This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer (raw, json) Hash identifier: MUEGH4sJsx4OsQPhoUrtkO/wWAgYDK2/v1UVMdxOa+I= Subject key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 40EA16C6D6FAEA456D066098D7655AAFD3E517A3 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 24 Jan 2026 12:39:25 +0000 Certificate not after: Sat 23 Jan 2027 12:44:25 +0000 Subordinate resources: IP: 2a0a:6044:7c00::/40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ea:16:c6:d6:fa:ea:45:6d:06:60:98:d7:65:5a:af:d3:e5:17:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jan 24 12:39:25 2026 GMT Not After : Jan 23 12:44:25 2027 GMT Subject: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:9c:49:95:95:c8:21:10:28:eb:46:8d:ce: 0d:32:80:68:e4:77:9e:11:97:80:a2:9d:e0:68:61: e9:21:76:2d:8c:c7:0a:38:a0:4d:8a:7d:0c:04:ba: 9b:ca:9f:5a:a8:41:90:82:c5:49:89:b5:f5:99:1c: 2d:3f:7b:94:ff:11:a2:bf:c6:4d:02:55:b2:c8:83: 13:57:1e:9e:ae:c4:0b:6f:48:da:99:79:9e:0f:c5: c9:32:ca:8d:e4:fe:ca:47:47:9c:79:24:de:b3:d8: bf:23:11:75:69:a2:5d:58:75:be:9c:ee:cf:16:1a: ff:df:09:57:d8:2b:23:c2:28:60:ae:22:4c:1a:da: 82:ab:b8:ef:91:1e:cb:33:78:c4:62:d1:c3:a5:29: 06:70:49:1d:de:66:16:41:77:0b:67:60:29:e7:66: 21:c6:a5:b1:01:92:72:ba:95:65:9c:28:ac:c5:cc: 07:ba:9c:bb:fd:9d:2e:3a:57:f0:98:0d:22:0d:ba: 9c:c1:27:2a:f8:62:9e:4b:7d:3b:fe:8c:03:72:cb: 69:eb:7d:05:c7:c1:c8:e7:f4:3f:6c:e0:26:8d:f3: 67:9b:dd:af:8c:e5:1a:48:40:cd:66:c6:1c:d1:ca: f9:4e:54:07:d9:2c:9a:1c:52:d0:7e:83:d8:62:43: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7c00::/40 Signature Algorithm: sha256WithRSAEncryption 4e:87:04:c6:03:90:76:1d:0a:4a:b0:b6:76:73:45:63:a4:d7: b4:ae:98:20:d5:0a:7b:6c:6c:f9:d1:40:bf:bc:31:11:9a:2e: bd:98:0e:d8:e6:90:f2:78:e9:f7:51:bf:b5:de:16:93:06:be: e7:27:97:63:24:53:8f:fe:ac:f6:f8:2d:88:25:61:33:db:96: 00:f8:31:fe:2c:2a:b5:97:d7:dd:14:57:8c:d3:c4:81:2b:bc: 4c:ec:c7:e5:77:6d:7b:f7:5d:3f:08:89:a5:6f:3e:46:f2:48: 45:be:95:99:43:a8:60:39:ac:6a:62:31:6e:22:12:06:a7:ce: 1d:c6:e6:ae:6e:1e:7e:b1:46:73:c6:37:ca:a0:e3:6b:63:57: 2e:f6:df:4a:70:05:12:4b:3e:4d:6e:5e:1f:f7:42:37:d1:11: 09:0c:99:66:f9:5e:8e:6c:a6:55:73:b2:25:9d:c9:3a:50:8b: cc:48:d9:02:a5:4e:63:c4:f7:ff:e5:f7:4c:da:9c:f0:5c:6b: 67:2c:46:d1:59:a0:e0:e3:02:b0:fc:e0:18:d0:17:33:3d:ae: 89:ab:36:dd:42:2c:a0:7a:94:55:d2:5e:4c:ef:66:a2:55:af: d7:60:70:5b:8e:10:b3:f5:0b:98:25:8b:10:a3:3d:f4:af:81: 28:6e:72:0c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQOoWxtb66kVtBmCY12Var9PlF6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAxMjQxMjM5MjVaFw0yNzAxMjMxMjQ0MjVaMDMxMTAvBgNV BAMTKDdDNEUyNTcxRDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9JxJlZXIIRAo60aNzg0ygGjk d54Rl4CineBoYekhdi2Mxwo4oE2KfQwEupvKn1qoQZCCxUmJtfWZHC0/e5T/EaK/ xk0CVbLIgxNXHp6uxAtvSNqZeZ4Pxckyyo3k/spHR5x5JN6z2L8jEXVpol1Ydb6c 7s8WGv/fCVfYKyPCKGCuIkwa2oKruO+RHsszeMRi0cOlKQZwSR3eZhZBdwtnYCnn ZiHGpbEBknK6lWWcKKzFzAe6nLv9nS46V/CYDSINupzBJyr4Yp5LfTv+jANyy2nr fQXHwcjn9D9s4CaN82eb3a+M5RpIQM1mxhzRyvlOVAfZLJocUtB+g9hiQ2KfAgMB AAGjggLhMIIC3TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8TiVx05U164O0 vdTkZootLBd2MTAfBgNVHSMEGDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNV HQ8BAf8EBAMCAQYwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3 Mi5uZXQvcmVwby9IWUVIT1NULzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5 NEM2RTY2OTk1MUZENy5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RC MUVBQUI5NEM2RTY2OTk1MUZENy5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8G CCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzCB iwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2MmNiLzUv N0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5tZnQwPAYI KwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYAKgpgRHwwDQYJKoZIhvcNAQELBQADggEBAE6HBMYD kHYdCkqwtnZzRWOk17SumCDVCntsbPnRQL+8MRGaLr2YDtjmkPJ46fdRv7XeFpMG vucnl2MkU4/+rPb4LYglYTPblgD4Mf4sKrWX190UV4zTxIErvEzsx+V3bXv3XT8I iaVvPkbySEW+lZlDqGA5rGpiMW4iEganzh3G5q5uHn6xRnPGN8qg42tjVy7230pw BRJLPk1uXh/3QjfREQkMmWb5Xo5splVzsiWdyTpQi8xI2QKlTmPE9//l90zanPBc a2csRtFZoODjArD84BjQFzM9romrNt1CLKB6lFXSXkzvZqJVr9dgcFuOELP1C5gl ixCjPfSvgShucgw= -----END CERTIFICATE-----Generated at Sun Jan 25 07:12:43 2026 by rpki-client