This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer File: 73OcDASkJxtarWLBGSKeGPraX9M.cer (raw, json) Hash identifier: UzANXfwHaoTewkkogNl3TSr8Miy7VfMAYRJtUIDqHP8= Subject key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F154CAE741EE7AF9CED492BED78F260 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.5.56.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4c:ae:74:1e:e7:af:9c:ed:49:2b:ed:78:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:44:31:7e:c2:6f:a1:e1:c5:d7:0b:bc:a9: 38:a2:76:bb:f4:da:6c:4c:08:91:c5:f7:53:cd:cd: 80:e8:67:00:01:2a:ae:f7:0b:f2:4d:44:a1:8d:55: 0c:71:68:2a:9f:9b:89:0c:ca:77:7d:8c:11:3f:75: 26:6b:ee:1d:98:6f:cf:68:6d:da:9c:d2:c5:05:b9: 9b:f8:66:b9:09:2d:ce:3c:69:26:78:b3:cc:ad:d4: df:9d:5b:d1:df:5f:72:15:bb:00:d6:b8:f1:b9:d3: 02:56:7d:42:cc:d5:a7:94:88:6b:36:59:a4:3b:3d: 8b:6f:ba:ab:65:86:3b:3a:2d:4f:93:1f:5b:c1:db: 38:b6:f7:e0:27:84:6a:82:ee:dd:fa:ab:47:d3:11: a0:cf:0e:18:98:93:75:ac:0e:68:e9:fb:a8:79:62: d1:54:15:77:9a:54:b8:e4:35:28:17:d7:a6:31:cd: ab:ba:d4:ef:dc:b7:1e:de:19:29:97:f9:28:09:22: 4a:17:a4:ce:de:97:a4:23:55:c6:3c:35:68:05:a2: 47:51:5e:5f:ca:22:8c:86:34:c2:38:3d:cb:ca:81: f5:33:35:8d:fe:d4:ce:1c:e3:5f:a9:5e:d8:88:a8: 6c:41:a2:9e:39:2d:dd:2c:46:ab:2a:3b:54:41:c8: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.56.0/23 Signature Algorithm: sha256WithRSAEncryption 39:3d:b2:82:af:4d:a0:e1:2d:43:60:13:b5:27:00:ff:be:af: 5c:b1:12:ca:52:9a:f9:09:45:77:9b:5a:99:62:b7:f1:d9:63: 72:ba:54:bb:57:3e:b6:b3:1e:8f:40:71:4e:1b:05:dc:66:49: a7:d6:1a:f1:82:15:11:4d:2e:b6:d0:cc:c4:83:ae:d5:07:c9: b0:f9:38:f2:e4:96:8b:a1:3e:d6:f1:c8:ed:c5:3f:67:b5:c8: 5a:e6:bd:6c:4a:72:32:a5:5f:03:70:bf:36:73:ef:28:d9:0c: b3:84:89:f9:b4:87:dc:ca:fb:5e:d5:49:4d:1a:18:32:30:31: 34:de:87:30:df:87:80:be:92:26:e1:27:a5:a3:0d:81:f6:e6: 87:71:2c:91:39:9b:bf:db:5a:8e:4a:05:7d:f2:9c:d8:b5:96: 71:99:e7:ac:b7:b2:c2:14:f7:b6:18:40:38:4f:f5:d3:1e:af: 8b:89:14:5d:c8:38:7e:b0:ee:2c:20:42:a9:0f:ff:d3:68:6a: ff:93:d6:2b:06:0b:0d:35:5e:99:e2:b9:fb:67:5f:95:da:b4: 9b:97:0f:b0:90:54:2a:68:50:1b:31:da:81:a9:5a:3b:bb:9a: 59:18:f0:71:2b:52:22:89:51:0f:91:12:ab:38:52:4d:2f:2e: 16:a8:65:24 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FUyudB7nr5ztSSvtePJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjczOWMwYzA0YTQyNzFiNWFhZDYyYzExOTIyOWUxOGZhZGE1ZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS5EMX7Cb6HhxdcLvKk4ona79Nps TAiRxfdTzc2A6GcAASqu9wvyTUShjVUMcWgqn5uJDMp3fYwRP3Uma+4dmG/PaG3a nNLFBbmb+Ga5CS3OPGkmeLPMrdTfnVvR319yFbsA1rjxudMCVn1CzNWnlIhrNlmk Oz2Lb7qrZYY7Oi1Pkx9bwds4tvfgJ4Rqgu7d+qtH0xGgzw4YmJN1rA5o6fuoeWLR VBV3mlS45DUoF9emMc2rutTv3Lce3hkpl/koCSJKF6TO3pekI1XGPDVoBaJHUV5f yiKMhjTCOD3LyoH1MzWN/tTOHONfqV7YiKhsQaKeOS3dLEarKjtUQcjE7QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFO9znAwEpCcbWq1iwRkinhj62l/TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzI4NTE5 Zi1kYzQ4LTRmMzEtYTM1ZS05OWVlNGE4OTg1YzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvMjg1MTlm LWRjNDgtNGYzMS1hMzVlLTk5ZWU0YTg5ODVjMy8xLzczT2NEQVNrSnh0YXJXTEJH U0tlR1ByYVg5TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwQU4MA0GCSqGSIb3DQEBCwUAA4IBAQA5PbKC r02g4S1DYBO1JwD/vq9csRLKUpr5CUV3m1qZYrfx2WNyulS7Vz62sx6PQHFOGwXc Zkmn1hrxghURTS620MzEg67VB8mw+Tjy5JaLoT7W8cjtxT9ntcha5r1sSnIypV8D cL82c+8o2QyzhIn5tIfcyvte1UlNGhgyMDE03ocw34eAvpIm4Selow2B9uaHcSyR OZu/21qOSgV98pzYtZZxmeest7LCFPe2GEA4T/XTHq+LiRRdyDh+sO4sIEKpD//T aGr/k9YrBgsNNV6Z4rn7Z1+V2rSblw+wkFQqaFAbMdqBqVo7u5pZGPBxK1IiiVEP kRKrOFJNLy4WqGUk -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:33 2026 by rpki-client