This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer File: xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer (raw, json) Hash identifier: jKglVJ7ihCpePpsKpakVmAfad5TY0D64fe5yH1i5Ccc= Subject key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ED3CE82A27714149D14D6F44B018F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214723 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d3:ce:82:a2:77:14:14:9d:14:d6:f4:4b:01:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:5a:23:64:52:36:ab:36:87:96:2f:11:02: 7f:eb:f5:e1:05:3b:68:3e:fc:0c:4a:03:ef:3b:93: e3:51:fb:61:59:32:70:ae:77:a6:30:02:eb:2c:e0: cc:40:0b:20:bd:d6:6b:a5:fa:3f:cf:22:a6:17:c7: 78:78:4b:21:4d:3d:bb:23:57:95:9c:e1:02:0a:71: c1:89:c6:6a:20:bf:bd:1c:06:52:ff:30:a8:54:25: c7:3a:4a:6c:88:6e:95:e3:60:4d:0b:fc:b7:19:b9: aa:6d:45:3e:cb:89:2a:39:78:c4:60:b9:3a:3b:12: b2:18:0a:4e:3b:20:c2:04:aa:1a:a5:80:d2:44:08: 59:bd:0c:ca:21:4e:6c:38:f7:ff:b7:ea:9b:8d:3b: 0e:20:24:24:ec:f0:53:52:aa:bd:34:90:5f:cb:f1: af:f6:be:06:59:86:9e:9e:45:51:11:7f:00:f9:75: 11:93:9f:f3:0e:25:20:f8:79:4e:1a:09:e5:7e:2b: b0:16:9d:a0:19:b2:c0:f3:80:96:4a:51:64:1d:f7: 0a:83:4a:07:4b:fb:39:d5:67:8c:b7:03:d4:bf:e5: 99:f9:32:96:2f:9e:06:07:6f:13:f6:0f:92:10:e4: 1e:50:92:e7:b0:58:f5:06:4f:24:2f:ef:25:8a:77: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214723 Signature Algorithm: sha256WithRSAEncryption 88:e9:a3:ba:b8:02:82:c7:71:e0:c9:d5:29:8f:44:e6:c1:e7: 00:dd:07:fd:8e:31:15:1b:c9:15:77:e5:9e:3b:e6:90:c2:2a: 30:1f:26:f7:49:2b:99:17:4c:08:60:a1:5b:60:6e:ac:36:65: 71:3f:d2:c2:95:13:37:f4:bd:ea:9d:57:c5:1b:d6:5e:41:fa: c1:98:9d:60:7d:c6:ec:dd:12:bd:17:bf:35:20:cb:99:7d:3a: f2:e7:60:e6:40:4d:66:fd:01:06:7c:67:2e:d7:09:ea:51:04: ac:c8:3f:90:22:76:5c:17:9b:39:31:5a:0c:5e:8d:6d:05:e5: 8b:56:de:34:c3:34:29:95:74:31:08:46:7e:c3:8a:03:cd:4e: 60:87:7c:83:90:10:8f:34:03:3d:d7:d7:7f:97:f0:fd:18:e2: 0e:a6:c4:27:db:4f:be:5d:76:dd:1a:c7:23:06:0a:f4:a5:86: 89:78:e9:b9:32:26:da:b2:02:78:e8:81:ae:50:56:49:0e:5a: e5:87:03:b6:48:9f:9c:fe:eb:f0:8b:6b:af:72:00:2f:37:59: 9a:b6:7b:22:9a:cb:cd:a2:7b:91:58:b6:82:e3:5b:ed:3d:1d: fa:fd:18:a9:6c:49:42:dc:7c:56:ba:fa:da:39:4d:af:c5:c1: c6:5e:66:42 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt5ftPOgqJ3FBSdFNb0SwGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGNhZDBlZmNiZTMwNWI0NDk0ZWQyNzQ3YmI0ZjgyZjQzYWM4YzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOhaI2RSNqs2h5YvEQJ/6/XhBTto PvwMSgPvO5PjUfthWTJwrnemMALrLODMQAsgvdZrpfo/zyKmF8d4eEshTT27I1eV nOECCnHBicZqIL+9HAZS/zCoVCXHOkpsiG6V42BNC/y3GbmqbUU+y4kqOXjEYLk6 OxKyGApOOyDCBKoapYDSRAhZvQzKIU5sOPf/t+qbjTsOICQk7PBTUqq9NJBfy/Gv 9r4GWYaenkVREX8A+XURk5/zDiUg+HlOGgnlfiuwFp2gGbLA84CWSlFkHfcKg0oH S/s51WeMtwPUv+WZ+TKWL54GB28T9g+SEOQeUJLnsFj1Bk8kL+8line3ZwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFMTK0O/L4wW0SU7SdHu0+C9DrIyBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q3ZTQ1 OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDdl NDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4M2U3LzAvQzRDQUQwRUZDQkUz MDVCNDQ5NEVEMjc0N0JCNEY4MkY0M0FDOEM4MS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRsMw DQYJKoZIhvcNAQELBQADggEBAIjpo7q4AoLHceDJ1SmPRObB5wDdB/2OMRUbyRV3 5Z475pDCKjAfJvdJK5kXTAhgoVtgbqw2ZXE/0sKVEzf0veqdV8Ub1l5B+sGYnWB9 xuzdEr0XvzUgy5l9OvLnYOZATWb9AQZ8Zy7XCepRBKzIP5AidlwXmzkxWgxejW0F 5YtW3jTDNCmVdDEIRn7DigPNTmCHfIOQEI80Az3X13+X8P0Y4g6mxCfbT75ddt0a xyMGCvSlhol46bkyJtqyAnjoga5QVkkOWuWHA7ZIn5z+6/CLa69yAC83WZq2eyKa y82ie5FYtoLjW+09Hfr9GKlsSULcfFa6+to5Ta/FwcZeZkI= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:05 2026 by rpki-client