This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer File: s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer (raw, json) Hash identifier: VLrVH5IoF8UoOkHZMT5p0PmhhV+lthAx6HuEyhviPzo= Subject key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77CE5B06B4843EF7E3C399E9DBA5DE0E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:26:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215147 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:ce:5b:06:b4:84:3e:f7:e3:c3:99:e9:db:a5:de:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:26:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3c078e149d9741434fd8877ab4ced46dc2720da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:1c:47:c4:04:a6:f3:2a:1b:a9:b3:6d:e7: 81:4d:4f:f0:6f:d2:44:26:f0:48:d7:78:3f:48:10: 3d:b7:a8:b4:11:fb:91:e0:a5:3a:92:f0:1e:63:aa: 66:ec:cb:06:de:50:96:26:88:f3:68:fd:65:c0:07: a7:9e:5c:93:df:b3:71:99:ee:13:b9:ba:2e:6e:cc: 44:08:1f:b6:07:46:d9:8c:b0:8a:cf:b4:0e:8a:55: 27:80:03:ae:75:aa:2f:65:03:7a:c1:bf:9d:8e:31: 9b:4b:96:c5:9b:35:3d:86:33:f1:5b:bc:a8:b1:9c: 45:00:22:6f:de:c4:56:ec:07:8a:0d:1a:2e:0d:08: 5e:af:09:3f:01:1b:52:88:5b:94:ae:92:14:d5:00: db:52:2a:10:b1:79:9d:ce:b5:26:3d:0b:be:d5:76: 93:50:9a:b2:f7:85:f4:89:b4:32:98:a4:ad:c4:26: 12:bb:e0:67:c5:58:f5:56:0c:3e:4b:13:29:e5:7d: 66:31:62:88:d0:69:93:6d:9f:41:96:16:57:7b:e6: 75:53:7b:9b:8b:23:a1:76:c9:68:24:a1:a7:5a:26: a8:f9:c7:cc:de:65:1d:75:8a:3e:38:28:da:e8:87: 7d:6e:2a:73:6f:c0:e4:f9:90:87:a5:3d:77:a2:ba: 7d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215147 Signature Algorithm: sha256WithRSAEncryption 84:11:bb:06:40:f3:a9:2e:cb:1c:52:ea:31:86:85:bc:61:8e: 0e:da:cd:24:0f:36:f4:cb:e0:64:61:d5:95:b6:a9:8d:8a:a7: bb:6f:fc:45:c5:87:63:21:98:f3:ad:70:a5:62:81:f4:af:93: bc:a8:44:42:ed:53:f1:8e:d1:08:31:89:ee:ab:49:41:63:d8: ea:4c:e2:ed:f3:9b:10:74:66:56:45:83:91:7b:26:62:e5:b7: 5d:3c:c2:6d:f6:73:f8:df:8c:89:37:90:7e:27:38:8d:7c:57: 60:08:2c:3a:fc:dc:44:65:00:c2:26:4d:c5:7d:a2:69:e0:43: 29:45:fd:53:7e:2a:48:7e:1f:63:c5:a8:12:9d:a6:e1:f5:65: 4d:34:6d:40:0e:88:38:33:55:a0:5c:f7:33:97:b7:2f:26:73: 67:c5:81:97:a2:28:dd:87:34:05:86:a6:0d:16:13:ce:ab:7e: ba:f9:4c:83:3c:6b:51:09:e4:fb:94:93:f3:78:60:1c:6f:58: 60:c3:b4:55:42:f2:d8:b8:3f:5d:12:3f:9c:ec:49:35:95:10: 45:83:25:f3:97:d9:22:20:24:34:e2:e4:56:5c:a9:d4:bb:aa: 7e:15:34:69:72:97:84:d8:38:2d:01:be:67:77:2f:08:6b:db: 72:c7:7a:16 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt3zlsGtIQ+9+PDmenbpd4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQyNjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2MwNzhlMTQ5ZDk3NDE0MzRmZDg4NzdhYjRjZWQ0NmRjMjcyMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYgcR8QEpvMqG6mzbeeBTU/wb9JE JvBI13g/SBA9t6i0EfuR4KU6kvAeY6pm7MsG3lCWJojzaP1lwAennlyT37Nxme4T uboubsxECB+2B0bZjLCKz7QOilUngAOudaovZQN6wb+djjGbS5bFmzU9hjPxW7yo sZxFACJv3sRW7AeKDRouDQherwk/ARtSiFuUrpIU1QDbUioQsXmdzrUmPQu+1XaT UJqy94X0ibQymKStxCYSu+BnxVj1Vgw+SxMp5X1mMWKI0GmTbZ9BlhZXe+Z1U3ub iyOhdsloJKGnWiao+cfM3mUddYo+OCja6Id9bipzb8Dk+ZCHpT13orp9XwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFLPAeOFJ2XQUNP2Id6tM7UbcJyDaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY4YWJh YmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhh YmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzAvQjNDMDc4RTE0OUQ5 NzQxNDM0RkQ4ODc3QUI0Q0VENDZEQzI3MjBEQS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSGsw DQYJKoZIhvcNAQELBQADggEBAIQRuwZA86kuyxxS6jGGhbxhjg7azSQPNvTL4GRh 1ZW2qY2Kp7tv/EXFh2MhmPOtcKVigfSvk7yoRELtU/GO0Qgxie6rSUFj2OpM4u3z mxB0ZlZFg5F7JmLlt108wm32c/jfjIk3kH4nOI18V2AILDr83ERlAMImTcV9omng QylF/VN+Kkh+H2PFqBKdpuH1ZU00bUAOiDgzVaBc9zOXty8mc2fFgZeiKN2HNAWG pg0WE86rfrr5TIM8a1EJ5PuUk/N4YBxvWGDDtFVC8ti4P10SP5zsSTWVEEWDJfOX 2SIgJDTi5FZcqdS7qn4VNGlyl4TYOC0Bvmd3Lwhr23LHehY= -----END CERTIFICATE-----Generated at Mon Jan 26 04:49:19 2026 by rpki-client