This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer File: 06DB699D191D4B0289910C88E99CF94A671142F5.cer (raw, json) Hash identifier: HjiTbJasU/iKudt7MA94+aJEMBSR/TnYM8eUjsfapqE= Subject key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 5D20C9C19F4965FEA253B2274DFD73AC3837DBF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 01:32:53 +0000 Certificate not after: Tue 19 Jan 2027 01:37:53 +0000 Subordinate resources: IP: 83.142.31.0/24 IP: 2a06:9f41::/32 IP: 2a0d:d906::/32 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:20:c9:c1:9f:49:65:fe:a2:53:b2:27:4d:fd:73:ac:38:37:db:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Jan 20 01:32:53 2026 GMT Not After : Jan 19 01:37:53 2027 GMT Subject: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0e:be:be:52:97:48:c9:50:70:bf:44:35:1f: 09:f6:d0:20:70:ca:e4:8a:00:5a:f6:b1:58:90:f8: 69:cf:14:d0:c2:6a:6d:37:63:f6:b3:52:5e:1a:0a: 93:ee:85:d4:73:50:03:9f:17:ea:58:9e:20:bc:43: 61:e0:11:d9:ba:d5:76:15:48:03:ba:ba:5a:35:17: 1a:89:47:4e:83:2f:a1:e5:83:70:bd:08:a9:ef:d5: 2a:a5:bc:34:c5:60:4d:c2:a9:77:dd:4c:fc:3f:0a: 81:e1:b9:cc:20:54:e6:be:2f:65:d0:b7:65:cd:5b: 6a:ec:95:ea:a3:33:9f:f9:5d:f0:04:51:fa:08:dd: 3a:bc:f1:79:3f:fc:2e:7a:aa:ce:72:20:92:16:7e: 01:75:61:5b:b6:80:e4:81:25:69:08:50:c6:78:50: 2b:4b:2f:56:49:1b:70:a6:2b:e4:61:90:f3:09:9a: 58:0d:5d:f2:16:58:55:ff:d4:72:59:16:78:80:bc: ec:2b:f6:39:22:62:c3:00:5d:63:84:f4:0b:21:68: e0:ff:23:48:bb:63:42:63:77:b2:48:17:a9:5e:ed: b2:fd:03:58:00:ce:8c:48:ee:9b:21:e6:25:de:20: a5:55:4e:2d:d0:f2:38:db:21:e9:95:f5:4c:4d:9f: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.142.31.0/24 IPv6: 2a06:9f41::/32 2a0d:d906::/32 Signature Algorithm: sha256WithRSAEncryption 46:8c:13:2c:5f:12:ee:4d:7e:c9:40:de:f7:2e:08:a9:17:08: 5e:ba:e6:16:70:2e:b0:9f:f1:90:d6:66:ad:ba:ba:94:07:37: 48:93:b6:10:9c:bf:14:77:d1:b2:df:00:a1:fa:97:f0:7b:34: 10:d9:84:f0:b4:9f:77:0d:9a:ec:03:cb:b0:f5:2e:27:37:b7: 3e:80:cc:0b:56:eb:dc:4f:fd:83:19:62:47:fa:56:b7:d5:8e: be:d1:7f:79:4b:f6:83:1d:e3:64:58:3a:8a:9a:cb:34:24:67: a0:07:4a:ba:17:6a:ff:b0:c8:dd:62:fd:b7:79:27:ae:2c:71: b9:eb:0f:95:d4:07:dc:90:e8:8a:aa:2f:86:a9:f7:2e:53:3d: bf:1c:ad:00:3d:0e:15:e4:16:a9:e3:0a:e8:17:b6:03:b1:19: e5:42:fa:9b:df:e7:2a:78:6a:80:e6:55:d4:b6:40:f5:9f:04: c3:5e:35:d5:35:58:84:8b:11:4b:0d:d6:78:dd:78:91:e9:1f: 97:cf:76:61:7e:6a:88:71:0d:97:5d:cb:36:e1:6f:bf:3c:1b: d2:79:08:e7:6f:80:d7:b5:3c:30:df:72:9b:a6:38:4e:22:40: 7a:85:bd:5a:cf:e3:b9:fc:ca:8d:bc:81:2f:b5:a6:4f:99:11: 91:d0:57:60 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUXSDJwZ9JZf6iU7InTf1zrDg32/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNjAxMjAwMTMyNTNaFw0yNzAxMTkwMTM3NTNaMDMxMTAvBgNV BAMTKDA2REI2OTlEMTkxRDRCMDI4OTkxMEM4OEU5OUNGOTRBNjcxMTQyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWDr6+UpdIyVBwv0Q1Hwn20CBw yuSKAFr2sViQ+GnPFNDCam03Y/azUl4aCpPuhdRzUAOfF+pYniC8Q2HgEdm61XYV SAO6ulo1FxqJR06DL6Hlg3C9CKnv1SqlvDTFYE3CqXfdTPw/CoHhucwgVOa+L2XQ t2XNW2rsleqjM5/5XfAEUfoI3Tq88Xk//C56qs5yIJIWfgF1YVu2gOSBJWkIUMZ4 UCtLL1ZJG3CmK+RhkPMJmlgNXfIWWFX/1HJZFniAvOwr9jkiYsMAXWOE9AshaOD/ I0i7Y0Jjd7JIF6le7bL9A1gAzoxI7psh5iXeIKVVTi3Q8jjbIemV9UxNnygnAgMB AAGjggLnMIIC4zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQG22mdGR1LAomR DIjpnPlKZxFC9TAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5 bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0 ZC03ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wgYsGCCsGAQUFBzAKhn9y c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMwMTE5 NDRkLTdlYjMtNGY2My1hMTU5LWNmZjAyYzAyNmFiZi8yLzA2REI2OTlEMTkxRDRC MDI4OTkxMEM4OEU5OUNGOTRBNjcxMTQyRjUubWZ0MDwGCCsGAQUFBzANhjBodHRw czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1BggrBgEFBQcBBwEB/wQmMCQwDAQCAAEw BgMEAFOOHzAUBAIAAjAOAwUAKgafQQMFACoN2QYwDQYJKoZIhvcNAQELBQADggEB AEaMEyxfEu5NfslA3vcuCKkXCF665hZwLrCf8ZDWZq26upQHN0iTthCcvxR30bLf AKH6l/B7NBDZhPC0n3cNmuwDy7D1Lic3tz6AzAtW69xP/YMZYkf6VrfVjr7Rf3lL 9oMd42RYOoqayzQkZ6AHSroXav+wyN1i/bd5J64scbnrD5XUB9yQ6IqqL4ap9y5T Pb8crQA9DhXkFqnjCugXtgOxGeVC+pvf5yp4aoDmVdS2QPWfBMNeNdU1WISLEUsN 1njdeJHpH5fPdmF+aohxDZddyzbhb788G9J5COdvgNe1PDDfcpumOE4iQHqFvVrP 47n8yo28gS+1pk+ZEZHQV2A= -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:07 2026 by rpki-client