This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer File: 54z133frZmwE77frs8o0BK3sNPs.cer (raw, json) Hash identifier: 9Royq4xcLBH7BwnXbcqE1kjiTLh/OOdtlBaJxi16aR0= Subject key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB37D4F37602804C304F80697997F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61353 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:37:d4:f3:76:02:80:4c:30:4f:80:69:79:97:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:77:7e:8d:79:6e:9f:de:d3:0a:f0:3b:6a:54: a7:72:d4:69:b2:3f:3a:c4:c2:93:75:a8:09:be:0e: c8:41:bf:98:dc:45:b4:7c:3b:38:6f:d7:e2:10:e8: e5:0c:9b:15:7f:a3:53:92:03:34:1d:cb:93:26:2f: df:fd:d5:62:63:87:ef:09:55:ef:58:8a:43:32:f9: ed:78:99:05:08:b4:c7:b2:f8:90:ff:b7:0a:d3:2c: c7:91:eb:6e:56:3b:6e:e7:35:a2:fd:ed:f6:61:68: cd:fd:0e:96:18:85:6d:15:93:34:30:58:15:d2:a8: aa:5c:0d:0c:c3:0e:1c:18:37:9a:66:28:d7:6a:1a: 21:d8:50:f5:7f:82:68:90:db:cb:a6:f6:e0:04:20: 34:9e:fa:6a:6f:76:e2:b5:6b:b6:24:02:53:8c:d8: 39:a5:74:cd:57:b4:4d:8b:fd:0a:49:a2:8b:a0:90: 95:cd:c6:d3:c3:e2:5f:11:bc:07:26:94:96:95:05: 8a:f3:48:81:f9:d6:ba:68:ad:44:f1:dd:f1:1a:43: 8c:55:de:60:4b:2a:e9:a8:4f:26:d8:59:fc:a8:ae: 24:59:99:f2:40:aa:c3:88:cf:a8:a7:a1:c1:09:a9: 76:0d:93:d4:f4:79:1c:58:c8:37:a4:d4:c9:59:6b: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 61353 Signature Algorithm: sha256WithRSAEncryption 4f:ed:70:1b:ff:cf:a0:69:2b:24:e8:3c:e9:9f:16:db:61:81: fa:a5:c6:29:fd:e4:ef:f1:74:21:6a:10:ad:68:5d:dd:a8:94: 81:11:71:db:0b:ae:08:b1:7b:b5:38:36:6e:ea:b7:06:42:ea: 0c:6e:a4:f7:d8:40:28:96:11:66:27:7c:ff:6a:66:ed:0c:60: 15:d9:4c:cb:21:e4:65:21:c2:b5:dd:78:15:6b:4f:85:1c:6b: 53:36:21:d6:50:ea:66:ed:44:7e:ec:8d:a1:89:32:e1:42:d8: af:92:e5:cc:09:f2:15:89:bf:98:fc:ec:d2:ad:c3:f3:12:d6: be:7f:5f:76:e3:94:f2:96:19:96:29:eb:73:38:07:39:82:5f: 72:ab:98:e4:7b:f5:ce:61:02:9e:83:56:35:ef:7a:d3:50:8b: 15:72:cb:76:99:53:6e:e5:79:4f:b5:50:e6:71:ae:cf:e5:48: bb:7c:2e:58:9a:c6:6a:fd:6f:a7:28:b5:48:46:a0:c8:cc:b2: c7:4e:2b:8e:73:96:ec:ce:a0:59:1d:c0:4b:45:88:a1:ef:88: c7:ef:ab:df:80:31:79:72:9c:65:1a:c9:53:7c:58:e2:6d:bb: 15:46:7b:cd:a8:ad:b9:9e:de:4c:b4:35:52:d1:fc:d6:40:59: cf:af:5e:69 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt26zfU83YCgEwwT4BpeZf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzhjZjVkZjc3ZWI2NjZjMDRlZmI3ZWJiM2NhMzQwNGFkZWMzNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Hd+jXlun97TCvA7alSnctRpsj86 xMKTdagJvg7IQb+Y3EW0fDs4b9fiEOjlDJsVf6NTkgM0HcuTJi/f/dViY4fvCVXv WIpDMvnteJkFCLTHsviQ/7cK0yzHketuVjtu5zWi/e32YWjN/Q6WGIVtFZM0MFgV 0qiqXA0Mww4cGDeaZijXahoh2FD1f4JokNvLpvbgBCA0nvpqb3bitWu2JAJTjNg5 pXTNV7RNi/0KSaKLoJCVzcbTw+JfEbwHJpSWlQWK80iB+da6aK1E8d3xGkOMVd5g SyrpqE8m2Fn8qK4kWZnyQKrDiM+op6HBCal2DZPU9HkcWMg3pNTJWWuZvwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOeM9d9362ZsBO+367PKNASt7DT7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2RjN2Jk NC01YjhlLTQ5Y2UtOTRiOS0yMTFiNDM5NDcwMDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvZGM3YmQ0 LTViOGUtNDljZS05NGI5LTIxMWI0Mzk0NzAwNy8xLzU0ejEzM2ZyWm13RTc3ZnJz OG8wQkszc05Qcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDvqTANBgkqhkiG9w0BAQsFAAOCAQEAT+1wG//PoGkr JOg86Z8W22GB+qXGKf3k7/F0IWoQrWhd3aiUgRFx2wuuCLF7tTg2buq3BkLqDG6k 99hAKJYRZid8/2pm7QxgFdlMyyHkZSHCtd14FWtPhRxrUzYh1lDqZu1EfuyNoYky 4ULYr5LlzAnyFYm/mPzs0q3D8xLWvn9fduOU8pYZlinrczgHOYJfcquY5Hv1zmEC noNWNe9601CLFXLLdplTbuV5T7VQ5nGuz+VIu3wuWJrGav1vpyi1SEagyMyyx04r jnOW7M6gWR3AS0WIoe+Ix++r34AxeXKcZRrJU3xY4m27FUZ7zaituZ7eTLQ1UtH8 1kBZz69eaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:23 2026 by rpki-client