This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer File: T1VxCj6EBcGv2mxj6edzZu_GHnw.cer (raw, json) Hash identifier: bew9UWaVDpduzRlITxdkPb6+OuxUlft4GmpAnC1u2vQ= Subject key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B368EA471D3A13A6CB4338D61BCA494 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213579 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8e:a4:71:d3:a1:3a:6c:b4:33:8d:61:bc:a4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b4:88:71:40:d4:20:60:5b:28:63:0d:a9:f5: 86:c3:37:a4:19:7d:99:ba:d8:17:d0:07:92:09:61: cf:0b:a3:0b:40:0e:f2:91:2e:6d:18:4d:6f:66:cb: 1f:07:df:7a:72:3f:e5:8b:cb:f8:5f:d1:eb:c1:47: 40:6d:eb:20:cf:15:67:a2:b1:34:39:7b:d0:ef:13: 9b:9d:2e:11:f9:f8:a3:38:11:6d:96:9e:05:c9:80: f0:b1:18:81:56:73:c0:fd:63:72:ba:4c:40:d0:39: 08:70:be:13:f0:14:1d:b4:a2:9f:91:cf:f7:e4:58: 1d:3c:32:f0:ca:f0:03:4d:36:e3:21:3e:05:5e:c9: 57:5a:80:f3:0b:ec:dd:a7:af:f8:11:43:0f:d1:60: c2:8e:6f:4c:82:f5:08:d4:8e:26:d1:7a:8c:39:1d: 44:5c:6c:52:8d:d4:bb:e7:39:2e:c4:aa:73:e8:fb: 40:54:1c:b7:23:c7:82:b0:ec:16:ee:f3:e6:27:ff: 77:aa:a2:22:46:9d:f1:74:5b:08:d0:8c:2b:96:2a: 01:d0:31:78:14:2c:71:8e:91:d5:36:48:16:bf:d9: 17:1f:85:ab:34:a3:ea:c5:7e:13:f8:0b:cd:1e:f6: ba:24:c7:9b:8a:cd:40:1b:5e:98:de:d7:47:8d:e7: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213579 Signature Algorithm: sha256WithRSAEncryption 61:19:00:b7:df:3e:87:63:d5:e6:c9:b6:5c:9e:f9:53:9a:44: cd:65:fe:4f:6a:4e:87:e3:0b:21:c0:71:21:86:8e:ba:01:af: 3c:1b:6c:ea:bf:d9:be:a9:53:a7:da:68:79:41:c2:16:ac:1b: 5f:1c:f8:11:e7:84:fa:0a:45:c0:65:64:c8:c1:3a:b4:40:a2: fc:f6:6c:7a:01:f9:7e:94:42:ef:2e:ef:6c:cd:7d:85:c1:a1: 3b:f2:6c:3c:be:d5:38:91:da:7a:a3:80:94:db:2b:ab:c2:af: aa:9d:9e:e5:9b:13:46:00:e4:c6:88:06:99:2a:47:4e:fb:8c: 5e:9b:2d:fa:3f:3c:ec:6e:62:87:19:24:49:ee:3b:f6:f9:e1: 8e:6a:f9:3b:14:a4:ad:b6:e0:0a:67:5f:e0:1b:73:55:19:de: 62:f0:52:6c:5c:b5:fc:06:45:c9:5f:71:35:f0:6f:b4:2a:fc: cf:50:a8:80:bd:2f:df:40:8a:d5:5b:2d:e7:a5:54:15:40:86: f8:cd:22:af:83:80:79:8e:e1:51:dd:9e:91:28:18:f5:fa:35: 83:b7:95:10:67:24:ac:55:53:dd:0d:10:c4:0a:85:6d:a2:ec: d8:f8:2c:2a:dc:76:c9:3e:b8:7f:e9:f8:5e:94:cb:51:c8:d3: a8:8f:b2:8b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7No6kcdOhOmy0M41hvKSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjU1NzEwYTNlODQwNWMxYWZkYTZjNjNlOWU3NzM2NmVmYzYxZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bSIcUDUIGBbKGMNqfWGwzekGX2Z utgX0AeSCWHPC6MLQA7ykS5tGE1vZssfB996cj/li8v4X9HrwUdAbesgzxVnorE0 OXvQ7xObnS4R+fijOBFtlp4FyYDwsRiBVnPA/WNyukxA0DkIcL4T8BQdtKKfkc/3 5FgdPDLwyvADTTbjIT4FXslXWoDzC+zdp6/4EUMP0WDCjm9MgvUI1I4m0XqMOR1E XGxSjdS75zkuxKpz6PtAVBy3I8eCsOwW7vPmJ/93qqIiRp3xdFsI0IwrlioB0DF4 FCxxjpHVNkgWv9kXH4WrNKPqxX4T+AvNHva6JMebis1AG16Y3tdHjefwDwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFE9VcQo+hAXBr9psY+nnc2bvxh58MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzAzNTVm Ni0yNzBjLTQyYjgtYjI2NC1iMGQ3MTE3ZDc5NGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMDM1NWY2 LTI3MGMtNDJiOC1iMjY0LWIwZDcxMTdkNzk0Zi8xL1QxVnhDajZFQmNHdjJteGo2 ZWR6WnVfR0hudy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNCSzANBgkqhkiG9w0BAQsFAAOCAQEAYRkAt98+h2PV 5sm2XJ75U5pEzWX+T2pOh+MLIcBxIYaOugGvPBts6r/ZvqlTp9poeUHCFqwbXxz4 EeeE+gpFwGVkyME6tECi/PZsegH5fpRC7y7vbM19hcGhO/JsPL7VOJHaeqOAlNsr q8Kvqp2e5ZsTRgDkxogGmSpHTvuMXpst+j887G5ihxkkSe479vnhjmr5OxSkrbbg Cmdf4BtzVRneYvBSbFy1/AZFyV9xNfBvtCr8z1CogL0v30CK1Vst56VUFUCG+M0i r4OAeY7hUd2ekSgY9fo1g7eVEGckrFVT3Q0QxAqFbaLs2PgsKtx2yT64f+n4XpTL UcjTqI+yiw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:53 2026 by rpki-client