This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer File: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer (raw, json) Hash identifier: NAW13OCDHczfeYMgLb5Ki/IFKk8xsstQ6BmCW3J48RQ= Subject key identifier: E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A82541902900EFDBA66E9F62D86C50FFF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 14 Nov 2025 12:25:40 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 210541 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:54:19:02:90:0e:fd:ba:66:e9:f6:2d:86:c5:0f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 14 12:25:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:b8:aa:1a:a4:70:2d:86:9f:de:d0:a0:8e: 2d:22:37:a1:02:78:bf:8a:21:03:37:5e:05:0d:d1: 7b:52:1e:f7:8f:67:24:3a:52:bf:88:86:7e:2b:56: 5a:78:ab:ba:d5:1d:7b:18:f6:2b:31:a4:6a:16:3c: 31:03:1a:65:db:bb:91:d7:d9:99:04:7b:11:8c:a9: 49:30:37:8c:83:9f:1d:6e:9f:f3:a9:62:43:56:94: e8:57:a5:e8:e2:5e:3d:e3:c5:45:ff:2c:3f:5f:ce: ed:f7:a5:c8:22:2a:fd:16:f0:af:ed:1f:bc:e8:e8: 6f:cb:59:e0:9c:01:af:9a:cc:4c:02:2b:06:52:73: a3:34:e9:d5:d0:83:33:38:07:03:6c:6a:1f:1f:9b: 3a:07:9c:69:d9:d6:c1:e1:52:31:28:17:f8:f5:ef: 6d:a3:a4:0b:3a:25:19:ac:fb:1c:86:22:86:a3:5e: d5:2b:e7:4a:e1:62:96:e1:b8:a5:13:93:e2:b8:df: d4:23:3f:cb:7f:7f:f2:97:b8:54:8a:6d:53:2c:ac: a6:b5:38:e5:c3:ef:28:06:3c:d4:bd:14:94:6c:24: 59:a4:84:27:f6:26:ec:40:bb:6e:4f:8c:5a:2c:49: 72:8e:3f:92:3c:de:38:ef:99:9f:55:b9:6d:f6:16: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210541 Signature Algorithm: sha256WithRSAEncryption 64:3b:55:53:8c:21:d9:2e:e5:59:e0:bf:13:ad:e0:5d:33:5a: 09:e5:d0:81:57:d3:50:f7:48:6f:12:03:71:e9:6d:3a:9b:fd: 55:a7:26:ee:b6:a3:1d:60:df:49:8d:9b:6d:82:19:e6:b3:3d: d1:59:b7:12:1a:06:80:45:04:81:7c:a3:25:3d:15:9b:48:6b: 02:d1:b8:af:de:f5:78:75:5b:79:9a:c4:ee:97:e8:51:e8:0b: 84:b6:b5:4d:42:cb:2d:85:6f:4c:f3:11:cf:2d:09:88:42:fb: 55:73:ec:d6:f8:13:7a:89:19:4c:84:32:84:2e:28:ef:44:4e: f7:7f:69:a5:85:56:6e:38:60:bd:b6:ba:c0:b4:3d:b0:38:37: 10:9c:bc:12:3c:a2:9e:4f:3b:39:9f:07:2d:72:e8:37:63:3d: 03:3f:94:95:52:c1:19:67:e3:7f:87:de:06:7c:1e:d1:f9:cb: 4c:a1:21:4c:65:af:9d:07:12:df:de:49:a4:89:ea:75:33:ab: d3:b4:21:bb:9c:b5:08:c0:0d:1e:18:76:9d:b8:00:ca:50:6d: 79:29:30:6d:69:a3:4a:34:ab:68:48:70:12:ca:b2:4a:7e:21: 91:fa:25:03:55:ba:f8:a4:5a:61:0f:bb:ee:af:21:4e:14:32: 64:7e:59:4c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZqCVBkCkA79umbp9i2GxQ//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE0MTIyNTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGIwZWM5OTI2ODk2YmExMjViZThmYTRhZWJlZWE4ZmQzMDliOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq+4qhqkcC2Gn97QoI4tIjehAni/ iiEDN14FDdF7Uh73j2ckOlK/iIZ+K1ZaeKu61R17GPYrMaRqFjwxAxpl27uR19mZ BHsRjKlJMDeMg58dbp/zqWJDVpToV6Xo4l4948VF/yw/X87t96XIIir9FvCv7R+8 6Ohvy1ngnAGvmsxMAisGUnOjNOnV0IMzOAcDbGofH5s6B5xp2dbB4VIxKBf49e9t o6QLOiUZrPschiKGo17VK+dK4WKW4bilE5PiuN/UIz/Lf3/yl7hUim1TLKymtTjl w+8oBjzUvRSUbCRZpIQn9ibsQLtuT4xaLElyjj+SPN4475mfVblt9hYDsQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOCw7JkmiWuhJb6PpK6+6o/TCbi0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzVkNWMz YS02M2MwLTQyY2EtODg0Yi1iMDcwN2E3ZDYxYTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNWQ1YzNh LTYzYzAtNDJjYS04ODRiLWIwNzA3YTdkNjFhMS8xLzRMRHNtU2FKYTZFbHZvLWty cjdxajlNSnVMUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM2bTANBgkqhkiG9w0BAQsFAAOCAQEAZDtVU4wh2S7l WeC/E63gXTNaCeXQgVfTUPdIbxIDceltOpv9Vacm7rajHWDfSY2bbYIZ5rM90Vm3 EhoGgEUEgXyjJT0Vm0hrAtG4r971eHVbeZrE7pfoUegLhLa1TULLLYVvTPMRzy0J iEL7VXPs1vgTeokZTIQyhC4o70RO939ppYVWbjhgvba6wLQ9sDg3EJy8Ejyink87 OZ8HLXLoN2M9Az+UlVLBGWfjf4feBnwe0fnLTKEhTGWvnQcS395JpInqdTOr07Qh u5y1CMANHhh2nbgAylBteSkwbWmjSjSraEhwEsqySn4hkfolA1W6+KRaYQ+77q8h ThQyZH5ZTA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:08 2025 by rpki-client