This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer File: 4skpXMHDGHbIVU6LYNxXPP6nyyY.cer (raw, json) Hash identifier: EMQHPyUw3xVISZwmz6iMNkwavHz1+c3BrakRugb0sKk= Subject key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF3D9BBEE727C7C724316059ED42C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215368 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 11:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f3:d9:bb:ee:72:7c:7c:72:43:16:05:9e:d4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2c:7a:75:95:1d:46:d2:10:00:bc:dc:89:c7: 55:00:15:a9:0f:7c:01:55:10:29:ef:e5:cd:4d:c9: 2a:f6:82:0c:bb:bc:c3:27:ec:b3:d5:d8:65:bc:0e: 43:95:94:ba:40:29:fd:4c:f7:d1:0a:6d:ea:d5:34: cd:e0:39:89:ff:9f:62:78:f2:06:8f:e2:e7:35:c2: c2:ec:41:a7:1c:14:df:c0:5f:08:bb:e8:6e:c6:87: 9d:cd:c7:7a:7f:a3:a1:ab:53:32:8f:14:8b:3c:ee: da:b6:b3:5b:2a:d1:b8:a5:b6:ff:bc:c4:86:09:05: a0:64:9e:cf:f6:cc:17:86:ec:14:48:29:92:86:87: 87:2a:3d:9a:28:b2:ed:e1:94:9e:a7:e7:29:fe:72: 93:e0:6b:f5:5d:29:43:17:ad:15:92:8a:e2:f1:1e: 01:36:44:86:f6:c9:a9:b9:7d:1c:52:96:9e:24:ec: 22:a8:19:12:38:5f:27:5f:51:72:a4:6f:d0:49:e2: 6b:b8:ef:ee:4f:8d:0e:cb:39:a4:f4:2c:0a:7b:65: f0:65:73:6b:e1:84:c3:c2:a0:0d:3d:c7:a1:06:6f: 11:19:05:9e:9f:ea:39:1b:5e:25:56:59:ca:12:6e: 24:13:7d:30:35:ea:24:ff:7c:56:2a:b6:3b:d2:e3: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215368 Signature Algorithm: sha256WithRSAEncryption 92:59:07:76:73:ea:bb:d8:a7:35:18:6c:db:c5:75:bd:60:f0: 99:9d:af:9c:0c:2e:27:c3:64:2f:38:48:c9:84:a6:00:79:c5: 2a:4d:ab:1d:80:a3:e8:cc:e5:67:51:8d:2b:6d:03:c6:6d:c2: 90:d7:3c:c2:b8:32:92:02:70:4c:31:1c:de:bd:52:dc:3e:86: bf:02:6b:5b:31:6b:d1:29:75:54:c9:39:8b:0f:04:d8:45:09: 10:4f:ee:a1:8a:2b:96:b7:7d:56:70:87:b3:88:27:a5:00:ee: 47:a4:8c:05:4c:4f:e7:2b:f9:c4:4a:13:6c:31:0a:71:cc:5d: 8b:79:9f:ce:7d:90:63:80:4a:8b:96:18:dd:90:ab:f6:00:2f: eb:5a:98:4b:eb:91:0f:32:1b:82:d6:40:27:da:08:90:6d:ab: c3:c0:9e:23:34:ff:18:33:10:b3:3b:f1:d3:9a:cb:a7:46:de: 6a:de:12:8c:77:59:30:33:7b:bd:1f:84:be:11:70:9f:83:19: 39:a3:42:62:ce:3f:ca:0e:02:d1:11:fa:bb:3b:9e:0b:76:62: 0a:25:6e:36:b3:19:ac:e6:0e:47:b4:23:2c:a6:d3:b6:08:45: ea:38:18:04:e3:f2:90:02:ee:40:48:8e:b7:f8:c3:5d:c7:be: 57:54:51:ca -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt26vPZu+5yfHxyQxYFntQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmM5Mjk1Y2MxYzMxODc2Yzg1NTRlOGI2MGRjNTczY2ZlYTdjYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yx6dZUdRtIQALzcicdVABWpD3wB VRAp7+XNTckq9oIMu7zDJ+yz1dhlvA5DlZS6QCn9TPfRCm3q1TTN4DmJ/59iePIG j+LnNcLC7EGnHBTfwF8Iu+huxoedzcd6f6Ohq1MyjxSLPO7atrNbKtG4pbb/vMSG CQWgZJ7P9swXhuwUSCmShoeHKj2aKLLt4ZSep+cp/nKT4Gv1XSlDF60Vkori8R4B NkSG9smpuX0cUpaeJOwiqBkSOF8nX1FypG/QSeJruO/uT40Oyzmk9CwKe2XwZXNr 4YTDwqANPcehBm8RGQWen+o5G14lVlnKEm4kE30wNeok/3xWKrY70uNw+wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFOLJKVzBwxh2yFVOi2DcVzz+p8smMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUx ODEwLTE5ODctNDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8zLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODRk NTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2NGY0LzMvRTJDOTI5NUNDMUMz MTg3NkM4NTU0RThCNjBEQzU3M0NGRUE3Q0IyNi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSUgw DQYJKoZIhvcNAQELBQADggEBAJJZB3Zz6rvYpzUYbNvFdb1g8Jmdr5wMLifDZC84 SMmEpgB5xSpNqx2Ao+jM5WdRjSttA8ZtwpDXPMK4MpICcEwxHN69Utw+hr8Ca1sx a9EpdVTJOYsPBNhFCRBP7qGKK5a3fVZwh7OIJ6UA7kekjAVMT+cr+cRKE2wxCnHM XYt5n859kGOASouWGN2Qq/YAL+tamEvrkQ8yG4LWQCfaCJBtq8PAniM0/xgzELM7 8dOay6dG3mreEox3WTAze70fhL4RcJ+DGTmjQmLOP8oOAtER+rs7ngt2Ygolbjaz GazmDke0Iyym07YIReo4GATj8pAC7kBIjrf4w13HvldUUco= -----END CERTIFICATE-----Generated at Wed Jan 7 12:51:18 2026 by rpki-client