This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/76D5813F41356479241C31A3CF208B282FDAD885.cer File: 76D5813F41356479241C31A3CF208B282FDAD885.cer (raw, json) Hash identifier: 1ch2EkbhOlMZhZYXnVrOsckNWbEiHTcrwqAKVCRD1pQ= Subject key identifier: 76:D5:81:3F:41:35:64:79:24:1C:31:A3:CF:20:8B:28:2F:DA:D8:85 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 07F867DAB09CD22725F8923A0B21ED8852FC5749 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/4/76D5813F41356479241C31A3CF208B282FDAD885.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 21 Dec 2025 03:21:38 +0000 Certificate not after: Sun 20 Dec 2026 03:26:38 +0000 Subordinate resources: IP: 85.155.228.0/24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f8:67:da:b0:9c:d2:27:25:f8:92:3a:0b:21:ed:88:52:fc:57:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 21 03:21:38 2025 GMT Not After : Dec 20 03:26:38 2026 GMT Subject: CN=76D5813F41356479241C31A3CF208B282FDAD885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:a6:c7:e4:12:82:31:83:fb:4d:a9:6b:02: f6:1c:78:90:f6:4a:a2:38:db:3b:f8:5e:c4:3e:76: 86:3e:a9:08:f8:9f:91:ff:1f:01:f4:30:c5:65:e6: 10:bf:ff:c4:74:e3:39:cf:5a:2c:ca:f6:77:eb:47: 75:42:ae:70:d2:c8:77:32:e3:f3:6c:18:78:af:c3: 1b:0d:6f:6a:86:ba:ac:90:4b:a8:db:9c:5c:1c:15: 78:91:b6:2c:db:8c:85:37:c2:31:cb:19:ba:ad:0a: c6:12:60:39:e6:5b:31:c9:a7:64:28:ef:e5:7f:f0: ef:22:f9:79:90:e9:76:dd:3c:34:7a:37:5c:5e:90: 7a:98:3b:6c:1a:f6:0d:44:e6:b9:5e:ea:71:33:6e: 50:55:98:b4:07:f7:ed:24:24:f5:0f:8f:56:65:91: d7:cd:2e:22:dd:6c:d7:23:66:40:5e:bd:dc:a8:bf: 94:43:b8:27:04:50:43:de:1f:d3:f5:2e:eb:86:db: 6e:7c:54:29:63:ef:3f:a0:08:5e:3d:2f:e3:9d:5c: 12:c6:70:f5:25:13:e3:23:d3:8d:43:65:e6:46:2d: 8b:71:0e:37:41:53:bd:18:27:fe:e5:07:33:e4:4e: d5:db:ec:0c:85:f4:fb:2f:67:3e:d3:40:e1:c8:5f: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:D5:81:3F:41:35:64:79:24:1C:31:A3:CF:20:8B:28:2F:DA:D8:85 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/4/76D5813F41356479241C31A3CF208B282FDAD885.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.228.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:9f:42:9c:5c:d7:cb:fe:db:5f:76:f4:bc:b7:b6:1f:76:3d: 7e:a7:eb:58:1c:51:d1:42:38:a3:07:c1:1d:e6:2c:4f:8f:54: c2:fa:45:f1:95:33:9f:27:cb:75:1a:f2:6b:43:f9:fb:b0:60: 7c:5d:a5:11:21:38:40:50:fb:7c:12:7a:2e:19:83:aa:65:37: 2e:cb:13:7c:16:0a:f8:0b:97:60:31:b1:e0:5d:16:6b:c3:08: 08:eb:b8:f8:07:12:70:7b:ca:84:47:ac:1f:9b:93:66:d8:c0: 9f:6a:e1:6e:fe:c4:15:5e:85:b0:d7:77:4a:4b:4f:c2:ed:01: 6c:54:f9:ff:f7:0b:d2:7f:26:27:06:b5:91:4b:a3:0d:20:a5: c0:9d:3b:f6:e0:d8:66:9d:3d:e2:c7:57:99:e8:70:2c:d9:66: 53:85:da:fc:9c:51:9a:9b:0f:1e:c8:00:e0:af:b2:36:e9:73: 67:9c:83:35:7e:0b:6d:4c:97:9d:e7:6f:f4:c3:a8:06:ba:30: c2:cc:19:98:e0:16:18:f3:be:c4:59:d7:41:cd:d7:e0:75:1e: 56:57:4e:26:2c:f9:17:80:26:b3:19:ee:bb:f9:df:99:35:12: 58:85:ad:3d:a1:95:92:3d:70:bc:86:1a:b7:f4:9c:11:76:a9: a2:51:30:94 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIUB/hn2rCc0icl+JI6CyHtiFL8V0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMjEwMzIxMzhaFw0yNjEyMjAwMzI2MzhaMDMxMTAvBgNV BAMTKDc2RDU4MTNGNDEzNTY0NzkyNDFDMzFBM0NGMjA4QjI4MkZEQUQ4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXOqbH5BKCMYP7TalrAvYceJD2 SqI42zv4XsQ+doY+qQj4n5H/HwH0MMVl5hC//8R04znPWizK9nfrR3VCrnDSyHcy 4/NsGHivwxsNb2qGuqyQS6jbnFwcFXiRtizbjIU3wjHLGbqtCsYSYDnmWzHJp2Qo 7+V/8O8i+XmQ6XbdPDR6N1xekHqYO2wa9g1E5rle6nEzblBVmLQH9+0kJPUPj1Zl kdfNLiLdbNcjZkBevdyov5RDuCcEUEPeH9P1LuuG2258VClj7z+gCF49L+OdXBLG cPUlE+Mj041DZeZGLYtxDjdBU70YJ/7lBzPkTtXb7AyF9PsvZz7TQOHIX4ANAgMB AAGjggLRMIICzTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR21YE/QTVkeSQc MaPPIIsoL9rYhTAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5 bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODQxODVi Ny0wMzQzLTRhNjQtYWEzNC04MmY2MWVjMGRmZGMvNC8wgYsGCCsGAQUFBzAKhn9y c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4NDE4 NWI3LTAzNDMtNGE2NC1hYTM0LTgyZjYxZWMwZGZkYy80Lzc2RDU4MTNGNDEzNTY0 NzkyNDFDMzFBM0NGMjA4QjI4MkZEQUQ4ODUubWZ0MDwGCCsGAQUFBzANhjBodHRw czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAFWb5DANBgkqhkiG9w0BAQsFAAOCAQEAm59CnFzXy/7bX3b0vLe2H3Y9fqfr WBxR0UI4owfBHeYsT49UwvpF8ZUznyfLdRrya0P5+7BgfF2lESE4QFD7fBJ6LhmD qmU3LssTfBYK+AuXYDGx4F0Wa8MICOu4+AcScHvKhEesH5uTZtjAn2rhbv7EFV6F sNd3SktPwu0BbFT5//cL0n8mJwa1kUujDSClwJ079uDYZp094sdXmehwLNlmU4Xa /JxRmpsPHsgA4K+yNulzZ5yDNX4LbUyXnedv9MOoBrowwswZmOAWGPO+xFnXQc3X 4HUeVldOJiz5F4Amsxnuu/nfmTUSWIWtPaGVkj1wvIYat/ScEXapolEwlA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:49:50 2025 by rpki-client