This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer File: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer (raw, json) Hash identifier: QZw4MP5vDWO6oexa7nwuAJpasCK4lUVCbuMr7OO058Y= Subject key identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1C638A7922954835AD9EAB8C39B2D793DD0BEAAC Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 24 Jan 2026 22:47:16 +0000 Certificate not after: Sat 23 Jan 2027 22:52:16 +0000 Subordinate resources: IP: 2a05:dfc3:fa00::/40 IP: 2a0a:6044:6400::/40 IP: 2a0a:6044:aa10::/48 IP: 2a0a:6044:c110::/44 IP: 2a0f:6283:1000::/40 IP: 2a0f:6283:1300::/40 IP: 2a0f:6284:5000::/36 IP: 2a0f:6286::/32 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:63:8a:79:22:95:48:35:ad:9e:ab:8c:39:b2:d7:93:dd:0b:ea:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jan 24 22:47:16 2026 GMT Not After : Jan 23 22:52:16 2027 GMT Subject: CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:05:f1:7a:28:5d:a0:ba:64:fe:ab:92:00: fe:d6:f9:be:b9:4d:85:f4:7b:5b:b2:7e:1f:5e:d3: 4d:62:a3:9d:5c:a1:56:96:0a:b1:bd:53:7f:f5:a1: 5b:e1:25:70:35:cb:3b:d3:1b:e3:0a:d6:f1:5f:56: e3:6f:70:fb:f8:4f:1f:4c:7a:c3:01:da:f0:de:e0: 90:06:c5:ff:f0:dd:e6:f7:0a:45:61:40:4e:44:4e: 0c:be:78:78:4f:b2:ec:39:d7:df:34:59:6f:04:bb: 4f:0d:d0:43:66:e7:67:15:b1:60:bc:f0:ab:3f:c2: ac:7f:9e:4f:29:10:33:1a:f6:9b:e9:e6:2f:42:3c: 73:34:bd:69:2e:18:87:f2:41:b1:99:63:b6:92:d3: 30:96:f7:bb:30:69:4c:6c:6a:d0:e3:a5:45:9c:cf: 71:3b:9b:d5:6b:cf:0c:46:46:83:44:90:66:33:b5: 27:8f:91:c9:63:fe:31:dd:47:10:08:7b:75:eb:99: c0:01:b2:94:75:f2:90:08:aa:6e:f6:f1:56:61:3f: 65:e6:29:66:3a:fa:38:1f:15:d5:7d:f0:0d:e3:71: 97:43:82:60:b5:ed:07:00:5d:b3:2d:50:2f:45:fd: f3:f7:14:c8:58:57:23:75:66:be:cb:cd:85:46:ac: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fa00::/40 2a0a:6044:6400::/40 2a0a:6044:aa10::/48 2a0a:6044:c110::/44 2a0f:6283:1000::/40 2a0f:6283:1300::/40 2a0f:6284:5000::/36 2a0f:6286::/32 Signature Algorithm: sha256WithRSAEncryption 46:24:b7:6e:b8:7e:41:ab:74:ed:da:6d:bd:2b:a3:ab:40:cd: 25:11:a2:05:92:ad:bb:85:a2:b9:83:96:93:bc:00:f1:75:ef: a2:2b:d1:25:24:50:16:e7:3b:b7:fc:08:d9:7e:68:34:f1:e3: 2c:d9:dc:17:29:78:0d:01:35:8d:cf:55:ee:e7:08:3f:9a:9d: 9a:23:60:e2:3c:c5:cd:15:48:1f:46:96:c5:e3:f8:77:63:ef: e2:70:f4:4f:6e:34:59:2c:59:67:e0:bf:91:6f:f7:f3:6c:e2: 6c:cf:fb:5e:6c:e1:ab:40:6c:08:cf:40:e6:42:11:7e:89:78: 22:76:56:14:a0:db:fa:d6:14:71:eb:c4:8d:50:d6:b3:f8:c6: e7:a7:3e:07:4d:b8:41:e7:65:e2:88:2a:a5:f9:d9:05:0a:d6: 57:a7:77:33:b9:4c:a9:be:da:2d:81:c8:5d:ef:5c:a1:7d:f9: dd:b0:90:02:8f:0e:5c:3a:03:dc:e2:16:b3:df:7e:bd:c4:b5: 26:7e:6f:36:3b:9e:43:51:ae:1b:26:0d:f4:d7:b8:d0:e1:53: 51:f0:f1:8c:c3:c8:c0:3a:29:22:90:57:b8:2d:c6:bf:a2:a8: ed:e9:52:00:f2:04:42:20:77:47:9e:e8:57:aa:65:48:f6:68: 5d:1f:8f:32 -----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgIUHGOKeSKVSDWtnquMObLXk90L6qwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAxMjQyMjQ3MTZaFw0yNzAxMjMyMjUyMTZaMDMxMTAvBgNV BAMTKDBENkI1MzgzNDlCNDM2QURFOEQxQ0FGQzczRTUzNDFCQkM4OEFENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqHQXxeihdoLpk/quSAP7W+b65 TYX0e1uyfh9e001io51coVaWCrG9U3/1oVvhJXA1yzvTG+MK1vFfVuNvcPv4Tx9M esMB2vDe4JAGxf/w3eb3CkVhQE5ETgy+eHhPsuw51980WW8Eu08N0ENm52cVsWC8 8Ks/wqx/nk8pEDMa9pvp5i9CPHM0vWkuGIfyQbGZY7aS0zCW97swaUxsatDjpUWc z3E7m9VrzwxGRoNEkGYztSePkclj/jHdRxAIe3XrmcABspR18pAIqm728VZhP2Xm KWY6+jgfFdV98A3jcZdDgmC17QcAXbMtUC9F/fP3FMhYVyN1Zr7LzYVGrEV1AgMB AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNa1ODSbQ2rejR yvxz5TQbvIitVzAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8yLzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgzYzkwLzIv MEQ2QjUzODM0OUI0MzZBREU4RDFDQUZDNzNFNTM0MUJCQzg4QUQ1Ny5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEH AQH/BEswSTBHBAIAAjBBAwYAKgXfw/oDBgAqCmBEZAMHACoKYESqEAMHBCoKYETB EAMGACoPYoMQAwYAKg9igxMDBgQqD2KEUAMFACoPYoYwDQYJKoZIhvcNAQELBQAD ggEBAEYkt264fkGrdO3abb0ro6tAzSURogWSrbuFormDlpO8APF176Ir0SUkUBbn O7f8CNl+aDTx4yzZ3BcpeA0BNY3PVe7nCD+anZojYOI8xc0VSB9GlsXj+Hdj7+Jw 9E9uNFksWWfgv5Fv9/Ns4mzP+15s4atAbAjPQOZCEX6JeCJ2VhSg2/rWFHHrxI1Q 1rP4xuenPgdNuEHnZeKIKqX52QUK1lendzO5TKm+2i2ByF3vXKF9+d2wkAKPDlw6 A9ziFrPffr3EtSZ+bzY7nkNRrhsmDfTXuNDhU1Hw8YzDyMA6KSKQV7gtxr+iqO3p UgDyBEIgd0ee6FeqZUj2aF0fjzI= -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:04 2026 by rpki-client