This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer File: U4Vcjs6b1vjjlAICISzgmwX1-KA.cer (raw, json) Hash identifier: gLIhEWMOl0gtTr7SdlVuLORznm5t/XWWjzNQXjZsN/s= Subject key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38182B457A055D38633F3512299E3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:868::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:18:2b:45:7a:05:5d:38:63:3f:35:12:29:9e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:ec:61:49:5a:d9:0a:99:cc:bf:60:57:0a: d6:fe:97:6e:d2:aa:ce:32:bb:cc:77:26:2a:ad:9f: bd:78:c6:09:55:49:b3:13:ad:f4:59:f7:6b:8e:0f: 2c:1b:81:80:56:a1:0d:30:69:50:36:0d:90:ea:5b: b7:85:98:cb:a6:2f:ac:39:d1:28:da:f2:ea:de:85: 7c:24:a5:3d:79:86:f9:0b:87:b4:5c:fd:88:ad:58: cb:c8:47:0c:2d:0d:e4:bd:32:5b:95:30:56:32:d2: ad:9b:ac:c8:e4:2e:66:fb:ed:0e:5c:0d:54:eb:91: 3a:a8:eb:4a:fd:4f:98:67:a7:07:4f:0a:52:a4:e3: 8b:14:c2:a1:bd:dc:ca:2a:03:ce:2e:22:e2:f5:4c: 07:ca:0c:51:fe:ae:c9:00:70:b3:50:5b:84:0b:8a: 1f:c4:45:31:2b:4b:33:dd:ab:10:ca:30:df:46:21: 43:2e:f6:fc:d6:43:43:85:81:db:7d:c0:fc:67:28: 0f:0f:72:ad:22:00:37:81:5d:28:6c:87:47:76:68: d4:42:42:60:74:99:f5:4c:46:40:cb:5c:99:9c:bb: e3:fa:5b:8e:cd:50:01:47:9b:5f:94:d0:95:6c:09: 46:06:9e:09:d4:f3:7d:be:82:e2:5c:a2:c4:e4:8e: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:868::/48 Signature Algorithm: sha256WithRSAEncryption 0e:9c:62:da:82:e9:6a:fe:7d:6f:07:3c:4e:fc:fa:b8:aa:16: ed:e4:74:1a:1a:0b:e4:fa:27:40:33:d6:4b:f3:e2:c5:c1:ed: d6:2e:9e:04:be:42:4c:22:47:62:a8:c3:89:d7:dc:e0:77:f4: b6:77:ff:5b:97:72:77:53:3a:ad:ea:b3:4b:6e:bd:bc:5f:b3: e1:7d:9a:e6:db:f3:fe:e0:04:fc:fb:d3:f6:d5:d9:5b:d1:c3: 51:da:f4:a8:0f:47:d1:41:a3:35:e7:8b:d6:85:de:87:c1:4e: 2d:87:19:ce:24:07:fd:60:0a:e1:6b:04:5d:3e:4a:de:79:5b: dc:af:51:f3:b8:70:ad:ef:c0:e1:55:1a:4c:b9:2b:a2:e3:f2: dc:f1:09:c9:3d:59:72:0d:1f:3d:7d:a7:a3:88:25:39:1e:57: dc:05:d9:04:b4:89:9d:38:e4:c2:e5:b8:85:e8:b1:35:a4:73: fa:29:10:47:88:11:66:ef:81:74:cb:cb:c1:5a:b5:b9:8e:7c: c2:44:4e:2e:75:e4:01:4b:c1:a3:f7:37:2a:76:c9:8a:ee:9d: 4d:dc:54:0f:b5:70:b2:ca:51:9e:00:35:d5:77:3f:cf:41:59: 29:42:f1:b6:1b:4f:29:f7:29:e7:5c:2a:ef:89:12:d0:0b:0b: 4c:59:6e:da -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt+OBgrRXoFXThjPzUSKZ46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mzg1NWM4ZWNlOWJkNmY4ZTM5NDAyMDIyMTJjZTA5YjA1ZjVmOGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yDsYUla2QqZzL9gVwrW/pdu0qrO MrvMdyYqrZ+9eMYJVUmzE630Wfdrjg8sG4GAVqENMGlQNg2Q6lu3hZjLpi+sOdEo 2vLq3oV8JKU9eYb5C4e0XP2IrVjLyEcMLQ3kvTJblTBWMtKtm6zI5C5m++0OXA1U 65E6qOtK/U+YZ6cHTwpSpOOLFMKhvdzKKgPOLiLi9UwHygxR/q7JAHCzUFuEC4of xEUxK0sz3asQyjDfRiFDLvb81kNDhYHbfcD8ZygPD3KtIgA3gV0obIdHdmjUQkJg dJn1TEZAy1yZnLvj+luOzVABR5tflNCVbAlGBp4J1PN9voLiXKLE5I4nLQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFFOFXI7Om9b445QCAiEs4JsF9figMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzgzMzZi MC1jYmU0LTRkYTItODQxYi0xY2VmZDFmYTEwYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvODMzNmIw LWNiZTQtNGRhMi04NDFiLTFjZWZkMWZhMTBhNi8xL1U0VmNqczZiMXZqamxBSUNJ U3pnbXdYMS1LQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAhoMA0GCSqGSIb3DQEBCwUAA4IBAQAO nGLagulq/n1vBzxO/Pq4qhbt5HQaGgvk+idAM9ZL8+LFwe3WLp4EvkJMIkdiqMOJ 19zgd/S2d/9bl3J3Uzqt6rNLbr28X7PhfZrm2/P+4AT8+9P21dlb0cNR2vSoD0fR QaM154vWhd6HwU4thxnOJAf9YArhawRdPkreeVvcr1HzuHCt78DhVRpMuSui4/Lc 8QnJPVlyDR89faejiCU5HlfcBdkEtImdOOTC5biF6LE1pHP6KRBHiBFm74F0y8vB WrW5jnzCRE4udeQBS8Gj9zcqdsmK7p1N3FQPtXCyylGeADXVdz/PQVkpQvG2G08p 9ynnXCrviRLQCwtMWW7a -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:04 2026 by rpki-client