This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer File: 41wFcLO3dz0eEYgufdLGJVN-sJw.cer (raw, json) Hash identifier: j7UqGTn9qEHVaaYpaBMz2Zsd3BTOJLNDnCzP0BWfaso= Subject key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA35EBBD4959D96E9331560656A981F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61242 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5e:bb:d4:95:9d:96:e9:33:15:60:65:6a:98:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:38:ec:6f:26:19:72:1e:4f:b1:d9:bf:fb: d3:51:7c:57:7b:91:78:04:f5:eb:99:e6:f0:c7:4d: 36:5f:20:9a:3d:a5:20:bd:9c:45:c0:44:a7:2b:41: 5e:33:e9:ed:96:db:14:14:28:7d:78:1f:9f:f4:c3: 9f:0e:19:04:e4:de:dc:76:8a:b1:61:65:d1:f4:9b: 25:ab:21:a4:36:d8:53:7e:c9:7a:c0:0c:26:b1:16: da:37:9c:16:dd:ba:ca:f7:5c:00:71:d4:a5:e4:ea: af:03:7d:39:a4:24:84:7b:dc:85:5b:a9:02:89:37: 87:f0:38:a9:8c:91:3e:02:86:3b:49:0b:4f:f3:23: 47:7f:c3:22:72:55:8a:9c:92:bb:11:44:05:37:f8: f0:a0:7a:21:31:3d:86:82:e2:52:cf:ae:7f:bd:39: af:3c:22:49:db:92:bf:b2:f3:e0:f0:e7:8e:44:22: d1:04:a6:2a:ab:70:35:b5:c0:d0:40:0b:8b:a1:31: d4:22:7c:94:64:3e:e1:10:72:79:6b:4f:90:b0:da: 17:c2:97:cf:c7:be:92:49:63:96:6e:04:1e:34:ef: 15:87:d6:2e:94:28:d6:9c:fc:bf:12:a1:50:67:0c: 98:d5:a0:a5:f8:36:c7:88:ed:b1:07:ed:5c:8f:84: 47:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 61242 Signature Algorithm: sha256WithRSAEncryption 6e:9d:1a:65:cc:5e:77:04:b7:d2:fd:d2:23:56:92:ee:75:c0: 99:d4:0f:f3:60:88:a1:d2:16:f2:db:bc:cf:31:a7:9d:23:fb: 56:03:4c:bb:e7:e9:13:d2:50:0c:f4:57:29:46:c1:5e:3f:d1: 7e:b1:d9:1c:b3:9f:f4:f9:74:8d:c7:f6:21:2f:f5:9d:ee:06: c8:fb:5e:57:03:44:46:ec:45:7b:40:ee:7a:2f:fe:5c:48:7b: fc:79:0b:fb:a2:21:33:9b:96:50:84:f7:b8:ba:de:95:49:14: 8f:79:4e:5d:4a:42:26:c1:1a:09:a6:b0:75:b2:44:51:88:de: 54:98:b2:eb:64:80:9d:51:b5:43:9c:fd:04:8f:f7:f7:cc:10: 4b:08:77:8f:a3:0b:96:84:b3:f2:ab:99:53:16:87:49:14:06: a8:59:77:c3:85:ff:1a:78:ca:ce:09:61:89:4d:31:66:09:5c: 3c:1e:e0:9c:c8:ff:1c:d0:1a:dc:98:3b:cd:27:37:16:2b:99: ed:c6:ef:ff:99:51:f7:10:83:e5:ef:3a:fe:0d:de:63:46:7e: f1:14:67:72:00:ef:cb:3e:4e:23:c9:7f:0e:59:86:6f:0e:7c: 30:a4:99:e1:25:f1:86:a3:e2:08:b0:de:4c:9e:01:b9:0f:53: cf:5e:13:09 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7o1671JWdlukzFWBlapgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzVjMDU3MGIzYjc3NzNkMWUxMTg4MmU3ZGQyYzYyNTUzN2ViMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6w47G8mGXIeT7HZv/vTUXxXe5F4 BPXrmebwx002XyCaPaUgvZxFwESnK0FeM+ntltsUFCh9eB+f9MOfDhkE5N7cdoqx YWXR9JslqyGkNthTfsl6wAwmsRbaN5wW3brK91wAcdSl5OqvA305pCSEe9yFW6kC iTeH8DipjJE+AoY7SQtP8yNHf8MiclWKnJK7EUQFN/jwoHohMT2GguJSz65/vTmv PCJJ25K/svPg8OeORCLRBKYqq3A1tcDQQAuLoTHUInyUZD7hEHJ5a0+QsNoXwpfP x76SSWOWbgQeNO8Vh9YulCjWnPy/EqFQZwyY1aCl+DbHiO2xB+1cj4RHeQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFONcBXCzt3c9HhGILn3SxiVTfrCcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2L2MyZjU3 OS03NTAxLTRhNWItOGRkNy1mNjkxMjhhOTE5ODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvYzJmNTc5 LTc1MDEtNGE1Yi04ZGQ3LWY2OTEyOGE5MTk4My8xLzQxd0ZjTE8zZHowZUVZZ3Vm ZExHSlZOLXNKdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDvOjANBgkqhkiG9w0BAQsFAAOCAQEAbp0aZcxedwS3 0v3SI1aS7nXAmdQP82CIodIW8tu8zzGnnSP7VgNMu+fpE9JQDPRXKUbBXj/RfrHZ HLOf9Pl0jcf2IS/1ne4GyPteVwNERuxFe0Duei/+XEh7/HkL+6IhM5uWUIT3uLre lUkUj3lOXUpCJsEaCaawdbJEUYjeVJiy62SAnVG1Q5z9BI/398wQSwh3j6MLloSz 8quZUxaHSRQGqFl3w4X/GnjKzglhiU0xZglcPB7gnMj/HNAa3Jg7zSc3FiuZ7cbv /5lR9xCD5e86/g3eY0Z+8RRncgDvyz5OI8l/DlmGbw58MKSZ4SXxhqPiCLDeTJ4B uQ9Tz14TCQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:40 2026 by rpki-client