This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer (raw, json) Hash identifier: OKfNl8x+3vJ7gPpxvFMfVzge0SP/DrxXewk1fZOApWU= Subject key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E382A5C0BA6A1299F6F1054E08A67DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47157 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2a:5c:0b:a6:a1:29:9f:6f:10:54:e0:8a:67:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2f:23:17:5a:71:0d:2a:9d:c6:dc:50:7c:5e: d2:50:6f:2a:29:d0:c7:0c:01:bc:db:a0:58:e8:24: af:c8:f9:53:4b:55:90:70:54:b1:c1:f8:a6:33:04: 12:35:0a:a0:c5:2e:df:0a:2e:9a:b7:57:e7:d6:24: 34:f7:e0:bb:d3:27:1f:db:49:64:cf:e0:96:76:bb: b7:40:47:c1:f2:ae:11:bf:c6:f2:cc:6f:21:1a:ed: 8f:54:33:df:cd:08:c5:bd:fe:9b:3f:96:ec:31:0d: 94:91:d4:fc:eb:41:7f:82:74:19:39:45:6c:4f:5f: 1c:9c:b0:d0:15:18:04:c2:c7:43:01:13:55:5c:89: 58:a6:35:71:25:b7:9c:d5:8e:6f:57:9e:ca:37:4d: 70:cf:07:67:86:8c:80:10:76:f6:93:b9:8b:dd:a0: 21:49:1a:9f:55:44:b7:b7:18:6c:5a:56:4c:8d:8f: 9d:ee:e3:2f:e7:3f:5e:a4:e0:f7:dd:66:8e:cc:a9: 3b:53:57:05:d1:92:53:5a:19:f7:ad:8e:25:3f:57: 45:3a:cb:67:af:0f:47:e9:6b:22:a9:e2:0a:5f:7e: d8:9e:30:bf:c0:53:e3:58:c6:b3:e9:d4:19:8c:e1: 50:97:ee:60:6e:8b:3a:32:62:52:9e:3c:65:29:2b: 47:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 47157 Signature Algorithm: sha256WithRSAEncryption 26:97:5b:db:e4:8f:e4:ec:1e:85:6d:85:0d:21:a6:13:ac:8f: c8:ca:d8:14:d4:94:77:6e:f9:19:b1:d4:e6:c5:1a:dc:76:2e: 0c:46:d2:0c:50:77:88:fd:58:77:aa:9c:24:7f:3c:7a:87:87: 0b:63:73:d6:9d:5d:58:3b:99:7f:b2:44:35:79:48:35:04:1a: e5:2b:81:59:8d:24:95:08:8d:32:b4:af:c2:e3:19:0f:7d:b0: fb:80:f7:e9:20:26:4b:9e:01:c3:f2:ab:eb:12:66:03:21:69: 18:49:fa:a9:d6:9f:5d:f8:af:ab:d1:72:42:70:51:0f:cc:a1: de:0d:ba:72:17:d1:89:03:e8:fa:a9:ed:e3:c1:72:cb:30:50: 52:0b:92:51:e4:84:fe:fa:27:1b:c1:e8:bd:24:5d:fb:6e:df: 1c:be:b1:1d:b4:29:4d:70:81:50:65:22:7d:81:0f:b6:68:9a: ad:d2:32:a3:10:fe:63:cf:6b:88:62:b5:33:c3:29:77:b3:1c: 5f:68:02:19:99:a0:96:8a:69:ad:81:16:d5:c7:f0:b1:72:99: 08:88:cb:e7:fa:43:19:80:99:be:4f:7b:a9:32:95:9c:7e:9c: fe:43:3f:9f:46:46:6b:e7:fa:63:83:3c:90:23:9b:02:1c:11: 75:2d:f5:5e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OCpcC6ahKZ9vEFTgimfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWMwZDExYTM3ZGEzNWRiZTJmN2Y2Yjk2MTllNTU3MjYzNGUxZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC8jF1pxDSqdxtxQfF7SUG8qKdDH DAG826BY6CSvyPlTS1WQcFSxwfimMwQSNQqgxS7fCi6at1fn1iQ09+C70ycf20lk z+CWdru3QEfB8q4Rv8byzG8hGu2PVDPfzQjFvf6bP5bsMQ2UkdT860F/gnQZOUVs T18cnLDQFRgEwsdDARNVXIlYpjVxJbec1Y5vV57KN01wzwdnhoyAEHb2k7mL3aAh SRqfVUS3txhsWlZMjY+d7uMv5z9epOD33WaOzKk7U1cF0ZJTWhn3rY4lP1dFOstn rw9H6WsiqeIKX37YnjC/wFPjWMaz6dQZjOFQl+5gbos6MmJSnjxlKStHuQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJrA0Ro32jXb4vf2uWGeVXJjTh9iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwL2Y4NzE0 MC1iYzJjLTRmM2YtODNmZC1hM2Q0NTVkMzQ4MDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvZjg3MTQw LWJjMmMtNGYzZi04M2ZkLWEzZDQ1NWQzNDgwOS8xL21zRFJHamZhTmR2aTlfYTVZ WjVWY21OT0gySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC4NTANBgkqhkiG9w0BAQsFAAOCAQEAJpdb2+SP5Owe hW2FDSGmE6yPyMrYFNSUd275GbHU5sUa3HYuDEbSDFB3iP1Yd6qcJH88eoeHC2Nz 1p1dWDuZf7JENXlINQQa5SuBWY0klQiNMrSvwuMZD32w+4D36SAmS54Bw/Kr6xJm AyFpGEn6qdafXfivq9FyQnBRD8yh3g26chfRiQPo+qnt48FyyzBQUguSUeSE/von G8HovSRd+27fHL6xHbQpTXCBUGUifYEPtmiardIyoxD+Y89riGK1M8Mpd7McX2gC GZmglopprYEW1cfwsXKZCIjL5/pDGYCZvk97qTKVnH6c/kM/n0ZGa+f6Y4M8kCOb AhwRdS31Xg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:57 2026 by rpki-client