This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer File: 481lehIFMt8z3lD-GsKzYgrErk8.cer (raw, json) Hash identifier: YYot9JLdlQYUJRn7h7OWdMr9wojMTlFUxpQcFjbmEUA= Subject key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC776EC2F28D627C9D996CD6852A77D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215188 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:76:ec:2f:28:d6:27:c9:d9:96:cd:68:52:a7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:39:b8:5f:e5:16:e1:2e:3a:7b:d5:ba:b4: b8:33:ec:20:2b:d5:00:4d:bc:51:d4:20:0f:73:23: fc:45:75:c5:54:8c:78:f5:09:80:78:6a:63:3b:11: 0d:9b:e1:bb:5d:cc:ed:9c:bf:9d:b4:7b:3e:7c:60: c9:da:22:df:c9:68:89:10:54:b3:31:92:75:f3:38: f0:9f:71:5c:ad:81:22:1b:76:37:9a:22:b3:44:bc: 70:eb:26:67:ec:67:5d:17:56:66:bc:03:53:75:ee: ba:8b:73:14:f4:60:10:8f:55:e2:b1:d0:7e:ac:7c: b3:8b:d4:d1:6e:0c:56:4e:d6:e6:e9:ac:cc:46:8e: 82:61:4c:b2:ab:44:2a:67:bf:a6:75:9a:2e:bb:b8: c5:9f:2e:bc:02:e2:02:43:08:29:63:d0:41:8a:41: 7a:fc:a2:8c:4b:f0:47:1f:cb:e4:7a:20:4a:e8:3d: 54:b9:c3:69:65:23:67:0b:9c:cb:d9:e5:e1:c3:f9: 20:f2:b9:c5:2d:f5:32:de:33:12:cc:b7:7b:c3:d9: 33:39:37:f8:76:db:88:38:cb:2e:11:4b:d0:dc:75: 4a:19:f2:86:b0:28:28:aa:49:09:e1:74:2c:e4:d4: 6a:ed:3c:46:5b:5d:6c:66:b8:0c:c8:c3:9f:13:e5: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215188 Signature Algorithm: sha256WithRSAEncryption 54:e9:fe:7c:ee:86:bc:cd:eb:3f:f1:1d:e2:4c:bc:da:02:7f: fb:61:42:83:e2:97:88:31:04:ff:c7:ef:b4:0c:9e:9b:c9:9d: ab:7a:9d:56:a1:34:d3:42:ef:f6:5d:d4:89:ed:00:d0:44:45: 78:03:fc:6b:46:19:13:13:f2:c8:d6:fb:06:c8:ac:58:46:e0: 6a:bd:8e:a6:88:e2:cf:79:69:40:02:0f:75:50:ac:70:6b:5c: fe:13:4c:80:00:47:0f:61:96:b5:f2:d2:2b:5b:81:98:24:71: 34:ec:c4:c8:bc:71:b5:f1:f4:21:a6:50:87:3d:87:55:9c:81: 2c:fd:8b:b3:e1:e6:8c:e6:05:02:a5:51:63:c5:97:59:5e:bd: 34:26:de:cc:46:36:0c:b6:99:26:e7:9b:79:db:14:1f:e2:ed: c3:9a:e6:5f:cf:db:ac:ac:a4:85:ad:9b:05:5e:f4:22:ee:42: 01:4f:e7:21:13:24:0e:4d:f5:cc:de:07:b8:d4:0a:bc:44:d2: a5:19:98:06:bf:d1:41:00:4a:32:1f:08:98:f3:6c:f4:e1:b7: 8a:f3:02:8d:08:33:27:aa:94:8e:c3:0e:22:f6:ae:21:be:32: 11:80:5a:0d:a4:9f:8c:1e:aa:7e:09:0b:76:5d:b5:e1:0d:cb: 0c:8b:46:b6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6x3bsLyjWJ8nZls1oUqd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2NkNjU3YTEyMDUzMmRmMzNkZTUwZmUxYWMyYjM2MjBhYzRhZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMc5uF/lFuEuOnvVurS4M+wgK9UA TbxR1CAPcyP8RXXFVIx49QmAeGpjOxENm+G7XcztnL+dtHs+fGDJ2iLfyWiJEFSz MZJ18zjwn3FcrYEiG3Y3miKzRLxw6yZn7GddF1ZmvANTde66i3MU9GAQj1XisdB+ rHyzi9TRbgxWTtbm6azMRo6CYUyyq0QqZ7+mdZouu7jFny68AuICQwgpY9BBikF6 /KKMS/BHH8vkeiBK6D1UucNpZSNnC5zL2eXhw/kg8rnFLfUy3jMSzLd7w9kzOTf4 dtuIOMsuEUvQ3HVKGfKGsCgoqkkJ4XQs5NRq7TxGW11sZrgMyMOfE+XalwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOPNZXoSBTLfM95Q/hrCs2IKxK5PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzc3MjQ3 Ni1hMjgzLTQ2NTYtYTYxNC0wZjk1NmNhZjgwM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvNzcyNDc2 LWEyODMtNDY1Ni1hNjE0LTBmOTU2Y2FmODAzYy8xLzQ4MWxlaElGTXQ4ejNsRC1H c0t6WWdyRXJrOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNIlDANBgkqhkiG9w0BAQsFAAOCAQEAVOn+fO6GvM3r P/Ed4ky82gJ/+2FCg+KXiDEE/8fvtAyem8mdq3qdVqE000Lv9l3Uie0A0ERFeAP8 a0YZExPyyNb7BsisWEbgar2Opojiz3lpQAIPdVCscGtc/hNMgABHD2GWtfLSK1uB mCRxNOzEyLxxtfH0IaZQhz2HVZyBLP2Ls+HmjOYFAqVRY8WXWV69NCbezEY2DLaZ JuebedsUH+Ltw5rmX8/brKykha2bBV70Iu5CAU/nIRMkDk31zN4HuNQKvETSpRmY Br/RQQBKMh8ImPNs9OG3ivMCjQgzJ6qUjsMOIvauIb4yEYBaDaSfjB6qfgkLdl21 4Q3LDItGtg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:22 2026 by rpki-client