This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer File: 40Y1lMN3zViH3pB4tLLozcTTrls.cer (raw, json) Hash identifier: 7e7AMpuAcBl58Yww0g4Y+DR5wJ6IaloxYC200GivVPA= Subject key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C74744F0D5308835AA236C010FFE38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201647 IP: 2a14:5700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:47:44:f0:d5:30:88:35:aa:23:6c:01:0f:fe:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:f6:8d:7d:e6:5c:fc:1a:7a:7c:f9:6c:74: 3a:67:81:84:6b:8a:e6:4c:98:8f:d8:f7:51:15:29: 4f:04:04:46:60:be:b4:05:9f:af:1a:00:c7:91:84: ff:66:6c:a8:12:e7:bd:39:f5:f5:4c:a8:84:f4:fb: 74:85:06:ea:91:70:f0:4b:4c:db:92:54:65:4e:28: 79:af:5f:0a:2e:ec:36:ef:f0:b2:61:b5:59:86:31: 6b:c7:93:ec:ad:66:16:da:c5:28:8b:ee:91:11:69: 51:71:f7:dc:bb:c6:0b:59:dd:de:67:12:08:cc:f7: 85:a6:1d:3d:de:99:fd:c9:c5:a1:1e:a5:24:6c:ac: dc:b5:0f:c7:e9:06:e6:9c:08:c2:58:51:0d:9a:00: 1b:a9:ef:5e:09:66:7e:9b:db:f1:49:65:aa:28:96: 0e:c2:1f:db:b2:80:b3:0a:7f:b4:5c:67:3d:7b:01: eb:5a:50:7c:5c:85:ed:74:1d:c1:38:ca:32:18:08: 5d:12:66:6f:23:5a:13:6a:93:f5:0a:be:5c:72:eb: 7a:35:3d:03:70:2e:16:d6:69:d9:b1:e4:b9:37:4c: cf:36:9f:f2:a9:d0:41:07:6b:ff:a9:04:82:d2:79: ce:8e:ef:9b:2a:05:06:e3:31:a1:c6:ad:ff:11:77: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:5700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201647 Signature Algorithm: sha256WithRSAEncryption 09:d5:51:e1:54:ef:7f:c0:61:d2:24:84:ac:a3:67:5a:bd:14: b5:d6:d1:2c:15:d8:5c:5c:11:af:4d:f2:99:e4:69:cf:80:1c: e6:76:f8:bc:7c:ca:35:f8:e3:70:7b:8e:75:52:a6:d9:c8:e2: fe:27:5c:66:08:fa:d9:5e:c9:81:44:d0:23:45:b3:e7:e8:ca: b4:b2:a0:49:80:71:d6:96:25:8f:33:38:ff:36:d7:85:a4:3b: f9:56:5a:f0:13:25:d1:2c:c0:18:4d:54:7d:96:0a:64:18:ba: c8:8f:06:ea:ab:81:3f:26:30:be:07:73:e6:4f:0c:a9:18:f0: bf:6a:46:04:c1:8a:36:3a:a9:42:d7:b2:ca:08:ef:eb:17:8c: 65:b0:49:7a:af:88:5c:b6:10:f1:dc:cf:38:56:89:50:bb:14: 81:ca:18:b3:f1:87:84:bb:f0:0c:f4:df:18:ba:20:4c:dd:4c: da:a8:0a:3f:c5:8b:b5:87:ca:05:bb:d9:2e:00:75:12:c6:5b: 04:b3:1a:f8:2d:45:e9:38:ac:3a:e5:10:99:bb:c7:c0:4f:e8: 0f:3e:ca:82:f9:c3:9c:02:5f:fe:26:09:2f:2b:e7:cd:9b:70: 33:1d:90:cd:c2:63:da:da:66:39:e2:1a:b8:c4:fc:f6:1c:3d: 5d:b2:85:ba -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt3x0dE8NUwiDWqI2wBD/44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzQ2MzU5NGMzNzdjZDU4ODdkZTkwNzhiNGIyZThjZGM0ZDNhZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpP2jX3mXPwaenz5bHQ6Z4GEa4rm TJiP2PdRFSlPBARGYL60BZ+vGgDHkYT/ZmyoEue9OfX1TKiE9Pt0hQbqkXDwS0zb klRlTih5r18KLuw27/CyYbVZhjFrx5PsrWYW2sUoi+6REWlRcffcu8YLWd3eZxII zPeFph093pn9ycWhHqUkbKzctQ/H6QbmnAjCWFENmgAbqe9eCWZ+m9vxSWWqKJYO wh/bsoCzCn+0XGc9ewHrWlB8XIXtdB3BOMoyGAhdEmZvI1oTapP1Cr5ccut6NT0D cC4W1mnZseS5N0zPNp/yqdBBB2v/qQSC0nnOju+bKgUG4zGhxq3/EXdWRwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFONGNZTDd81Yh96QeLSy6M3E065bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxL2M1NzFj ZS1lZjNhLTRhMjgtYjViOC1mZWEyMzZmNTQwMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvYzU3MWNl LWVmM2EtNGEyOC1iNWI4LWZlYTIzNmY1NDAzNC8xLzQwWTFsTU4zelZpSDNwQjR0 TExvemNUVHJscy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhRXADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDE68wDQYJKoZIhvcNAQELBQADggEBAAnVUeFU73/AYdIkhKyjZ1q9FLXW0SwV 2FxcEa9N8pnkac+AHOZ2+Lx8yjX443B7jnVSptnI4v4nXGYI+tleyYFE0CNFs+fo yrSyoEmAcdaWJY8zOP8214WkO/lWWvATJdEswBhNVH2WCmQYusiPBuqrgT8mML4H c+ZPDKkY8L9qRgTBijY6qULXssoI7+sXjGWwSXqviFy2EPHczzhWiVC7FIHKGLPx h4S78Az03xi6IEzdTNqoCj/Fi7WHygW72S4AdRLGWwSzGvgtRek4rDrlEJm7x8BP 6A8+yoL5w5wCX/4mCS8r582bcDMdkM3CY9raZjniGrjE/PYcPV2yhbo= -----END CERTIFICATE-----Generated at Wed Jan 7 10:23:18 2026 by rpki-client