:c1:86:7f:71:17: 87:0a:52:db:a1:01:76:86:0e:2a:21:4a:0c:69:6c: 61:6f:11:1b:fe:cf:a7:c8:fe:be:aa:90:2b:5f:21: 37:66:72:45:93:1e:42:36:cf:4b:81:66:6f:84:38: bb:b4:e2:a1:9b:96:d9:82:3d:b9:98:4a:be:ec:36: 94:b0:d7:38:15:2e:27:ec:94:ae:5d:d4:1e:62:9b: 18:9f:d7:32:ff:b1:0e:d3:66:ae:4c:e3:eb:f3:75: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.227.0/24 IPv6: 2a06:a005:d2d::/48 2a06:a005:1507::/48 Signature Algorithm: sha256WithRSAEncryption 30:e0:0a:aa:6a:a2:2b:46:7d:71:76:46:3e:25:bf:ad:93:da: 67:71:bf:53:7f:30:12:c9:3b:f2:db:b0:b5:e7:be:58:65:09: 8a:ee:a1:26:10:a5:7d:47:bc:4b:a5:cb:a5:c7:4e:5d:2d:ab: 5c:48:6f:9c:ca:8e:62:dd:53:ba:9d:65:1f:16:25:11:2a:12: 95:7f:dd:0d:60:d0:7b:7c:ea:ec:da:de:4d:66:83:64:2d:34: 6a:99:2e:20:c9:0e:87:28:56:b6:21:d1:4d:2f:8e:89:7f:db: 65:30:07:eb:45:32:8c:db:b0:b3:cf:91:e6:37:d5:9e:8f:24: 6c:a7:c9:85:89:f8:8d:0e:00:bb:54:91:e4:b0:60:72:9a:39: 3e:67:45:7e:96:e2:ed:8e:cf:f0:33:43:5a:1c:e5:a6:73:4e: d7:8c:f4:c7:40:4b:e7:e5:0d:7c:41:f9:16:26:f0:e1:23:7a: 7d:df:44:3f:f8:c4:a9:b7:7e:2a:07:d3:1b:41:bc:87:b0:ec: 19:67:54:e7:24:ab:56:86:30:4c:7c:f0:76:ca:1b:02:e5:8c: f6:bb:ba:d7:b5:ab:0f:4f:e4:19:43:91:9a:5e:22:8a:09:d4: ed:59:cd:b1:02:86:31:d1:97:d7:b1:2b:af:90:c1:d8:b6:b4: 0d:28:85:83 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUP4Skdwfycc1INqB0Uc2heLKKSJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMzAwNjE3MzhaFw0yNjEyMjkwNjIyMzhaMDMxMTAvBgNV BAMTKDY1NzhFNzk2NjIwMDA0OTZFQjE1NDBEOEJEOEZBNjVFRDhENjNBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LHxgrZjj/ULieEgt1mdK0ixr N8DBWS8fkXSGZWALCfBlrvZgBhFhhpy6FyNkhGR3TqaukoYa2QDXHjq2bhwRBRik Lva9ad1q1ZWo25XD5RD+xTpizPPsbxid59y0HNA2m4NBdkKYXH0ahyISiKxchwNr O8Cedrfcp2iJAYN1KNM1uYfJF5ms7OXCCsUH/VrySmqFhUPcXGkxpikS6yjBhn9x F4cKUtuhAXaGDiohSgxpbGFvERv+z6fI/r6qkCtfITdmckWTHkI2z0uBZm+EOLu0 4qGbltmCPbmYSr7sNpSw1zgVLifslK5d1B5imxif1zL/sQ7TZq5M4+vzdc7VAgMB AAGjggLrMIIC5zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRleOeWYgAElusV QNi9j6Ze2NY6YjAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5 bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZi NC1lNWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC8wgYsGCCsGAQUFBzAKhn9y c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZDMw NmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC84LzY1NzhFNzk2NjIwMDA0 OTZFQjE1NDBEOEJEOEZBNjVFRDhENjNBNjIubWZ0MDwGCCsGAQUFBzANhjBodHRw czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwDAQCAAEw BgMEAFWb4zAYBAIAAjASAwcAKgagBQ0tAwcAKgagBRUHMA0GCSqGSIb3DQEBCwUA A4IBAQAw4AqqaqIrRn1xdkY+Jb+tk9pncb9TfzASyTvy27C1575YZQmK7qEmEKV9 R7xLpculx05dLatcSG+cyo5i3VO6nWUfFiURKhKVf90NYNB7fOrs2t5NZoNkLTRq mS4gyQ6HKFa2IdFNL46Jf9tlMAfrRTKM27Czz5HmN9WejyRsp8mFifiNDgC7VJHk sGBymjk+Z0V+luLtjs/wM0NaHOWmc07XjPTHQEvn5Q18QfkWJvDhI3p930Q/+MSp t34qB9MbQbyHsOwZZ1TnJKtWhjBMfPB2yhsC5Yz2u7rXtasPT+QZQ5GaXiKKCdTt Wc2xAoYx0ZfXsSuvkMHYtrQNKIWD -----END CERTIFICATE-----Generated at Wed Dec 31 06:44:04 2025 by rpki-client