This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer (raw, json) Hash identifier: oEXH2RIqznwIBVWSXEKJMjgeSgu1oUWwYIeYXivAcWc= Subject key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC91496904486483437A2F0903CD976 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205574 IP: 2001:67c:1890::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:14:96:90:44:86:48:34:37:a2:f0:90:3c:d9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:49:22:f7:76:5a:f5:4a:68:4e:c2:5b:e2: 93:f7:a8:e5:fa:4b:e1:d4:ee:29:ff:4b:7d:69:f3: c3:20:82:d0:e8:9b:2f:fd:9b:79:85:93:42:ac:5c: ce:a1:03:d6:fc:37:ba:fd:c8:a9:3c:68:8b:38:1a: b5:d5:ec:c0:65:c5:73:e4:32:65:1f:18:8f:65:75: 26:ea:41:7f:3c:af:bd:4d:60:c7:6b:14:c4:88:33: 44:bc:8e:fc:cb:32:74:52:80:a0:f8:c2:c7:ea:61: a9:dc:c3:05:89:dc:a1:1f:3e:ba:1d:6a:f5:93:11: ae:de:f3:76:69:94:02:b2:77:71:d4:5a:02:cb:69: a8:d6:1e:ac:e1:b8:45:d3:bc:e9:f6:30:1b:41:bc: 6b:10:d2:bd:f4:16:5a:9b:18:fa:d9:b0:65:3c:95: 54:40:7e:fd:cc:af:43:b7:6e:e1:b9:d8:e5:53:e1: 02:66:28:62:72:55:c4:87:45:e8:6e:7b:a0:8e:31: c9:8f:47:4f:1f:48:2c:a5:53:45:ea:2b:21:8c:31: 5f:6b:41:79:a5:3d:22:e5:0c:cb:af:12:ac:c1:09: 90:e0:9b:5c:e9:07:a8:78:c6:78:d3:8b:03:06:88: d8:60:da:a4:5d:ee:1b:77:90:6d:fd:72:1f:f8:55: 29:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1890::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205574 Signature Algorithm: sha256WithRSAEncryption 1a:1c:83:8f:bc:59:9b:51:24:8d:7c:b4:d6:77:62:c1:8f:62: 1d:ff:b4:e6:fe:8c:a4:2b:d6:a1:d8:c6:67:28:10:89:35:95: 12:76:04:c6:26:ec:c9:0a:a4:76:c3:7b:88:a2:0d:c1:dd:31: 39:6a:16:21:7e:99:49:41:43:26:a5:28:ee:b5:e4:7e:99:36: 1b:c6:7c:23:ae:5d:35:d5:2c:a9:f9:d3:e6:43:1e:94:7f:a1: 9e:ee:c6:02:f9:5f:f0:11:d8:a2:af:0b:40:58:de:80:bc:9d: 02:a3:15:fb:32:6e:5a:bd:06:76:76:ea:fe:a6:5a:91:92:8a: 23:75:5a:47:ad:89:01:14:75:11:bf:43:cf:d5:40:d4:e0:9e: 29:c3:44:92:e3:9d:e6:09:26:23:be:6f:db:c4:68:31:70:23: 32:02:32:bf:ce:4f:3f:e9:2a:59:e1:8b:7d:a7:07:d5:56:ed: 33:19:a1:d7:f2:5f:84:7d:20:84:e7:99:fd:b4:41:b9:6d:57: 5c:65:d7:c6:ae:c0:81:0b:93:0e:15:c5:4e:43:e3:0e:8c:5f: d8:2e:46:3b:eb:35:44:36:80:a3:e6:4e:c4:89:e1:8a:af:30: 22:87:34:02:64:f1:a4:57:5a:ab:d1:d0:ad:dc:e8:9e:80:ae: 26:0e:5e:1f -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6yRSWkESGSDQ3ovCQPNl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzE0M2RkNjY3NjlkYjE4M2I4YmQ3OWI5MGZjODNkOTVkNmU0OGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHxJIvd2WvVKaE7CW+KT96jl+kvh 1O4p/0t9afPDIILQ6Jsv/Zt5hZNCrFzOoQPW/De6/cipPGiLOBq11ezAZcVz5DJl HxiPZXUm6kF/PK+9TWDHaxTEiDNEvI78yzJ0UoCg+MLH6mGp3MMFidyhHz66HWr1 kxGu3vN2aZQCsndx1FoCy2mo1h6s4bhF07zp9jAbQbxrENK99BZamxj62bBlPJVU QH79zK9Dt27hudjlU+ECZihiclXEh0XobnugjjHJj0dPH0gspVNF6ishjDFfa0F5 pT0i5QzLrxKswQmQ4Jtc6QeoeMZ404sDBojYYNqkXe4bd5Bt/XIf+FUpZQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFEcUPdZnadsYO4vXm5D8g9ldbkj7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzNmNDM5 NS0xODcxLTRjYjEtODA3Yi0zNDYwMjYyNDU1YjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvM2Y0Mzk1 LTE4NzEtNGNiMS04MDdiLTM0NjAyNjI0NTViMi8xL1J4UTkxbWRwMnhnN2k5ZWJr UHlEMlYxdVNQcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBiQMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMjBjANBgkqhkiG9w0BAQsFAAOCAQEAGhyDj7xZm1EkjXy01ndiwY9iHf+0 5v6MpCvWodjGZygQiTWVEnYExibsyQqkdsN7iKINwd0xOWoWIX6ZSUFDJqUo7rXk fpk2G8Z8I65dNdUsqfnT5kMelH+hnu7GAvlf8BHYoq8LQFjegLydAqMV+zJuWr0G dnbq/qZakZKKI3VaR62JARR1Eb9Dz9VA1OCeKcNEkuOd5gkmI75v28RoMXAjMgIy v85PP+kqWeGLfacH1VbtMxmh1/JfhH0ghOeZ/bRBuW1XXGXXxq7AgQuTDhXFTkPj Doxf2C5GO+s1RDaAo+ZOxInhiq8wIoc0AmTxpFdaq9HQrdzonoCuJg5eHw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:56 2026 by rpki-client