This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer File: sdMEmrkLczFPKt_K1jkzbZMgs14.cer (raw, json) Hash identifier: WMgJm81NvO2qOANVc6LHCXPaz7w/m790wYhz5p5g7rY= Subject key identifier: B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A34B1DDCCD94617A03C8A52C41ABBB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214900 AS: 215649 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4b:1d:dc:cd:94:61:7a:03:c8:a5:2c:41:ab:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1d3049ab90b73314f2adfcad639336d9320b35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:1c:86:f5:84:e3:5b:f0:a2:9e:f2:07:16: 9e:e6:d9:e1:59:4a:a0:14:46:69:3e:a8:94:2f:7e: 19:3f:ca:e8:53:68:01:14:8e:e3:bf:8e:c5:e9:3d: 26:a8:cc:77:5a:a8:95:80:08:20:71:42:66:3a:0f: 5e:59:d8:15:a9:2a:64:54:a1:46:51:a6:b3:91:17: 02:32:f1:18:a2:3a:95:51:13:90:dd:a6:ef:e0:32: 65:4c:11:f7:d5:c2:4a:ce:98:c9:b1:36:e8:5a:91: 6f:04:3e:fe:dd:0b:8d:9d:75:74:c5:00:0c:ce:51: 59:d6:c7:9e:6e:d0:3a:1c:87:b4:64:a7:fc:18:a6: 5a:17:fa:95:00:66:d2:22:a3:2c:34:02:2c:65:44: 5e:86:f9:3f:49:64:b7:60:b1:8c:a4:5a:1d:8b:d1: d9:eb:77:b8:dc:3d:33:a3:73:c7:5e:27:f3:a6:07: f0:e2:4e:23:ec:73:91:b1:8a:c2:98:ed:7b:ab:ac: aa:66:c3:82:de:f0:5c:f9:f7:72:a9:fe:88:37:65: 87:30:e4:29:d0:ec:0a:44:9f:dd:df:cc:a0:fd:3c: 58:8f:04:35:cb:52:f4:85:18:f3:7a:d3:3f:9e:46: f2:52:af:09:bb:a5:3c:7c:8c:ed:d7:23:06:cc:f2: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214900 215649 Signature Algorithm: sha256WithRSAEncryption 87:8f:c8:20:2d:54:02:00:ab:b7:00:3a:f5:46:e0:a6:36:5f: 7b:b5:54:80:ce:31:fa:f8:42:44:31:bd:e7:3e:ea:7b:e7:b3: 4e:99:ec:c9:59:41:ea:13:2c:d4:9a:37:5b:ae:ef:c7:8b:72: 00:89:7d:0e:49:e7:79:67:ab:2c:68:fe:c0:5d:70:30:62:64: 0c:d2:5d:07:8c:01:6f:95:8e:e1:87:b4:c5:0f:4d:1d:7f:93: cd:86:2d:3f:3a:30:17:e5:80:cb:da:0d:6e:55:df:22:58:a1: f9:db:8a:bd:d1:1e:01:6c:83:85:e6:5d:a8:fe:89:cc:10:8c: 01:53:95:60:9f:9a:82:c5:fc:f9:62:70:48:af:20:a9:79:fc: aa:b6:78:0b:d4:88:88:56:27:23:a5:95:1e:e0:f6:dd:4d:26: 57:d7:86:13:19:f0:98:dd:f0:bf:ae:59:c8:5f:36:b6:3e:b9: f0:38:46:14:02:ca:46:de:f0:35:e5:34:0e:44:68:91:8e:c9: 51:b2:72:50:f9:c9:36:b3:33:15:ff:9b:d1:dd:d2:dd:a5:83: 74:c4:2a:24:ae:df:b8:dd:21:d1:ea:67:e2:3c:c9:95:2e:2b: 3e:a0:2f:68:38:db:03:6d:17:9d:7f:11:42:bc:0c:fc:57:f9: 18:d3:53:9f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4o0sd3M2UYXoDyKUsQau7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWQzMDQ5YWI5MGI3MzMxNGYyYWRmY2FkNjM5MzM2ZDkzMjBiMzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyekchvWE41vwop7yBxae5tnhWUqg FEZpPqiUL34ZP8roU2gBFI7jv47F6T0mqMx3WqiVgAggcUJmOg9eWdgVqSpkVKFG UaazkRcCMvEYojqVUROQ3abv4DJlTBH31cJKzpjJsTboWpFvBD7+3QuNnXV0xQAM zlFZ1seebtA6HIe0ZKf8GKZaF/qVAGbSIqMsNAIsZURehvk/SWS3YLGMpFodi9HZ 63e43D0zo3PHXifzpgfw4k4j7HORsYrCmO17q6yqZsOC3vBc+fdyqf6IN2WHMOQp 0OwKRJ/d38yg/TxYjwQ1y1L0hRjzetM/nkbyUq8Ju6U8fIzt1yMGzPJB9wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLHTBJq5C3MxTyrfytY5M22TILNeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzgwYTZk YzUzLWIyMGQtNDUzYS1iN2U1LTNlMDZlZjQyYmQyNi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODBh NmRjNTMtYjIwZC00NTNhLWI3ZTUtM2UwNmVmNDJiZDI2LzAvQjFEMzA0OUFCOTBC NzMzMTRGMkFERkNBRDYzOTMzNkQ5MzIwQjM1RS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDR3QC AwNKYTANBgkqhkiG9w0BAQsFAAOCAQEAh4/IIC1UAgCrtwA69UbgpjZfe7VUgM4x +vhCRDG95z7qe+ezTpnsyVlB6hMs1Jo3W67vx4tyAIl9DknneWerLGj+wF1wMGJk DNJdB4wBb5WO4Ye0xQ9NHX+TzYYtPzowF+WAy9oNblXfIlih+duKvdEeAWyDheZd qP6JzBCMAVOVYJ+agsX8+WJwSK8gqXn8qrZ4C9SIiFYnI6WVHuD23U0mV9eGExnw mN3wv65ZyF82tj658DhGFALKRt7wNeU0DkRokY7JUbJyUPnJNrMzFf+b0d3S3aWD dMQqJK7fuN0h0epn4jzJlS4rPqAvaDjbA20XnX8RQrwM/Ff5GNNTnw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:27 2026 by rpki-client