This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer (raw, json) Hash identifier: yqjM6kwcRq+QnwRwYdTnISlZeFGiyjDyYIQNn7NcbRc= Subject key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF662228E1F97E91E4EF1ECE2B209 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201281 IP: 2001:678:794::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f6:62:22:8e:1f:97:e9:1e:4e:f1:ec:e2:b2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d2:35:aa:d3:86:d4:4a:d3:60:70:33:04:1d: 2e:7c:8c:e9:c3:73:bf:99:0f:db:53:c9:2a:58:8b: 50:75:74:15:44:a8:f2:b5:06:32:4d:e0:3c:63:38: 39:16:d3:f1:bb:aa:ef:6a:02:c0:01:8c:5b:cb:6a: 29:da:66:3a:15:f1:d6:7a:14:5e:2f:ca:fe:fb:2b: 96:17:4a:87:1d:70:88:e0:02:11:57:dc:54:fa:18: 50:83:5a:e3:51:80:48:b0:86:7a:71:bb:1e:f1:36: 7d:80:92:29:fc:08:1e:1b:b7:40:a6:cf:9b:f7:cd: 5d:e9:15:34:71:54:0a:c8:8e:0d:c9:25:45:3c:42: 4c:bd:b3:ab:d8:6f:f1:9f:9f:03:50:1c:13:2c:f9: 55:87:9c:07:2c:31:bd:b0:39:d3:42:11:fb:51:76: 55:39:f7:24:0c:9b:94:06:a6:1a:fa:f1:dd:1e:8b: 0b:53:db:01:b3:f7:1f:b0:77:9e:4c:97:04:80:d7: 43:bb:4c:48:a6:e2:9c:92:01:5a:23:8b:0d:19:53: 1f:4a:2a:af:5a:73:b8:02:ac:cb:6d:1a:37:40:c7: 0a:4f:58:89:3d:cb:a5:40:80:80:99:08:d7:04:f1: 7c:ab:7e:cd:24:de:06:6d:de:5c:e3:12:94:b2:34: 4a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:794::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201281 Signature Algorithm: sha256WithRSAEncryption 74:34:5a:ef:33:6a:aa:af:bc:3a:46:84:66:4e:8b:a4:fe:09: 8e:e2:6d:98:0c:8e:e0:57:02:60:98:fd:27:43:20:c8:4b:83: d0:6c:6f:43:dd:bf:23:ed:04:25:3c:37:32:bb:12:96:b1:3c: d5:85:c1:d7:6c:69:f9:d0:98:61:bd:0a:53:32:0d:48:b1:98: 08:e8:8c:ae:57:0d:8c:ae:cd:f5:79:4c:65:17:ed:23:f6:5c: 8e:9e:af:eb:2f:a3:58:d9:f6:4a:00:c8:c6:53:d1:5d:de:e8: 53:41:85:c0:2e:c1:9f:8a:23:f2:21:31:78:69:b4:f3:01:f6: c6:66:1b:c7:da:18:cc:48:53:48:0e:a6:e3:a6:18:4d:b0:7d: 38:93:39:a4:cc:8e:6e:78:08:9b:5f:ca:92:e3:c1:55:8e:c8: 01:c9:43:63:5f:9c:d2:c3:a6:24:2f:18:00:5b:5c:3b:2d:2d: b3:aa:98:f6:ae:07:79:c1:b2:b1:c4:9a:57:82:53:6e:43:ff: bc:05:78:41:67:d8:0c:7d:19:f9:9a:a4:f6:3f:0d:ea:6e:4e: a2:f5:c9:7b:ba:00:cc:db:16:3c:2b:d0:3a:c5:a8:53:43:e3: 3f:ca:c0:1f:8c:05:dd:0b:15:eb:27:ea:85:84:87:3c:df:22: b9:d9:6f:ab -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt26vZiIo4fl+keTvHs4rIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWMzNWQ0ZjJmMmQyNDdlYTA4YzRhMDExN2QzMjhlNGU4ZWRmMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NI1qtOG1ErTYHAzBB0ufIzpw3O/ mQ/bU8kqWItQdXQVRKjytQYyTeA8Yzg5FtPxu6rvagLAAYxby2op2mY6FfHWehRe L8r++yuWF0qHHXCI4AIRV9xU+hhQg1rjUYBIsIZ6cbse8TZ9gJIp/AgeG7dAps+b 981d6RU0cVQKyI4NySVFPEJMvbOr2G/xn58DUBwTLPlVh5wHLDG9sDnTQhH7UXZV OfckDJuUBqYa+vHdHosLU9sBs/cfsHeeTJcEgNdDu0xIpuKckgFaI4sNGVMfSiqv WnO4AqzLbRo3QMcKT1iJPculQICAmQjXBPF8q37NJN4Gbd5c4xKUsjRKLwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFP7DXU8vLSR+oIxKARfTKOTo7fFSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0L2QwMDNh ZS0zNWE2LTQ0ZjItYWFkOC1mOGIxMmY5ODJmZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvZDAwM2Fl LTM1YTYtNDRmMi1hYWQ4LWY4YjEyZjk4MmZlMi8xL19zTmRUeTh0Skg2Z2pFb0JG OU1vNU9qdDhWSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAeUMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMSQTANBgkqhkiG9w0BAQsFAAOCAQEAdDRa7zNqqq+8OkaEZk6LpP4JjuJt mAyO4FcCYJj9J0MgyEuD0GxvQ92/I+0EJTw3MrsSlrE81YXB12xp+dCYYb0KUzIN SLGYCOiMrlcNjK7N9XlMZRftI/Zcjp6v6y+jWNn2SgDIxlPRXd7oU0GFwC7Bn4oj 8iExeGm08wH2xmYbx9oYzEhTSA6m46YYTbB9OJM5pMyObngIm1/KkuPBVY7IAclD Y1+c0sOmJC8YAFtcOy0ts6qY9q4HecGyscSaV4JTbkP/vAV4QWfYDH0Z+Zqk9j8N 6m5OovXJe7oAzNsWPCvQOsWoU0PjP8rAH4wF3QsV6yfqhYSHPN8iudlvqw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:14 2026 by rpki-client