This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer File: sSUy4p8i-iMdxvyOUw77HHYRngo.cer (raw, json) Hash identifier: K8UHLOznQxlrxz1MXzh0waMiBAPf1vd8W6P+XhI/wMk= Subject key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDA001D37AA24BAC0A6CBBBE0391C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212001 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a0:01:d3:7a:a2:4b:ac:0a:6c:bb:be:03:91:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:80:5a:17:b0:f0:72:d8:23:e8:e2:dc:1e: 67:ce:2f:93:03:85:9b:ee:96:37:2b:7d:66:8f:4b: 23:3d:3f:e8:4a:af:63:b0:47:04:54:0f:28:2f:af: 9b:c8:6d:05:4c:bd:e2:58:dc:7e:90:57:58:90:67: 60:a5:75:d3:98:fe:fa:d1:c8:43:a2:2e:e0:e6:46: 35:d6:2d:58:2a:75:58:06:7f:8d:f3:f6:18:5f:6c: da:0f:83:cf:ad:ce:98:33:07:57:e1:66:56:b1:71: bf:66:40:85:6e:2e:fd:3f:ae:d8:9f:e4:e6:7f:99: 12:a5:c8:7a:ef:8c:cc:09:81:ab:57:9a:c4:58:4a: 8c:83:4d:f1:34:79:cf:ae:fb:6c:ae:dc:96:e8:ba: eb:00:a3:93:fa:6d:26:70:8a:e2:a2:2c:d6:e6:f8: 67:c6:98:22:44:e0:9e:78:8c:2e:63:ec:d3:47:9d: f9:09:81:93:94:eb:52:38:fe:d9:cb:22:56:c7:50: 2f:3d:f0:48:c1:8b:3a:a4:09:2d:0b:ba:25:f9:1b: 27:1d:3a:a4:10:cb:f9:7e:f2:40:09:6d:2b:dc:a9: e8:32:50:c7:8d:9c:f6:59:fb:25:2f:86:77:fe:6a: 5e:5f:e7:df:7c:aa:dd:9c:16:43:ac:c0:99:4e:e1: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212001 Signature Algorithm: sha256WithRSAEncryption 34:10:8a:ed:b9:68:7f:d3:f0:8b:85:14:1b:76:88:ce:6d:6f: 29:87:57:d5:0e:24:1f:42:69:35:3a:47:dc:df:04:ac:98:86: 61:a9:3c:d6:a0:a7:18:9a:b3:5f:34:ce:40:3e:2c:f3:7d:bc: eb:cd:7e:47:4a:2c:75:4c:0f:60:97:11:40:7c:11:8a:35:09: 7d:b3:85:ec:76:61:43:7f:40:1d:dc:b0:95:05:08:7b:a5:a3: d1:0e:d5:f7:e4:75:bf:3c:a3:1e:f0:44:f7:83:81:90:90:10: 34:a3:14:29:27:66:27:ad:09:e1:84:36:3a:72:5f:92:37:4a: 23:7f:51:7c:66:76:39:e6:ba:e0:21:54:6f:31:9e:2f:94:c3: 76:04:2d:46:f1:4e:27:89:10:4a:61:80:41:cc:ea:12:01:62: 70:51:bc:f3:dd:af:d2:8b:b8:9c:0c:0c:0c:58:b7:6f:80:de: 1d:6c:77:44:1f:cf:8c:39:ab:fb:f7:1a:4a:06:b3:a8:8d:f2: ad:52:dd:49:52:5a:2a:50:27:10:a0:73:f3:a3:9b:ad:29:e9: d6:43:6a:ee:3d:ea:68:d1:f6:a6:cc:15:30:95:0c:2c:24:a6: 2a:52:cd:7b:a8:d8:31:c8:e1:cd:35:62:c7:a2:d3:62:7f:d3: dd:c5:43:9a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87aAB03qiS6wKbLu+A5HFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTI1MzJlMjlmMjJmYTIzMWRjNmZjOGU1MzBlZmIxYzc2MTE5ZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4mAWhew8HLYI+ji3B5nzi+TA4Wb 7pY3K31mj0sjPT/oSq9jsEcEVA8oL6+byG0FTL3iWNx+kFdYkGdgpXXTmP760chD oi7g5kY11i1YKnVYBn+N8/YYX2zaD4PPrc6YMwdX4WZWsXG/ZkCFbi79P67Yn+Tm f5kSpch674zMCYGrV5rEWEqMg03xNHnPrvtsrtyW6LrrAKOT+m0mcIrioizW5vhn xpgiROCeeIwuY+zTR535CYGTlOtSOP7ZyyJWx1AvPfBIwYs6pAktC7ol+RsnHTqk EMv5fvJACW0r3KnoMlDHjZz2WfslL4Z3/mpeX+fffKrdnBZDrMCZTuE/mwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLElMuKfIvojHcb8jlMO+xx2EZ4KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzQ3MmRk NC0xOWE2LTQ0MGYtYTg3ZC05MzNlZmJkNzdmNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvNDcyZGQ0 LTE5YTYtNDQwZi1hODdkLTkzM2VmYmQ3N2Y1Yi8xL3NTVXk0cDhpLWlNZHh2eU9V dzc3SEhZUm5nby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8ITANBgkqhkiG9w0BAQsFAAOCAQEANBCK7blof9Pw i4UUG3aIzm1vKYdX1Q4kH0JpNTpH3N8ErJiGYak81qCnGJqzXzTOQD4s8328681+ R0osdUwPYJcRQHwRijUJfbOF7HZhQ39AHdywlQUIe6Wj0Q7V9+R1vzyjHvBE94OB kJAQNKMUKSdmJ60J4YQ2OnJfkjdKI39RfGZ2Oea64CFUbzGeL5TDdgQtRvFOJ4kQ SmGAQczqEgFicFG8892v0ou4nAwMDFi3b4DeHWx3RB/PjDmr+/caSgazqI3yrVLd SVJaKlAnEKBz86ObrSnp1kNq7j3qaNH2pswVMJUMLCSmKlLNe6jYMcjhzTVix6LT Yn/T3cVDmg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:22 2026 by rpki-client