This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer File: SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer (raw, json) Hash identifier: NIZkBwPKFtwKiIm5GkYCPw4wCFfNcSuy+RRxdtV4q8o= Subject key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B4AB4670DFA822430A302350A9EBB0B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:40:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47622 AS: 49438 IP: 5.199.0.0/17 IP: 91.246.26.0/23 IP: 185.169.120.0/22 IP: 212.74.32.0/19 IP: 2a00:17f8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:4a:b4:67:0d:fa:82:24:30:a3:02:35:0a:9e:bb:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:40:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:e9:56:3b:72:44:c8:85:d2:82:72:fa:d4: 6e:c7:cf:02:65:90:f8:c3:fd:87:75:3b:d7:58:00: ee:9f:76:b8:d2:8b:cd:0c:cd:be:c5:cb:3f:19:9b: 81:73:19:a7:a9:ab:77:64:52:c1:a9:24:7d:8c:b1: f4:dd:2d:c0:b3:a8:04:67:37:25:4a:b9:02:b7:4a: 3e:ce:4f:e1:69:90:f3:18:4f:8c:dd:df:ac:2a:21: 8b:7e:32:75:24:bb:9f:8d:c3:cc:7c:fe:bf:fb:2e: 4a:7c:d1:7d:0a:e6:68:99:0b:fd:06:0e:7b:7d:4e: 9f:66:29:3f:88:93:d3:8f:65:13:83:1e:86:8d:53: 77:58:31:51:e8:c2:3f:e2:81:dd:92:6f:68:2a:89: 8b:ba:7f:f9:e2:32:b4:df:2a:62:fa:c7:60:e4:6a: 49:2d:91:b0:b6:74:59:15:7d:5d:45:b0:b3:b6:ca: 65:8c:67:ee:75:2f:ee:87:b1:da:8e:a2:69:4e:02: cc:0d:c4:cb:63:6c:64:c1:fa:52:52:82:86:08:d6: 0f:6e:51:59:a0:ea:ab:a1:6a:6b:ee:c9:91:f8:11: 72:e2:36:ff:5a:ee:1c:e8:30:46:6c:99:e8:59:be: 23:73:97:fe:04:7b:03:8a:fc:ac:9d:f5:f4:c4:c0: 00:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.0.0/17 91.246.26.0/23 185.169.120.0/22 212.74.32.0/19 IPv6: 2a00:17f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47622 49438 Signature Algorithm: sha256WithRSAEncryption 10:8d:a8:6a:0d:5f:58:51:74:e7:f7:67:31:26:17:d2:29:7b: 4e:47:a0:4e:db:d0:a6:8d:43:e2:fd:6b:26:99:74:59:a9:3d: 96:b1:1b:db:7b:5c:61:5f:0c:77:48:bb:04:29:df:88:50:9d: 02:95:84:59:b3:07:e0:a9:91:54:6d:83:7b:29:c9:b4:8a:cf: dc:c1:11:f5:bd:2c:7e:b3:60:75:a7:3c:5a:3f:67:3a:b0:96: fc:fa:c3:74:23:70:71:4c:e6:33:9a:2b:9d:c9:89:68:37:5d: 7f:ca:b0:81:a0:cd:a0:c1:fb:c7:f7:da:ef:8d:47:a1:ea:cf: c7:d5:22:2e:cf:f6:66:1d:f4:ac:08:a7:aa:0e:95:1c:d7:56: 8b:80:b5:71:3b:a6:08:ae:0a:72:08:0c:95:d9:86:8f:99:09: 91:66:27:6c:a8:8f:8e:9a:a3:d4:e4:8d:fc:4a:35:0d:55:bf: de:59:03:31:64:d5:03:cd:f2:9c:b8:c2:e7:03:91:16:a8:94: 0a:e9:ab:c5:b4:68:1b:59:6f:93:81:91:84:32:8f:f4:f1:8d: 55:21:ce:d0:a5:d1:e8:c6:63:8d:f4:c5:95:68:5d:94:e6:58: a2:5f:73:30:8b:10:60:41:77:f5:e3:02:f4:4a:16:21:e6:8c: 10:24:47:80 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt7SrRnDfqCJDCjAjUKnrsLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjA0MDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjNhY2EzYTdjNjUyYTlmYWY4ZTRlMTE5YmQyZjdiZjU0YWZkZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fzpVjtyRMiF0oJy+tRux88CZZD4 w/2HdTvXWADun3a40ovNDM2+xcs/GZuBcxmnqat3ZFLBqSR9jLH03S3As6gEZzcl SrkCt0o+zk/haZDzGE+M3d+sKiGLfjJ1JLufjcPMfP6/+y5KfNF9CuZomQv9Bg57 fU6fZik/iJPTj2UTgx6GjVN3WDFR6MI/4oHdkm9oKomLun/54jK03ypi+sdg5GpJ LZGwtnRZFX1dRbCztspljGfudS/uh7HajqJpTgLMDcTLY2xkwfpSUoKGCNYPblFZ oOqroWpr7smR+BFy4jb/Wu4c6DBGbJnoWb4jc5f+BHsDivysnfX0xMAAvwIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFEs6yjp8ZSqfr45OEZvS979Ur952MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0 Yzc3LWZkOGItNDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4 NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvNEIzQUNBM0E3QzY1 MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAME BwXHAAMEAVv2GgMEArmpeAMEBdRKIDANBAIAAjAHAwUAKgAX+DAfBggrBgEFBQcB CAEB/wQQMA6gDDAKAgMAugYCAwDBHjANBgkqhkiG9w0BAQsFAAOCAQEAEI2oag1f WFF05/dnMSYX0il7TkegTtvQpo1D4v1rJpl0Wak9lrEb23tcYV8Md0i7BCnfiFCd ApWEWbMH4KmRVG2DeynJtIrP3MER9b0sfrNgdac8Wj9nOrCW/PrDdCNwcUzmM5or ncmJaDddf8qwgaDNoMH7x/fa741HoerPx9UiLs/2Zh30rAinqg6VHNdWi4C1cTum CK4KcggMldmGj5kJkWYnbKiPjpqj1OSN/Eo1DVW/3lkDMWTVA83ynLjC5wORFqiU CumrxbRoG1lvk4GRhDKP9PGNVSHO0KXR6MZjjfTFlWhdlOZYol9zMIsQYEF39eMC 9EoWIeaMECRHgA== -----END CERTIFICATE-----Generated at Sun Jan 18 05:39:03 2026 by rpki-client