This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer File: V3zTsjkfRybBqonV7T0ECCMlI1U.cer (raw, json) Hash identifier: ktBfhfhJ1saD7roSg3RcJkR8PU2CRWS3G6YZGfUZS2g= Subject key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6AA72B2372B60CAA9C11265CE05AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211881 IP: 2a14:a980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:aa:72:b2:37:2b:60:ca:a9:c1:12:65:ce:05:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=577cd3b2391f4726c1aa89d5ed3d040823252355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:44:e0:c7:55:d6:ff:af:1c:9c:56:7e:df:d4: db:e1:cb:2d:1d:c9:99:fa:d1:7b:21:67:9c:51:57: fd:90:18:39:01:99:67:8a:8c:31:05:7f:38:0a:7c: 7d:ac:bb:f5:a6:74:46:ce:45:9f:76:3c:e9:43:db: 88:64:98:91:b3:ef:ac:f7:a4:e9:6c:bf:21:e5:d8: 9f:e9:09:63:ef:e3:ef:03:0d:3a:c2:de:d1:c0:69: c6:63:36:35:07:6c:aa:e5:c0:73:17:87:20:1e:e1: 4c:90:e2:64:6b:88:05:e2:ec:23:be:29:2c:a4:56: eb:60:02:50:fd:c2:6d:29:84:21:95:c8:20:40:c2: 60:51:17:c3:0c:38:be:3d:8f:e5:be:27:01:e6:6c: d5:66:66:eb:4a:4c:c4:ff:ad:ee:65:ed:92:01:1f: 31:8f:fb:36:3e:b5:aa:65:48:e0:7a:75:ee:03:d4: 22:57:e1:a1:9d:54:9d:48:8b:ca:10:8c:fe:f3:38: 64:ae:5a:38:c8:ef:bd:29:d7:ec:a1:c7:75:50:99: a8:d1:48:1a:67:17:20:4b:31:c9:a8:69:91:44:41: 48:6d:15:3f:97:ea:89:df:b0:ba:45:9d:99:b2:8b: a8:d9:bc:f8:46:89:fe:35:f5:dd:5b:b9:9f:01:f3: b5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:a980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211881 Signature Algorithm: sha256WithRSAEncryption 43:4c:40:e4:97:76:19:e5:88:0b:69:42:ef:b9:aa:10:b6:2d: fe:42:9f:cd:02:6e:57:32:f1:1c:d0:ad:06:99:44:2c:1d:10: e7:f1:7b:4e:42:d0:8e:63:3d:bf:88:b8:60:db:7b:87:fc:b7: 16:3b:97:17:f8:68:48:03:1a:87:c5:66:15:ad:47:2c:82:c6: 31:e6:c8:5c:aa:ca:bb:9b:92:71:f1:61:21:b5:d7:d3:90:61: 6d:8b:59:28:bf:47:84:8e:1d:76:11:2a:a7:18:19:ca:21:4c: 8d:14:3f:63:b3:36:d4:33:9d:90:b6:46:4c:56:1b:ea:0f:48: ab:e8:16:9f:33:c3:15:16:ac:9b:53:94:86:66:93:18:f1:f6: a4:48:16:3a:6a:a1:66:f8:90:49:58:40:e2:23:60:cd:5f:ca: 7b:23:0c:93:70:73:aa:70:1c:81:19:d5:ec:88:ca:83:d2:5a: e8:73:b9:73:5f:29:9f:a5:65:df:dc:97:44:09:57:aa:a6:c5: ce:a2:42:c7:be:0d:4b:7f:05:5b:e9:fe:47:5d:e0:13:08:12: ae:e1:19:b5:f5:22:b4:fb:8b:34:32:ef:24:9a:17:5b:3a:e1: c4:bf:b8:e5:e8:10:dd:8e:fd:0a:09:44:59:0d:9e:fb:d0:98: db:a9:91:02 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt+pqpysjcrYMqpwRJlzgWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzdjZDNiMjM5MWY0NzI2YzFhYTg5ZDVlZDNkMDQwODIzMjUyMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UTgx1XW/68cnFZ+39Tb4cstHcmZ +tF7IWecUVf9kBg5AZlniowxBX84Cnx9rLv1pnRGzkWfdjzpQ9uIZJiRs++s96Tp bL8h5dif6Qlj7+PvAw06wt7RwGnGYzY1B2yq5cBzF4cgHuFMkOJka4gF4uwjviks pFbrYAJQ/cJtKYQhlcggQMJgURfDDDi+PY/lvicB5mzVZmbrSkzE/63uZe2SAR8x j/s2PrWqZUjgenXuA9QiV+GhnVSdSIvKEIz+8zhkrlo4yO+9Kdfsocd1UJmo0Uga ZxcgSzHJqGmRREFIbRU/l+qJ37C6RZ2Zsouo2bz4Ron+NfXdW7mfAfO1dQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFFd807I5H0cmwaqJ1e09BAgjJSNVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzRiODJm ZS1mZjczLTRiNTgtYTIxYS0wMGZkMDVkM2NkMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvNGI4MmZl LWZmNzMtNGI1OC1hMjFhLTAwZmQwNWQzY2QxZC8xL1YzelRzamtmUnliQnFvblY3 VDBFQ0NNbEkxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhSpgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDO6kwDQYJKoZIhvcNAQELBQADggEBAENMQOSXdhnliAtpQu+5qhC2Lf5Cn80C blcy8RzQrQaZRCwdEOfxe05C0I5jPb+IuGDbe4f8txY7lxf4aEgDGofFZhWtRyyC xjHmyFyqyrubknHxYSG119OQYW2LWSi/R4SOHXYRKqcYGcohTI0UP2OzNtQznZC2 RkxWG+oPSKvoFp8zwxUWrJtTlIZmkxjx9qRIFjpqoWb4kElYQOIjYM1fynsjDJNw c6pwHIEZ1eyIyoPSWuhzuXNfKZ+lZd/cl0QJV6qmxc6iQse+DUt/BVvp/kdd4BMI Eq7hGbX1IrT7izQy7ySaF1s64cS/uOXoEN2O/QoJRFkNnvvQmNupkQI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:48 2026 by rpki-client