This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer File: e4jNrtKWszDz3e1AaNVTJLNQPhE.cer (raw, json) Hash identifier: 2oMrTMeFPeb8ZsOJWV3qkkzE0GSQUSZeSifOy0CcMj8= Subject key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37F328AC7A5CB288BCDC78E0962794 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6807 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f3:28:ac:7a:5c:b2:88:bc:dc:78:e0:96:27:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b88cdaed296b330f3dded4068d55324b3503e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:a1:12:e8:8f:1d:41:f4:2a:a3:de:05:3d: 6a:a0:c2:d3:5e:44:00:d3:51:c3:85:6c:c2:d7:e3: 62:67:08:7e:a9:55:e1:f7:98:e3:38:a4:f1:0d:53: 96:e4:6d:e4:4c:18:a6:06:28:d6:32:97:fd:0f:2a: 8b:3b:82:13:77:81:1e:b3:08:bb:4f:ad:68:00:e2: 7c:d4:64:f7:77:33:c5:0f:d6:27:bc:16:31:c6:4e: 0b:cb:27:7f:68:b6:dd:a4:8c:ed:cf:a8:e4:68:19: d7:ff:d9:31:b9:69:af:00:ee:ed:e7:39:81:5a:33: ea:c8:17:7e:ce:71:f8:b5:c4:ad:0f:6a:e1:c5:82: 5d:e2:c5:27:75:5b:6f:d2:bc:68:85:93:bb:46:d8: d5:df:43:55:6e:b7:55:1e:af:f3:d9:32:ff:85:51: 56:e6:25:d5:19:fc:2d:86:c9:7b:b1:5a:ff:21:d8: b7:34:4a:bd:e0:c1:38:1d:4c:e2:93:cd:90:61:35: f8:77:0b:a1:76:30:96:54:09:3c:d6:4f:b0:95:fa: ed:5d:e7:84:f6:22:3e:c2:3a:90:7b:32:fc:6c:4c: bc:88:fb:6e:78:f9:80:7f:34:92:11:b9:78:df:6b: 49:58:d1:d2:cc:67:03:a8:2e:0b:8c:09:89:f9:21: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 6807 Signature Algorithm: sha256WithRSAEncryption 5b:c5:b7:fe:3d:25:cc:ed:17:7e:ff:b0:c6:d4:78:ef:a8:fb: fe:48:82:aa:63:9b:91:46:39:72:05:14:da:c3:6a:58:d0:9c: 7c:3e:35:ce:d4:63:e3:23:74:db:d0:cc:e1:c4:0b:70:07:52: f5:b0:bf:a6:a2:4d:29:ba:8d:ad:4d:58:ed:30:9d:c1:f6:d4: ce:7d:53:0b:a8:a9:f5:c7:fe:db:b1:ef:82:fd:02:ab:4f:33: 5b:6d:a2:be:58:7f:2a:f4:46:79:a4:f2:4e:11:b5:f8:4d:7b: 52:b6:91:b0:3a:73:a8:b0:9f:e3:9c:14:89:cc:94:72:c9:30: 25:ee:bb:29:91:64:a1:ca:b2:e8:7b:76:30:95:ee:75:dc:8a: 1f:98:ce:23:c3:ef:e4:c1:71:6f:a6:2c:5f:a7:47:fd:fc:0a: de:06:14:70:2f:c4:38:46:56:35:c4:e2:3a:13:9d:13:df:1a: d2:4a:a1:f5:34:a6:17:0f:10:15:6a:f3:13:d8:aa:b8:e4:0c: c7:85:8f:34:53:34:7d:64:f5:2c:81:3d:30:58:95:af:d0:9f: 39:3d:c5:53:de:42:0f:c9:2a:df:6a:de:e0:9f:9a:df:c3:15: 59:4d:8e:c6:69:7a:6c:74:cd:ae:98:c4:9e:79:5c:07:f7:c0: c3:c3:53:27 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt+N/MorHpcsoi83HjglieUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yjg4Y2RhZWQyOTZiMzMwZjNkZGVkNDA2OGQ1NTMyNGIzNTAzZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn6hEuiPHUH0KqPeBT1qoMLTXkQA 01HDhWzC1+NiZwh+qVXh95jjOKTxDVOW5G3kTBimBijWMpf9DyqLO4ITd4Eeswi7 T61oAOJ81GT3dzPFD9YnvBYxxk4Lyyd/aLbdpIztz6jkaBnX/9kxuWmvAO7t5zmB WjPqyBd+znH4tcStD2rhxYJd4sUndVtv0rxohZO7RtjV30NVbrdVHq/z2TL/hVFW 5iXVGfwthsl7sVr/Idi3NEq94ME4HUzik82QYTX4dwuhdjCWVAk81k+wlfrtXeeE 9iI+wjqQezL8bEy8iPtuePmAfzSSEbl432tJWNHSzGcDqC4LjAmJ+SElSwIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFHuIza7SlrMw893tQGjVUySzUD4RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzdjOTlk ZS0wMmIxLTQ2ZWYtYjliMS04OWE1ZjEyZmEwMTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvN2M5OWRl LTAyYjEtNDZlZi1iOWIxLTg5YTVmMTJmYTAxOS8xL2U0ak5ydEtXc3pEejNlMUFh TlZUSkxOUVBoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAhqXMA0GCSqGSIb3DQEBCwUAA4IBAQBbxbf+PSXM7Rd+ /7DG1HjvqPv+SIKqY5uRRjlyBRTaw2pY0Jx8PjXO1GPjI3Tb0MzhxAtwB1L1sL+m ok0puo2tTVjtMJ3B9tTOfVMLqKn1x/7bse+C/QKrTzNbbaK+WH8q9EZ5pPJOEbX4 TXtStpGwOnOosJ/jnBSJzJRyyTAl7rspkWShyrLoe3Ywle513IofmM4jw+/kwXFv pixfp0f9/AreBhRwL8Q4RlY1xOI6E50T3xrSSqH1NKYXDxAVavMT2Kq45AzHhY80 UzR9ZPUsgT0wWJWv0J85PcVT3kIPySrfat7gn5rfwxVZTY7GaXpsdM2umMSeeVwH 98DDw1Mn -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:42 2026 by rpki-client