This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21LN5wkMV9jpwx1Rh0jfkiueBM4.cer File: 21LN5wkMV9jpwx1Rh0jfkiueBM4.cer (raw, json) Hash identifier: 0kBo53i+76mXL8P16PesFmFu+m7K1P18glUkxrSfwZs= Subject key identifier: DB:52:CD:E7:09:0C:57:D8:E9:C3:1D:51:87:48:DF:92:2B:9E:04:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80661CF765D9C346A8732421AAC4B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61284 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:66:1c:f7:65:d9:c3:46:a8:73:24:21:aa:c4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db52cde7090c57d8e9c31d518748df922b9e04ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:f5:75:ab:14:c5:2b:37:2b:9b:50:3d:39: bb:da:dc:38:a0:2d:d8:ba:81:d7:46:92:12:e7:51: d2:67:6c:9a:e3:c0:33:d1:af:9f:33:3d:42:ad:44: 7c:8d:2e:41:a3:14:c2:9e:66:1d:5b:9a:e6:0a:2a: 0a:08:f1:55:6b:79:3b:86:59:03:73:40:e1:d2:bd: 93:f6:28:6a:d0:7b:11:d8:bc:c5:f5:f1:6b:62:ce: c5:c1:98:fb:3b:d6:51:55:d0:a0:3e:d7:83:69:46: ca:64:d4:a4:49:0f:cc:f5:b6:ed:e6:a6:da:27:bd: 7f:da:cb:68:cd:7e:b9:18:1a:fb:11:2b:d8:cc:c8: fd:3e:1f:9b:c3:70:ae:66:57:ff:c3:bf:78:cc:81: 07:2b:14:8d:41:ae:59:a7:c0:96:98:3f:62:5c:cc: 65:1e:56:fd:b3:99:b6:b4:75:65:7d:30:95:95:5f: 5f:76:13:27:45:a7:ec:39:dc:d3:23:a2:e1:a1:f6: c6:04:84:ae:ca:bb:7e:75:21:b4:40:1c:bd:c3:e9: ef:18:c8:7e:3a:43:9f:b0:97:dc:d0:75:37:e6:ba: d8:03:57:6d:28:34:7b:2a:cf:ac:ed:4c:34:58:79: 40:d4:61:96:e6:22:b7:23:23:fb:f3:6a:65:5d:40: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:52:CD:E7:09:0C:57:D8:E9:C3:1D:51:87:48:DF:92:2B:9E:04:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8f30ea-eb2e-44ce-a93c-d0cadfe84b19/1/21LN5wkMV9jpwx1Rh0jfkiueBM4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 61284 Signature Algorithm: sha256WithRSAEncryption 86:4b:25:66:54:ca:3d:ac:b6:5f:38:6a:3e:21:0a:85:14:54: 90:8b:55:2b:cd:7f:f6:ad:de:d4:1c:38:ed:b6:83:9e:d1:1e: 8f:42:ef:43:b5:56:b2:1d:b6:53:29:be:8c:95:b8:01:71:a4: cf:bc:cb:41:ae:64:01:38:af:2d:20:54:78:4e:e9:2d:3f:65: 49:8d:c1:49:50:ad:8e:ea:37:01:68:ce:fc:65:8b:b2:29:cf: 5e:7c:84:43:bd:f6:ad:95:b4:5e:31:ca:47:59:0d:61:5d:c3: 44:cc:ac:54:32:8e:51:c9:ba:c9:22:09:f7:9f:5e:56:ef:1b: 18:ec:15:93:9b:48:75:b6:e7:13:c9:03:3a:96:49:f7:b1:e3: 89:c9:4d:fd:dd:fb:22:68:f4:ca:a6:be:3a:24:ed:ca:64:b0: 10:da:1d:7b:ba:35:14:ea:07:36:1e:02:c2:7d:e8:b0:f0:8c: cc:b1:77:9f:87:f9:0a:71:6a:19:99:e8:11:47:7a:27:3a:f3: 86:80:b3:90:5e:38:bd:ae:f1:a7:8b:14:c1:c6:93:4d:74:36: a2:86:ce:58:d1:9f:ff:89:89:1b:cb:fb:be:d9:0c:09:8b:f7: 14:8b:ae:af:d4:13:76:cc:be:d7:51:7e:73:68:7d:63:5c:11: d1:9c:95:36 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8gGYc92XZw0aocyQhqsS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjUyY2RlNzA5MGM1N2Q4ZTljMzFkNTE4NzQ4ZGY5MjJiOWUwNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S31dasUxSs3K5tQPTm72tw4oC3Y uoHXRpIS51HSZ2ya48Az0a+fMz1CrUR8jS5BoxTCnmYdW5rmCioKCPFVa3k7hlkD c0Dh0r2T9ihq0HsR2LzF9fFrYs7FwZj7O9ZRVdCgPteDaUbKZNSkSQ/M9bbt5qba J71/2stozX65GBr7ESvYzMj9Ph+bw3CuZlf/w794zIEHKxSNQa5Zp8CWmD9iXMxl Hlb9s5m2tHVlfTCVlV9fdhMnRafsOdzTI6LhofbGBISuyrt+dSG0QBy9w+nvGMh+ OkOfsJfc0HU35rrYA1dtKDR7Ks+s7Uw0WHlA1GGW5iK3IyP782plXUDzBQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNtSzecJDFfY6cMdUYdI35IrngTOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzhmMzBl YS1lYjJlLTQ0Y2UtYTkzYy1kMGNhZGZlODRiMTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvOGYzMGVh LWViMmUtNDRjZS1hOTNjLWQwY2FkZmU4NGIxOS8xLzIxTE41d2tNVjlqcHd4MVJo MGpma2l1ZUJNNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDvZDANBgkqhkiG9w0BAQsFAAOCAQEAhkslZlTKPay2 XzhqPiEKhRRUkItVK81/9q3e1Bw47baDntEej0LvQ7VWsh22Uym+jJW4AXGkz7zL Qa5kATivLSBUeE7pLT9lSY3BSVCtjuo3AWjO/GWLsinPXnyEQ732rZW0XjHKR1kN YV3DRMysVDKOUcm6ySIJ959eVu8bGOwVk5tIdbbnE8kDOpZJ97HjiclN/d37Imj0 yqa+OiTtymSwENode7o1FOoHNh4Cwn3osPCMzLF3n4f5CnFqGZnoEUd6JzrzhoCz kF44va7xp4sUwcaTTXQ2oobOWNGf/4mJG8v7vtkMCYv3FIuur9QTdsy+11F+c2h9 Y1wR0ZyVNg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:37 2026 by rpki-client