This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vX_XWXcYng1DJbYCegK28Ypx7zs.cer File: vX_XWXcYng1DJbYCegK28Ypx7zs.cer (raw, json) Hash identifier: Punv6RktDAYPg7OPCZT37VP40g1/0iK1DUFRyjdovAs= Subject key identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59B86229DFFBD05A662EE11D4F9FB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210352 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b8:62:29:df:fb:d0:5a:66:2e:e1:1d:4f:9f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd7fd75977189e0d4325b6027a02b6f18a71ef3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:5c:bd:0d:56:74:d4:66:cc:97:ff:8f:e3: e2:c1:d6:1a:05:50:1b:39:1d:88:2c:89:e3:a9:52: a4:de:32:e2:4b:57:9a:0b:40:53:47:48:d9:53:fa: 59:03:b9:a8:cb:62:d9:a9:ad:93:f2:58:7d:b3:60: f0:3f:17:0b:96:f4:75:3d:01:dd:f5:22:d8:87:b6: e7:76:d8:8c:de:3c:6c:c6:e0:bc:23:f0:1f:a3:0d: 45:3a:d8:1b:d0:0b:dd:6a:f2:d1:d0:53:4d:aa:2f: 28:4b:17:da:07:81:b7:57:3f:f8:ba:ef:a3:83:51: 82:cc:f5:4f:17:1c:6c:c7:5f:3b:fd:a8:21:fc:6d: 4b:ec:14:68:7a:a6:46:8d:cf:26:a6:49:5e:a6:17: e7:50:89:a9:13:fe:5a:79:58:00:be:5d:c7:47:2d: 65:bd:3a:aa:10:e9:2f:44:06:69:f7:9f:c2:96:42: f0:54:57:65:f8:a4:57:e7:f2:c1:e5:69:80:11:40: 91:f4:ea:7c:66:2f:61:1a:3b:0a:48:42:8f:8d:5c: cf:c5:28:66:2c:dd:d3:f3:4d:f8:09:05:a3:0d:bb: d5:f9:82:48:46:d6:d1:2f:54:18:61:cb:4f:70:f6: e9:3a:3c:7c:d4:cd:f9:31:66:82:3b:f9:05:e3:40: f0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7F:D7:59:77:18:9E:0D:43:25:B6:02:7A:02:B6:F1:8A:71:EF:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/0/BD7FD75977189E0D4325B6027A02B6F18A71EF3B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210352 Signature Algorithm: sha256WithRSAEncryption 24:93:b5:a5:2e:e0:a9:03:a9:84:a7:59:c4:f7:33:74:ac:c5: 3c:d5:86:1c:32:4b:8b:45:69:f5:91:e5:b2:1a:f9:a4:3f:3a: f1:0e:d6:a6:b1:7d:bd:82:9e:42:f2:70:7d:7b:18:89:de:68: d2:5d:d3:5a:a8:bc:d7:f6:62:ab:d3:b8:57:27:7f:9f:9a:d5: d4:60:3d:17:d2:9d:ec:62:6c:dc:03:7e:1e:5f:3d:0d:b3:ea: 92:ea:00:31:d9:4b:80:f3:02:72:2d:37:73:a3:23:ce:8b:89: 9f:51:ee:ca:4b:42:a1:f8:29:48:20:14:cc:98:84:4e:31:05: 38:2a:28:2e:c9:96:60:c3:e0:ae:7d:3d:3d:8d:29:cb:4b:ce: b6:0b:59:e7:c4:d8:48:b2:4d:66:b1:5d:39:5a:d2:b5:f1:29: 11:40:e3:02:5f:c7:c8:f1:74:8b:8c:aa:a8:34:58:79:45:ae: fb:88:f2:e9:7c:13:2f:8f:d2:c8:f4:05:ad:b0:95:7f:5f:fc: dd:12:7e:ae:c6:34:39:40:33:ef:b3:bd:e9:8a:ac:27:41:d0: 2d:24:d9:3e:f0:a5:83:97:4a:91:ab:c9:c1:a9:4d:a0:53:d0: 4f:3f:37:fc:9a:ac:d2:85:6b:19:88:0d:b9:09:c9:71:90:23: 05:aa:88:2f -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt6WbhiKd/70FpmLuEdT5+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDdmZDc1OTc3MTg5ZTBkNDMyNWI2MDI3YTAyYjZmMThhNzFlZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym9cvQ1WdNRmzJf/j+PiwdYaBVAb OR2ILInjqVKk3jLiS1eaC0BTR0jZU/pZA7moy2LZqa2T8lh9s2DwPxcLlvR1PQHd 9SLYh7bndtiM3jxsxuC8I/Afow1FOtgb0AvdavLR0FNNqi8oSxfaB4G3Vz/4uu+j g1GCzPVPFxxsx187/agh/G1L7BRoeqZGjc8mpklephfnUImpE/5aeVgAvl3HRy1l vTqqEOkvRAZp95/ClkLwVFdl+KRX5/LB5WmAEUCR9Op8Zi9hGjsKSEKPjVzPxShm LN3T8034CQWjDbvV+YJIRtbRL1QYYctPcPbpOjx81M35MWaCO/kF40DwUQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFL1/11l3GJ4NQyW2AnoCtvGKce87MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzE1MTdi NWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTUx N2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAwNjJmLzAvQkQ3RkQ3NTk3NzE4 OUUwRDQzMjVCNjAyN0EwMkI2RjE4QTcxRUYzQi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDNbAw DQYJKoZIhvcNAQELBQADggEBACSTtaUu4KkDqYSnWcT3M3SsxTzVhhwyS4tFafWR 5bIa+aQ/OvEO1qaxfb2CnkLycH17GIneaNJd01qovNf2YqvTuFcnf5+a1dRgPRfS nexibNwDfh5fPQ2z6pLqADHZS4DzAnItN3OjI86LiZ9R7spLQqH4KUggFMyYhE4x BTgqKC7JlmDD4K59PT2NKctLzrYLWefE2EiyTWaxXTla0rXxKRFA4wJfx8jxdIuM qqg0WHlFrvuI8ul8Ey+P0sj0Ba2wlX9f/N0Sfq7GNDlAM++zvemKrCdB0C0k2T7w pYOXSpGrycGpTaBT0E8/N/yarNKFaxmIDbkJyXGQIwWqiC8= -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:01 2026 by rpki-client