This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer File: 50eFUAaL94IgQIwl1hK8L7AkYME.cer (raw, json) Hash identifier: cxaFc80BJPB4eCcqu+uuHogpyUDwiTJsBpRw3hyb/0w= Subject key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DD364D794DFFB790DDAC7E60F55BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16253 IP: 217.142.0.0/20 IP: 2a03:f0c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d3:64:d7:94:df:fb:79:0d:da:c7:e6:0f:55:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7478550068bf78220408c25d612bc2fb02460c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:18:18:7c:d7:55:df:24:fc:42:87:57:d8: a4:1b:31:16:b0:4e:36:7a:95:9d:52:9d:e0:e0:56: ce:5b:c4:cd:46:e5:68:e5:d3:58:1a:32:98:a0:a7: 65:fa:7a:d8:81:8f:63:4b:cc:d3:7d:d5:a7:4c:fa: 23:28:aa:91:24:7e:a8:d4:fa:7b:25:04:47:f8:0f: 89:c9:95:b7:0c:23:ab:1b:f7:fd:46:96:54:0d:4e: d1:2e:1b:2b:6f:25:c8:7f:ba:9c:53:93:d1:6e:5f: 46:62:ea:76:b4:91:65:ae:9c:73:f2:01:2c:6a:f5: b1:9a:49:dc:bf:6d:86:7b:3f:fb:1f:cd:10:5c:dd: ef:4d:4d:5c:7d:f0:54:28:33:5d:66:c6:49:dd:ae: ab:0d:27:bf:41:f2:f3:ee:be:11:b7:c5:44:f9:19: 91:14:86:93:89:01:5b:76:bc:a9:70:d5:2b:51:af: 52:d6:43:7b:25:c2:75:c0:6b:35:01:dd:12:00:c5: f9:0c:9e:2e:84:52:de:3b:f7:3f:45:df:8d:cd:ff: dd:03:2e:72:db:7a:01:22:21:a8:5f:a7:3a:05:26: 42:05:22:66:17:fa:6b:94:cc:b5:79:7a:38:d6:7b: 96:06:a4:bc:e4:e2:88:82:d3:6e:66:49:17:84:b8: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.142.0.0/20 IPv6: 2a03:f0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16253 Signature Algorithm: sha256WithRSAEncryption 4c:9d:16:56:32:38:ce:f1:b5:9d:80:ae:fb:14:72:ba:f5:e8: 22:f9:b9:27:67:aa:ef:18:2d:57:fd:44:25:0a:01:04:e2:c9: 7c:42:6b:99:a8:7e:cc:3e:d8:05:94:7b:e5:ea:21:5c:2c:c1: dd:80:1a:f5:71:cb:29:81:20:80:ff:e0:08:07:34:78:44:98: 97:01:e4:bf:71:8b:50:72:d6:81:30:2d:93:73:42:6a:b2:ac: 82:51:95:ab:35:7e:4c:92:d9:62:e3:8e:a7:1b:4f:7a:4d:c7: 5b:f0:f2:f6:f8:04:bd:e9:e3:29:b3:74:f4:72:8a:53:3e:7d: 55:50:1a:0b:81:39:68:3e:8b:57:e4:54:40:b6:44:09:2c:e0: a6:a7:a4:7b:6e:a6:08:1c:74:c7:15:91:4a:f5:29:e8:20:6d: 7b:20:62:34:3d:1b:7e:96:db:54:7e:10:61:ae:1e:f6:e3:72: b6:73:82:11:7b:1c:f1:9f:31:13:0b:be:29:0f:19:ce:f9:f7: 1b:7e:b8:30:ca:7f:91:e9:2d:a2:e6:33:6a:71:7e:f2:e3:da: c1:d4:c0:cf:3e:10:b5:4b:4d:a9:36:4b:d6:47:ab:ce:2f:ef: b8:99:b5:47:e7:0c:44:94:58:78:ce:cf:8d:a6:cd:76:3c:72: 9b:9a:9c:88 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt5fdNk15Tf+3kN2sfmD1W6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzQ3ODU1MDA2OGJmNzgyMjA0MDhjMjVkNjEyYmMyZmIwMjQ2MGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRgYGHzXVd8k/EKHV9ikGzEWsE42 epWdUp3g4FbOW8TNRuVo5dNYGjKYoKdl+nrYgY9jS8zTfdWnTPojKKqRJH6o1Pp7 JQRH+A+JyZW3DCOrG/f9RpZUDU7RLhsrbyXIf7qcU5PRbl9GYup2tJFlrpxz8gEs avWxmkncv22Gez/7H80QXN3vTU1cffBUKDNdZsZJ3a6rDSe/QfLz7r4Rt8VE+RmR FIaTiQFbdrypcNUrUa9S1kN7JcJ1wGs1Ad0SAMX5DJ4uhFLeO/c/Rd+Nzf/dAy5y 23oBIiGoX6c6BSZCBSJmF/prlMy1eXo41nuWBqS85OKIgtNuZkkXhLjfNQIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFOdHhVAGi/eCIECMJdYSvC+wJGDBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzYzNTUx MS03MWYzLTRmNTctOTEzOS03ZGEzY2QyNTNiZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvNjM1NTEx LTcxZjMtNGY1Ny05MTM5LTdkYTNjZDI1M2JmNi8xLzUwZUZVQWFMOTRJZ1FJd2wx aEs4TDdBa1lNRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQE2Y4AMA0EAgACMAcDBQAqA/DAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAj99MA0GCSqGSIb3DQEBCwUAA4IBAQBMnRZWMjjO8bWd gK77FHK69egi+bknZ6rvGC1X/UQlCgEE4sl8QmuZqH7MPtgFlHvl6iFcLMHdgBr1 ccspgSCA/+AIBzR4RJiXAeS/cYtQctaBMC2Tc0JqsqyCUZWrNX5Mktli446nG096 Tcdb8PL2+AS96eMps3T0copTPn1VUBoLgTloPotX5FRAtkQJLOCmp6R7bqYIHHTH FZFK9SnoIG17IGI0PRt+lttUfhBhrh7243K2c4IRexzxnzETC74pDxnO+fcbfrgw yn+R6S2i5jNqcX7y49rB1MDPPhC1S02pNkvWR6vOL++4mbVH5wxElFh4zs+Nps12 PHKbmpyI -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:49 2026 by rpki-client