This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n43ba5j65Xcxmbx0zEVyCClPrJ8.cer File: n43ba5j65Xcxmbx0zEVyCClPrJ8.cer (raw, json) Hash identifier: DY8zEhP0k08d9UBLfEqzdw/k7igJlWs/eUEsAl5cetk= Subject key identifier: 9F:8D:DB:6B:98:FA:E5:77:31:99:BC:74:CC:45:72:08:29:4F:AC:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BED27A286617BB4965652EB65430C3F9B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 23 Jan 2026 23:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213877 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ed:27:a2:86:61:7b:b4:96:56:52:eb:65:43:0c:3f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 23 23:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f8ddb6b98fae5773199bc74cc457208294fac9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:9d:1b:f0:1c:c7:ed:b7:3f:3c:90:bd:10: c3:56:7a:05:1f:58:6a:26:54:e0:ab:12:6d:62:f3: fb:24:1d:3a:29:56:64:25:b7:40:e9:f4:89:38:de: ba:fe:b2:19:d7:0f:fe:f5:97:05:e9:80:22:3d:22: d8:cc:9c:fc:88:11:33:77:c9:d9:c3:7f:93:6d:42: ec:5d:30:d9:53:c9:81:90:36:43:ff:c2:48:f6:56: 82:a1:e4:85:53:26:8a:a8:10:7c:c0:d1:22:54:21: a8:14:a8:d7:15:8c:f9:dd:73:79:15:5e:ee:73:55: 0c:cf:17:83:a8:ff:92:c3:54:3d:58:01:9a:4c:df: 8a:be:b0:8e:b1:c1:97:4f:d3:ef:ea:76:ea:86:a8: 00:72:8a:48:5f:bb:97:e6:c2:44:3a:82:bd:e9:af: d3:49:d2:e4:0e:0e:75:4a:26:f1:c9:dc:b2:b2:5b: fc:f8:f7:9d:11:11:0a:b8:ad:e9:c4:64:08:50:23: 78:86:9d:4f:2d:d5:50:eb:35:4a:35:b5:5a:f9:69: 5e:5c:a7:33:36:ba:70:0e:e9:c1:d0:02:4b:9f:13: 0b:e7:34:ec:e3:04:1c:ae:ef:66:d6:33:f2:dc:13: 76:8f:81:b8:4d:dc:1f:33:7c:55:c4:2b:0e:b5:41: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8D:DB:6B:98:FA:E5:77:31:99:BC:74:CC:45:72:08:29:4F:AC:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213877 Signature Algorithm: sha256WithRSAEncryption 44:64:ce:12:72:8e:78:94:35:4c:ab:74:c6:77:c8:12:53:b9: 60:6d:0e:05:07:02:66:7e:e4:f7:6f:07:40:33:f0:f3:e1:9d: 19:ff:42:8f:59:39:04:15:18:28:1c:58:a5:60:b1:6d:39:f4: 8e:97:af:7f:25:c0:0f:63:f4:ee:80:33:b3:91:00:6e:2e:06: b6:88:3a:d5:48:d3:32:22:5b:d4:a9:48:17:78:ee:c7:56:7b: bf:38:3b:00:d2:3a:24:9b:9c:34:18:6e:1b:e4:d4:27:c6:d8: e8:b8:5e:f0:ed:4a:2e:ca:59:b5:01:d5:cf:b5:16:b3:ee:f1: c4:80:80:20:07:1f:05:c1:92:c0:ab:8b:9f:b0:68:cb:c2:d4: 12:4e:d1:72:62:bd:55:ce:01:25:2e:72:da:91:c0:eb:bc:8b: ca:b7:93:92:0c:19:56:27:fe:b3:2a:8d:4e:46:aa:9a:67:03: 23:af:7d:54:96:ed:04:89:95:6b:e8:de:7d:fc:63:e4:2a:0b: e1:46:4e:c1:b9:30:51:b0:3a:15:e7:a3:83:fd:94:b9:25:4c: bb:1c:f3:a7:13:db:5e:5d:e6:4d:52:75:50:6f:65:81:37:5a: 52:3f:64:79:e0:83:35:99:80:e1:1d:f2:f3:36:6e:69:bc:9e: 6c:9f:b8:9f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZvtJ6KGYXu0llZS62VDDD+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIzMjMxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjhkZGI2Yjk4ZmFlNTc3MzE5OWJjNzRjYzQ1NzIwODI5NGZhYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZadG/Acx+23PzyQvRDDVnoFH1hq JlTgqxJtYvP7JB06KVZkJbdA6fSJON66/rIZ1w/+9ZcF6YAiPSLYzJz8iBEzd8nZ w3+TbULsXTDZU8mBkDZD/8JI9laCoeSFUyaKqBB8wNEiVCGoFKjXFYz53XN5FV7u c1UMzxeDqP+Sw1Q9WAGaTN+KvrCOscGXT9Pv6nbqhqgAcopIX7uX5sJEOoK96a/T SdLkDg51Sibxydyyslv8+PedEREKuK3pxGQIUCN4hp1PLdVQ6zVKNbVa+WleXKcz NrpwDunB0AJLnxML5zTs4wQcru9m1jPy3BN2j4G4TdwfM3xVxCsOtUH5vQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJ+N22uY+uV3MZm8dMxFcggpT6yfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmLzlmYjQ1 Yi0zZTkwLTRhYzctYmZlNi05NGM1MTllOTg1NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvOWZiNDVi LTNlOTAtNGFjNy1iZmU2LTk0YzUxOWU5ODU2MS8xL240M2JhNWo2NVhjeG1ieDB6 RVZ5Q0NsUHJKOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNDdTANBgkqhkiG9w0BAQsFAAOCAQEARGTOEnKOeJQ1 TKt0xnfIElO5YG0OBQcCZn7k928HQDPw8+GdGf9Cj1k5BBUYKBxYpWCxbTn0jpev fyXAD2P07oAzs5EAbi4Gtog61UjTMiJb1KlIF3jux1Z7vzg7ANI6JJucNBhuG+TU J8bY6Lhe8O1KLspZtQHVz7UWs+7xxICAIAcfBcGSwKuLn7Boy8LUEk7RcmK9Vc4B JS5y2pHA67yLyreTkgwZVif+syqNTkaqmmcDI699VJbtBImVa+jeffxj5CoL4UZO wbkwUbA6Feejg/2UuSVMuxzzpxPbXl3mTVJ1UG9lgTdaUj9keeCDNZmA4R3y8zZu abyebJ+4nw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:05 2026 by rpki-client