This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer File: se4yDfBGSHfVF0XjFCMbVcg7aEU.cer (raw, json) Hash identifier: O8CrY552IkHPgnZcD6bkIVf+rdlkgakIbFq7U2SB6zI= Subject key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C610DA1C6F32A51FD58D8E3334494 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 129.102.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:61:0d:a1:c6:f3:2a:51:fd:58:d8:e3:33:44:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1ee320df0464877d51745e314231b55c83b6845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:3e:e8:82:bc:64:06:f9:af:a4:0d:ab:bd: 90:78:69:20:6b:53:dd:c5:e1:5b:21:e4:5d:6a:0c: c6:b1:cc:bd:45:7e:ad:42:5c:1a:33:99:bd:58:cd: 65:0d:de:de:dc:49:b0:80:85:c7:20:10:88:54:57: bd:b1:93:71:ae:e3:78:58:95:a7:55:1b:c5:f0:bc: 56:0f:ec:2a:af:32:9e:03:4b:52:d7:96:a6:f9:f6: 14:a4:fc:55:79:62:15:64:ce:0a:83:19:7d:11:38: 3d:a1:f3:43:44:ac:ae:f9:20:ac:c6:51:99:23:63: 90:e8:c4:8d:60:32:0b:fc:b6:34:4b:1a:d2:c2:a8: 2b:8b:2c:bf:f8:87:98:ac:af:c5:e7:1e:3d:2b:46: ef:7d:4f:32:d9:98:b1:ac:f3:d6:e3:0d:a0:f5:1d: ce:e1:8d:33:81:3d:74:63:82:f3:77:0f:95:4d:73: 1c:03:b6:04:be:a6:ce:56:e7:00:69:e3:8d:6a:7d: 33:d9:f3:78:f5:9e:35:97:a4:64:68:fe:35:d9:72: fd:a3:e0:68:b2:23:91:28:97:3d:01:2b:48:eb:79: ed:84:da:c3:06:b6:bc:1c:ae:6b:91:dd:e6:2c:82: ef:0f:f1:4a:c5:4b:06:90:9a:19:83:cd:df:44:cd: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:7f:c5:ce:b6:38:11:39:de:5d:d5:63:7d:a3:18:91:6d:e3: aa:47:67:4b:b6:0d:39:ab:d9:55:09:f6:cd:ca:b7:60:63:4c: 0e:fc:99:cf:bd:0f:ae:ab:2f:60:27:b5:a2:1f:35:55:d9:ca: b6:d5:85:2a:0d:db:43:37:6a:37:85:9e:e3:87:46:93:95:6d: 77:db:7e:37:2f:5c:bc:c9:30:ed:7c:5f:56:19:55:70:88:19: f5:1c:ad:2d:78:89:78:39:6e:54:2c:7c:40:46:0b:a5:84:37: 33:e1:2e:ca:d0:d1:15:68:9e:dd:c1:61:26:90:f6:d3:96:e5: f5:f1:82:a0:e0:02:98:bc:0b:bc:c9:1c:b2:8b:91:68:98:4d: 12:11:8c:9a:82:11:fa:d6:db:04:5d:d3:cd:89:05:c5:51:b8: 9c:e2:37:15:cd:30:9e:9c:9b:63:5d:ef:f2:2c:a0:a8:3f:59: 08:bb:50:46:3d:b1:ee:de:58:dd:ab:78:12:53:bc:2a:3b:ca: df:21:13:f6:05:37:bd:00:df:b7:f6:c6:da:a5:2f:dc:a6:94: f8:26:cc:0f:e0:e6:9e:77:02:aa:d9:f9:bf:f8:af:c2:6a:d6: 81:24:4e:51:57:60:b9:28:5c:63:80:3a:01:c6:d0:13:a2:f7: 06:b9:1d:dc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt9XGENocbzKlH9WNjjM0SUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWVlMzIwZGYwNDY0ODc3ZDUxNzQ1ZTMxNDIzMWI1NWM4M2I2ODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jY+6IK8ZAb5r6QNq72QeGkga1Pd xeFbIeRdagzGscy9RX6tQlwaM5m9WM1lDd7e3EmwgIXHIBCIVFe9sZNxruN4WJWn VRvF8LxWD+wqrzKeA0tS15am+fYUpPxVeWIVZM4Kgxl9ETg9ofNDRKyu+SCsxlGZ I2OQ6MSNYDIL/LY0SxrSwqgriyy/+IeYrK/F5x49K0bvfU8y2ZixrPPW4w2g9R3O 4Y0zgT10Y4Lzdw+VTXMcA7YEvqbOVucAaeONan0z2fN49Z41l6RkaP412XL9o+Bo siORKJc9AStI63nthNrDBra8HK5rkd3mLILvD/FKxUsGkJoZg83fRM0VWwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFLHuMg3wRkh31RdF4xQjG1XIO2hFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzAzYjQw NC0yZjY0LTRjN2MtYWM2Yy0yNmViMGM2MjkwYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvMDNiNDA0 LTJmNjQtNGM3Yy1hYzZjLTI2ZWIwYzYyOTBiYS8xL3NlNHlEZkJHU0hmVkYwWGpG Q01iVmNnN2FFVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAgWYwDQYJKoZIhvcNAQELBQADggEBAG5/xc62 OBE53l3VY32jGJFt46pHZ0u2DTmr2VUJ9s3Kt2BjTA78mc+9D66rL2AntaIfNVXZ yrbVhSoN20M3ajeFnuOHRpOVbXfbfjcvXLzJMO18X1YZVXCIGfUcrS14iXg5blQs fEBGC6WENzPhLsrQ0RVont3BYSaQ9tOW5fXxgqDgApi8C7zJHLKLkWiYTRIRjJqC EfrW2wRd082JBcVRuJziNxXNMJ6cm2Nd7/IsoKg/WQi7UEY9se7eWN2reBJTvCo7 yt8hE/YFN70A37f2xtqlL9ymlPgmzA/g5p53AqrZ+b/4r8Jq1oEkTlFXYLkoXGOA OgHG0BOi9wa5Hdw= -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:18 2026 by rpki-client