This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer File: n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer (raw, json) Hash identifier: 7vqDOqUUXcpjqd+C/mRw0SYIido4YNJSuHU6qaI/mjo= Subject key identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2A53AEF3F21F8B2381CF06027BADA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214713 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a5:3a:ef:3f:21:f8:b2:38:1c:f0:60:27:ba:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:22:3b:5b:6e:2d:b4:4f:09:25:f6:82:41: e1:76:73:b0:c8:28:05:fe:3f:36:72:a3:50:13:24: 96:b9:5c:88:44:b4:c1:33:c8:04:d8:ea:7d:3c:17: 6d:4d:df:28:56:43:e7:6a:5a:f0:66:bd:a8:eb:87: f2:02:4c:91:df:3a:c4:c2:7b:20:b4:fd:cc:88:72: 77:8e:c0:d3:30:d8:7b:65:2c:bf:cb:5a:58:bb:d0: 76:ac:85:46:4f:1f:ec:b9:85:4f:49:54:cd:cc:cc: 2e:f6:1c:eb:fd:10:8a:8d:63:5d:55:ab:ec:08:ba: b9:c2:47:e6:b8:a1:7f:30:d6:63:fc:6b:5e:00:1c: 06:b4:90:6e:bd:f5:e9:7e:ce:9d:a7:07:08:b6:b4: a4:5f:9c:cf:5d:8b:7a:5b:90:65:76:42:0c:08:8e: a1:5a:81:ef:18:12:83:d6:1b:9c:e7:82:67:53:dd: 64:29:09:7b:14:e0:f2:35:97:7d:18:da:95:cf:c4: 16:93:f2:bd:ad:72:bc:29:8c:7b:f4:c9:d4:e9:f7: 71:ba:f3:f3:ba:fa:e5:2c:4b:51:65:f9:a6:4f:c0: 08:59:2d:ec:97:45:96:ca:d9:51:84:86:7b:b4:f0: 71:36:f5:c0:f9:34:da:b4:a3:0d:ac:d8:02:5e:59: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214713 Signature Algorithm: sha256WithRSAEncryption 59:bd:68:3a:b5:f9:d2:c5:de:07:99:34:4c:9a:f8:fe:15:b7: bc:03:cb:cd:af:61:3c:98:31:98:19:ea:0b:23:f9:fe:97:73: f6:b1:d0:08:84:8b:d0:eb:a0:2c:87:0f:bf:1d:1b:28:30:56: dd:d8:8e:16:3f:08:72:25:f4:81:45:62:2f:e7:c0:0a:8e:38: 3d:58:ea:c8:88:a8:57:bb:00:90:82:86:78:d8:4f:5f:56:6a: c7:d9:30:d7:50:f1:4a:04:14:9c:f6:4a:5d:52:58:34:55:fc: 5b:aa:94:ba:37:87:a3:b7:dd:52:04:a4:34:55:c9:af:58:0e: fa:cc:69:03:75:87:4c:6d:80:cd:c7:73:37:fe:92:96:79:bd: 18:23:3e:f7:e7:99:95:e6:c5:bb:54:e2:75:26:bf:52:f4:30: 06:65:2f:98:a9:c1:53:7b:68:56:ef:38:de:ad:e7:ee:a7:15: 8f:14:ee:bd:97:72:56:2b:d0:ed:81:c2:d6:81:6a:46:82:c6: 96:af:e8:2a:57:aa:bb:d3:07:46:a7:b3:f1:a8:02:30:a6:84: d7:05:74:a7:82:09:4f:de:9a:d9:37:3f:9f:47:7f:7c:ea:3a: f1:a4:b8:e0:43:b5:fa:00:8b:f2:f0:98:34:81:13:62:13:7c: 53:14:c5:2d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4oqU67z8h+LI4HPBgJ7raMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmZlMjZmN2QyMDI5Y2YxOTMzMTM3MDFlYWMzZmM5YmRiYjg5NGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmMiO1tuLbRPCSX2gkHhdnOwyCgF /j82cqNQEySWuVyIRLTBM8gE2Op9PBdtTd8oVkPnalrwZr2o64fyAkyR3zrEwnsg tP3MiHJ3jsDTMNh7ZSy/y1pYu9B2rIVGTx/suYVPSVTNzMwu9hzr/RCKjWNdVavs CLq5wkfmuKF/MNZj/GteABwGtJBuvfXpfs6dpwcItrSkX5zPXYt6W5BldkIMCI6h WoHvGBKD1huc54JnU91kKQl7FODyNZd9GNqVz8QWk/K9rXK8KYx79MnU6fdxuvPz uvrlLEtRZfmmT8AIWS3sl0WWytlRhIZ7tPBxNvXA+TTatKMNrNgCXllJzwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJ/+JvfSApzxkzE3AerD/JvbuJTUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzA1OWMy YS1lOTM0LTRlNTItODc4OS0yYWNhYzIzZTc1OWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvMDU5YzJh LWU5MzQtNGU1Mi04Nzg5LTJhY2FjMjNlNzU5ZC8xL25fNG05OUlDblBHVE1UY0I2 c1A4bTl1NGxOUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNGuTANBgkqhkiG9w0BAQsFAAOCAQEAWb1oOrX50sXe B5k0TJr4/hW3vAPLza9hPJgxmBnqCyP5/pdz9rHQCISL0OugLIcPvx0bKDBW3diO Fj8IciX0gUViL+fACo44PVjqyIioV7sAkIKGeNhPX1Zqx9kw11DxSgQUnPZKXVJY NFX8W6qUujeHo7fdUgSkNFXJr1gO+sxpA3WHTG2AzcdzN/6Slnm9GCM+9+eZlebF u1TidSa/UvQwBmUvmKnBU3toVu843q3n7qcVjxTuvZdyVivQ7YHC1oFqRoLGlq/o Klequ9MHRqez8agCMKaE1wV0p4IJT96a2Tc/n0d/fOo68aS44EO1+gCL8vCYNIET YhN8UxTFLQ== -----END CERTIFICATE-----Generated at Tue Jan 27 11:34:24 2026 by rpki-client