This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer File: sk_loZnHVDnFJkkEVLSr1UAhN6k.cer (raw, json) Hash identifier: lcf4Z4Xjmv4xM1c18CKevoY9gySbjcvn64T0fNqECO0= Subject key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BEC2BBBF7040198A7A04E636998C26CC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 23 Jan 2026 18:44:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216127 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:2b:bb:f7:04:01:98:a7:a0:4e:63:69:98:c2:6c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 23 18:44:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b24fe5a199c75439c526490454b4abd5402137a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:ae:5a:eb:3c:92:82:9d:05:4d:74:a3:d8: 9b:d1:a7:e7:2b:eb:a8:ae:b3:e0:c9:a7:1b:81:95: d0:3c:3d:14:c4:a3:fb:9b:bf:61:40:b4:ff:c0:69: 3f:ee:b6:a1:4d:1e:0b:45:f4:fe:1a:da:a4:12:4a: de:7e:d6:48:28:6d:3b:88:57:27:91:12:60:1b:88: d5:38:a0:ab:7d:1e:24:49:c4:0a:79:1e:88:ef:2c: 53:6e:ba:de:9d:a5:cb:ef:90:cf:da:b7:d2:74:96: ab:c6:60:09:00:1a:13:bc:64:f5:71:d9:84:f9:0f: 92:17:e4:75:3f:ae:a4:27:74:ed:a3:59:b4:0a:da: 80:d0:ba:67:36:09:87:d1:00:b1:e8:89:0c:37:c7: 89:ff:1e:25:b3:c4:40:97:eb:ce:36:17:d4:1d:21: 1d:49:53:1a:9a:d5:70:7a:4c:df:c0:0b:f6:37:81: a6:08:1d:e7:46:c6:ed:73:6e:80:53:16:4d:cc:26: ef:4e:d2:35:57:7a:6f:c7:e8:f0:f1:67:04:a3:af: 0e:4a:af:05:c5:16:85:da:e5:3b:58:29:ef:17:08: 4f:9a:85:de:46:12:d4:6c:a0:cb:a2:00:62:84:23: 22:64:21:f8:1a:4d:32:2d:3d:94:ee:c2:e5:ac:ba: 85:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216127 Signature Algorithm: sha256WithRSAEncryption 5e:81:56:a2:38:d6:8b:14:ff:af:9b:7b:7a:e3:c2:27:b1:03: 13:d9:78:c4:a5:00:32:d3:32:99:2c:a5:ac:de:cf:d1:6a:35: c4:63:55:c3:e4:5b:b7:bb:24:31:55:0e:cc:87:49:39:93:42: ad:98:09:9b:1f:50:74:e1:5d:8e:e4:55:2d:60:86:20:b6:5e: c0:4b:50:94:7c:5f:cf:93:7a:df:84:83:25:9c:03:ea:74:90: 00:d5:de:6a:6d:b7:0c:a2:bb:cd:e8:25:20:b3:50:b6:bd:ce: 76:e4:a5:00:55:ce:8f:fc:0e:77:66:fe:03:7a:8a:60:d6:4f: 08:da:d1:c5:d3:81:82:2d:91:8e:22:45:7b:28:4f:06:d6:3e: 11:99:8d:70:df:a4:0d:2b:c8:d6:79:ac:e0:f7:bb:e4:75:a6: 06:1d:37:9a:35:a9:df:eb:9b:96:75:fd:30:a9:ec:8c:57:ba: 0e:04:84:af:a6:ed:2c:a9:84:0d:20:a9:eb:74:80:22:5f:c8: 2a:07:03:86:5c:ec:61:16:9b:87:70:a2:71:3b:f7:18:65:02: 61:35:74:70:d1:69:fa:8b:5a:4e:9b:f8:07:82:8e:e0:d3:21: e3:d5:06:fb:7b:08:d0:70:43:e1:68:9f:c0:fc:9b:7b:4b:0f: ef:d7:b7:93 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZvsK7v3BAGYp6BOY2mYwmzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIzMTg0NDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjRmZTVhMTk5Yzc1NDM5YzUyNjQ5MDQ1NGI0YWJkNTQwMjEzN2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h+uWus8koKdBU10o9ib0afnK+uo rrPgyacbgZXQPD0UxKP7m79hQLT/wGk/7rahTR4LRfT+GtqkEkreftZIKG07iFcn kRJgG4jVOKCrfR4kScQKeR6I7yxTbrrenaXL75DP2rfSdJarxmAJABoTvGT1cdmE +Q+SF+R1P66kJ3Tto1m0CtqA0LpnNgmH0QCx6IkMN8eJ/x4ls8RAl+vONhfUHSEd SVMamtVwekzfwAv2N4GmCB3nRsbtc26AUxZNzCbvTtI1V3pvx+jw8WcEo68OSq8F xRaF2uU7WCnvFwhPmoXeRhLUbKDLogBihCMiZCH4Gk0yLT2U7sLlrLqFhwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLJP5aGZx1Q5xSZJBFS0q9VAITepMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzZkNGYy Yi1iN2IxLTQxNjAtOGRiNS1jMTk5ZGNhZjVhMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNmQ0ZjJi LWI3YjEtNDE2MC04ZGI1LWMxOTlkY2FmNWExMy8xL3NrX2xvWm5IVkRuRkpra0VW TFNyMVVBaE42ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMPzANBgkqhkiG9w0BAQsFAAOCAQEAXoFWojjWixT/ r5t7euPCJ7EDE9l4xKUAMtMymSylrN7P0Wo1xGNVw+Rbt7skMVUOzIdJOZNCrZgJ mx9QdOFdjuRVLWCGILZewEtQlHxfz5N634SDJZwD6nSQANXeam23DKK7zeglILNQ tr3OduSlAFXOj/wOd2b+A3qKYNZPCNrRxdOBgi2RjiJFeyhPBtY+EZmNcN+kDSvI 1nms4Pe75HWmBh03mjWp3+ublnX9MKnsjFe6DgSEr6btLKmEDSCp63SAIl/IKgcD hlzsYRabh3CicTv3GGUCYTV0cNFp+otaTpv4B4KO4NMh49UG+3sI0HBD4WifwPyb e0sP79e3kw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:15 2026 by rpki-client