This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer File: xmCFijitXhG3sYk5KIO8g-trNh0.cer (raw, json) Hash identifier: JUjRx5BJkl8ctaGwyaL33oJHF3amYxv7utEAtMgoTns= Subject key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A349F6BFD7F4A0C7B541F3964DC350 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 64475 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:49:f6:bf:d7:f4:a0:c7:b5:41:f3:96:4d:c3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c660858a38ad5e11b7b189392883bc83eb6b361d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:f1:66:f4:70:a3:60:55:af:5d:f4:a5:3c: f6:88:f1:b5:bd:6d:63:b0:af:c8:55:f8:05:2e:d0: 37:57:36:10:a8:5b:f2:a2:33:8c:26:5a:20:f4:55: 18:3a:18:31:d5:03:47:42:81:fd:01:15:ef:0f:4a: 15:cc:c9:e3:a6:2e:a0:95:4d:2d:af:b9:72:3d:ac: 27:28:13:75:85:06:47:c3:0d:3f:0e:dd:c9:48:7d: 3d:3e:36:61:a4:8c:30:50:a9:45:57:2c:44:34:f3: f9:e2:af:8d:84:e2:8b:0c:97:09:4b:33:96:25:e1: 1e:ee:52:57:b1:4e:03:ee:9b:cc:19:45:f3:4b:95: 53:10:00:ef:95:d4:9c:f6:ac:32:bc:e5:f5:5a:92: c1:0b:f0:59:76:ad:91:c9:ef:b0:ec:08:87:04:a1: a8:f9:ed:a7:d0:54:df:99:df:4e:05:8b:0b:05:3f: b8:45:93:8c:ff:e1:fb:45:23:37:7b:f5:d0:ab:cf: 01:a2:69:13:0d:71:de:ec:0a:52:12:d8:87:1b:7f: b5:12:d5:bc:d4:99:db:a0:a8:cb:63:1a:37:f2:a1: 80:73:24:8d:42:de:f6:5c:43:e0:7e:67:b6:32:c8: c7:9d:ab:ae:7a:07:16:17:e6:62:87:c0:22:8c:be: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 64475 Signature Algorithm: sha256WithRSAEncryption ae:06:45:e6:5b:94:e5:16:e1:46:82:1d:3d:ee:e2:8f:87:2c: f3:69:c3:41:48:f3:99:a2:e1:f1:5a:63:5a:64:65:42:ef:a3: eb:f1:e0:f6:4c:e9:b5:b3:cf:3f:ab:f2:78:e1:ca:79:70:04: dd:14:6e:14:ec:42:d2:0c:26:1a:a2:e7:1d:a2:9e:a9:64:4f: 0b:7a:49:97:e0:30:6b:7f:12:ae:6c:77:e7:4a:b0:7f:4e:55: 56:ca:47:49:b3:06:cc:35:82:5a:cc:8c:9d:72:e4:18:4f:4c: 25:44:fd:95:34:27:4c:91:0e:e7:2d:52:45:a6:a1:1b:24:0d: f8:70:d9:df:d5:8d:41:21:0c:ed:53:8d:e4:d4:ce:cc:46:d7: 91:17:d3:27:0f:eb:e0:ab:6b:d8:5d:b9:71:37:0f:a7:a6:e8: 6d:42:df:af:70:a0:b4:8c:70:66:d1:84:62:c3:ee:fa:4a:ea: 71:fc:67:16:4b:c6:59:1a:76:ac:f2:51:aa:cd:61:2e:ad:e6: bc:88:02:88:1c:4c:6b:76:b7:e0:82:a9:7f:97:c4:68:a7:4d: 76:5a:ad:a9:11:99:07:1e:7f:99:a8:03:6d:a9:6d:03:86:80: c4:89:06:5e:81:0f:3c:d9:b0:c5:1a:97:6f:d9:4c:0f:91:28: 79:d9:4d:70 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4o0n2v9f0oMe1QfOWTcNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjYwODU4YTM4YWQ1ZTExYjdiMTg5MzkyODgzYmM4M2ViNmIzNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WPxZvRwo2BVr130pTz2iPG1vW1j sK/IVfgFLtA3VzYQqFvyojOMJlog9FUYOhgx1QNHQoH9ARXvD0oVzMnjpi6glU0t r7lyPawnKBN1hQZHww0/Dt3JSH09PjZhpIwwUKlFVyxENPP54q+NhOKLDJcJSzOW JeEe7lJXsU4D7pvMGUXzS5VTEADvldSc9qwyvOX1WpLBC/BZdq2Rye+w7AiHBKGo +e2n0FTfmd9OBYsLBT+4RZOM/+H7RSM3e/XQq88BomkTDXHe7ApSEtiHG3+1EtW8 1JnboKjLYxo38qGAcySNQt72XEPgfme2MsjHnauuegcWF+Zih8AijL7/EQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMZghYo4rV4Rt7GJOSiDvIPrazYdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2RiYjVl NC1jNTU4LTRlZmUtOWM5YS1mYTVkN2I0OGFhZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZGJiNWU0 LWM1NTgtNGVmZS05YzlhLWZhNWQ3YjQ4YWFlOS8xL3htQ0Zpaml0WGhHM3NZazVL SU84Zy10ck5oMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD72zANBgkqhkiG9w0BAQsFAAOCAQEArgZF5luU5Rbh RoIdPe7ij4cs82nDQUjzmaLh8VpjWmRlQu+j6/Hg9kzptbPPP6vyeOHKeXAE3RRu FOxC0gwmGqLnHaKeqWRPC3pJl+Awa38Srmx350qwf05VVspHSbMGzDWCWsyMnXLk GE9MJUT9lTQnTJEO5y1SRaahGyQN+HDZ39WNQSEM7VON5NTOzEbXkRfTJw/r4Ktr 2F25cTcPp6bobULfr3CgtIxwZtGEYsPu+krqcfxnFkvGWRp2rPJRqs1hLq3mvIgC iBxMa3a34IKpf5fEaKdNdlqtqRGZBx5/magDbaltA4aAxIkGXoEPPNmwxRqXb9lM D5EoedlNcA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:38 2026 by rpki-client