This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
File:                     9UTm_uoP5rnfex2j2aWS_Lispik.cer (raw, json)
Hash identifier:          WwpvzysT35P8X42heyViWcfVgSbPk1XYFRnnyZ5v9xI=
Subject key identifier:   F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027880
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 27 Nov 2025 01:44:40 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 151965
                          IP: 103.67.50.0/23
                          IP: 2401:4760::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 12:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161920 (0x27880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 27 01:44:40 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:0b:37:1d:ea:cc:c5:38:f2:23:f3:36:0a:
                    35:c2:d8:73:f4:f9:fb:47:18:5b:4b:73:90:77:47:
                    78:92:81:dc:db:d9:f2:3f:d4:a0:85:73:70:43:93:
                    2d:c0:95:a9:6b:84:db:1e:21:d6:70:c1:41:f6:e9:
                    cc:96:fc:9f:bb:4b:dd:78:59:f9:39:de:9d:f3:7d:
                    5e:a3:99:6e:76:6f:1c:d7:a9:ff:a2:e6:a7:8e:61:
                    e4:8d:dd:fc:06:13:98:f2:8c:ce:cb:17:6d:53:fe:
                    8e:76:88:7e:bc:66:38:8b:52:d1:30:49:46:62:91:
                    43:fd:45:2f:08:d6:cc:a6:31:87:25:2b:99:9e:d3:
                    04:7b:67:22:50:4e:b5:7f:08:fe:5e:70:98:a4:8a:
                    9e:fc:ef:6e:98:2a:eb:c7:dc:37:64:d8:f2:cd:cc:
                    cb:cb:e6:6c:06:b7:4a:68:f1:70:4c:14:f7:a8:82:
                    75:cf:bc:cf:81:db:fb:c0:89:17:78:59:f5:02:e2:
                    51:60:73:f8:a2:59:fc:02:65:b6:af:09:f3:b1:0a:
                    d3:22:ce:e8:ec:62:2f:8b:47:7d:83:b4:a5:09:84:
                    67:ac:fc:c4:fd:1f:c5:77:54:d4:57:65:ef:4d:bb:
                    cc:bf:07:f0:1e:2b:b3:a3:fe:12:cb:87:ba:93:0b:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151965

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.50.0/23
                IPv6:
                  2401:4760::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:21:eb:87:c6:8c:65:ba:12:35:20:13:a2:52:26:8f:66:
         1e:f7:03:a9:cc:48:3b:37:23:cc:fa:66:07:42:7f:17:19:57:
         bd:49:8b:25:15:6f:76:f4:9a:66:d8:71:a4:30:f8:63:ab:28:
         c6:1c:18:3f:3b:02:9c:81:0a:a2:a2:9f:07:23:09:cf:6c:dd:
         9b:9c:3e:79:d6:f1:b5:cb:11:9d:93:98:86:8f:c3:60:8a:0b:
         04:af:cd:4c:6c:7a:e2:75:b2:b3:a4:17:a9:02:4d:bf:b0:38:
         eb:a9:ca:91:7c:8f:99:5d:ec:b1:c7:04:32:8e:1a:55:4e:d0:
         36:7b:8b:5a:a0:f4:96:f0:90:b4:c1:5a:23:e5:05:64:8f:35:
         97:67:11:b7:f5:1f:86:f3:d0:7d:aa:a5:7c:47:b5:21:65:ce:
         6a:8e:f7:a1:30:a5:5b:99:2f:b4:bc:73:bc:24:9b:46:a9:05:
         95:a6:69:d7:f4:06:6c:6b:87:9a:04:32:c9:be:51:1d:75:af:
         ca:02:3b:62:03:fa:f2:9e:43:8a:91:7a:3d:5f:ef:7d:12:4f:
         d9:96:c8:77:5c:db:dd:7c:32:32:9e:0c:5d:b2:80:9f:d9:07:
         a1:6b:3f:51:13:6c:86:d4:89:82:85:83:fd:b9:99:8b:b0:5f:
         c6:cf:5a:8e
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAniAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTEyNzAxNDQ0MFoXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxREQ1NUIxMTAvBgNVBAUTKEY1NDRFNkZFRUEwRkU2QjlERjdCMURB
M0Q5QTU5MkZDQjhBQ0E2MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDaEgs3HerMxTjyI/M2CjXC2HP0+ftHGFtLc5B3R3iSgdzb2fI/1KCFc3BDky3A
lalrhNseIdZwwUH26cyW/J+7S914Wfk53p3zfV6jmW52bxzXqf+i5qeOYeSN3fwG
E5jyjM7LF21T/o52iH68ZjiLUtEwSUZikUP9RS8I1symMYclK5me0wR7ZyJQTrV/
CP5ecJikip78726YKuvH3Ddk2PLNzMvL5mwGt0po8XBMFPeognXPvM+B2/vAiRd4
WfUC4lFgc/iiWfwCZbavCfOxCtMizujsYi+LR32DtKUJhGes/MT9H8V3VNRXZe9N
u8y/B/AeK7Oj/hLLh7qTC2LnAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU9UTm/uoP
5rnfex2j2aWS/LispikwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MURENTVCLzhGNDM0OUM4NkQ3NzExRUU4MzU1NEU3NEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFERDU1Qi84RjQzNDlDODZENzcxMUVFODM1NTRFNzRDNEY5QUUwMi85VVRtX3Vv
UDVybmZleDJqMmFXU19MaXNwaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlGdMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ0MyMA0EAgAC
MAcDBQAkAUdgMA0GCSqGSIb3DQEBCwUAA4IBAQBMsiHrh8aMZboSNSATolImj2Ye
9wOpzEg7NyPM+mYHQn8XGVe9SYslFW929Jpm2HGkMPhjqyjGHBg/OwKcgQqiop8H
IwnPbN2bnD551vG1yxGdk5iGj8NgigsEr81MbHridbKzpBepAk2/sDjrqcqRfI+Z
XeyxxwQyjhpVTtA2e4taoPSW8JC0wVoj5QVkjzWXZxG39R+G89B9qqV8R7UhZc5q
jvehMKVbmS+0vHO8JJtGqQWVpmnX9AZsa4eaBDLJvlEdda/KAjtiA/rynkOKkXo9
X+99Ek/Zlsh3XNvdfDIyngxdsoCf2Qehaz9RE2yG1ImChYP9uZmLsF/Gz1qO
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:23:24 2025 by rpki-client