This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer File: Njjfo7mFahWtnVQwa1v3BjD2NkY.cer (raw, json) Hash identifier: rsng/7a6GYv0y2FjROPTkWPKLHWxhwZchk1HQfm5RIs= Subject key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4EE1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft caRepository: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 04:28:31 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 85.155.108.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20193 (0x4ee1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Dec 19 04:28:31 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:63:f3:de:7c:e2:9e:f4:02:87:47:54:87: c9:15:eb:27:61:a1:6b:e8:19:51:8e:52:15:d7:57: 48:7b:79:11:55:a8:f6:dd:01:0c:98:02:0f:32:95: 5c:9a:99:74:7c:ae:76:12:dc:db:9f:4b:46:9d:76: 40:95:4b:82:e9:2e:01:08:29:b4:70:3f:cf:c5:e3: bd:e9:14:9b:af:c7:75:4e:9e:4c:ef:52:b2:8e:6f: b4:3f:94:83:7e:89:cc:d9:22:fd:fb:61:ea:ea:59: 02:ee:da:d7:c1:de:45:47:5e:ac:de:72:1a:db:58: 90:bc:b9:ff:7d:fd:03:cf:86:dc:d4:03:00:e5:a2: c6:87:76:77:0a:18:ec:f8:56:88:54:be:28:b7:9f: e9:37:e1:d1:c9:ea:a1:b5:36:fa:f5:7b:a9:1a:d3: 41:3f:d4:f0:0a:8f:ea:ea:f0:cd:56:d3:ec:61:fa: 36:71:79:79:0d:b2:28:56:16:2f:eb:96:a6:c7:92: e5:18:43:f6:41:06:49:fb:40:a1:23:92:9c:e3:bc: 64:bd:10:14:4c:4d:0f:e8:f6:b2:3b:1c:e9:43:09: 61:0c:e6:3c:ad:2e:f0:0e:f0:ae:c8:ce:48:22:54: bb:6f:3b:bf:68:44:ef:19:f5:10:04:2e:54:10:0b: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 85.155.108.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:9c:4c:94:0c:2d:1a:dd:07:da:fa:8a:47:0e:ea:f5:ec:6b: 99:79:42:21:c8:7e:23:a7:da:21:98:97:17:be:a3:2e:9e:e1: ad:ea:4e:37:7c:e5:69:25:b3:56:11:99:77:ad:37:f6:2c:c2: 46:54:5c:0e:53:c5:0f:fc:52:96:93:2b:01:3f:51:0a:af:e2: 7b:61:7e:41:7b:c5:d8:06:59:46:e8:22:b3:18:64:c2:45:eb: 8e:25:45:59:5c:c9:cb:d9:04:53:bd:6e:d0:19:87:cb:ef:09: 6a:c4:4e:af:d2:d7:15:1a:11:f1:d4:63:ed:78:70:23:73:76: 75:66:11:05:8e:6c:0c:39:0d:3c:ec:85:51:cb:0b:c6:99:de: 25:ff:bf:2a:40:a0:ed:22:4f:b9:ec:80:3e:7a:4d:48:5d:4c: 43:f6:5e:cc:28:67:61:97:0c:3f:4b:7e:e2:ca:07:69:7c:d3: ea:47:29:4c:ca:50:55:bc:09:63:8d:94:4a:48:fa:01:d3:45: 06:9b:80:b5:ba:98:2b:7f:13:fe:7b:a3:db:40:34:7e:6d:48: 8f:79:e1:14:75:05:be:90:51:07:40:09:9d:ee:ac:8e:47:0c: 96:88:49:e2:90:b8:ed:50:5b:89:ff:73:af:b9:c9:a8:68:a7: 60:76:f5:74 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICTuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjUxMjE5MDQyODMxWhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE1MTkzMjExMC8GA1UEBRMoMzYzOERGQTNCOTg1NkExNUFEOUQ1NDMw NkI1QkY3MDYzMEY2MzY0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALXyY/PefOKe9AKHR1SHyRXrJ2Gha+gZUY5SFddXSHt5EVWo9t0BDJgCDzKVXJqZ dHyudhLc259LRp12QJVLgukuAQgptHA/z8XjvekUm6/HdU6eTO9Sso5vtD+Ug36J zNki/fth6upZAu7a18HeRUderN5yGttYkLy5/339A8+G3NQDAOWixod2dwoY7PhW iFS+KLef6Tfh0cnqobU2+vV7qRrTQT/U8AqP6urwzVbT7GH6NnF5eQ2yKFYWL+uW pseS5RhD9kEGSftAoSOSnOO8ZL0QFExND+j2sjsc6UMJYQzmPK0u8A7wrsjOSCJU u287v2hE7xn1EAQuVBALAs0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ2ON+juYVq Fa2dVDBrW/cGMPY2RjAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE5MzIvMkE1RThCMDJEQzkzMTFGMEI0NTE4OTYxQTJFRTUyOEUvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUxOTMyLzJBNUU4QjAyREM5MzExRjBCNDUxODk2MUEyRUU1MjhFL05qamZvN21G YWhXdG5WUXdhMXYzQmpEMk5rWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAlWbbDANBgkqhkiG9w0BAQsFAAOCAQEAnZxMlAwtGt0H2vqKRw7q 9exrmXlCIch+I6faIZiXF76jLp7hrepON3zlaSWzVhGZd6039izCRlRcDlPFD/xS lpMrAT9RCq/ie2F+QXvF2AZZRugisxhkwkXrjiVFWVzJy9kEU71u0BmHy+8JasRO r9LXFRoR8dRj7XhwI3N2dWYRBY5sDDkNPOyFUcsLxpneJf+/KkCg7SJPueyAPnpN SF1MQ/ZezChnYZcMP0t+4soHaXzT6kcpTMpQVbwJY42USkj6AdNFBpuAtbqYK38T /nuj20A0fm1Ij3nhFHUFvpBRB0AJne6sjkcMlohJ4pC47VBbif9zr7nJqGinYHb1 dA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:44 2025 by rpki-client