This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer File: 484GnfxbYIh21kJKMueDqYqS7_I.cer (raw, json) Hash identifier: aYJHsD70BSixkaCqHvWCFxD4Xd/gOpiY1DDFqyrg8TY= Subject key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC882530E3C959004CF5E8980B78F18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57130 IP: 91.230.240.0/23 IP: 194.9.22.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:82:53:0e:3c:95:90:04:cf:5e:89:80:b7:8f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:96:0b:46:9d:ec:38:b4:54:84:95:94:a7: f3:f7:9d:69:53:f6:23:0d:dc:c8:77:b0:77:6c:7b: c4:6b:f4:6e:24:36:8a:d7:b0:f7:f3:0f:54:c9:f7: 5b:c2:5e:5c:f1:e7:4c:15:00:00:ed:29:34:ca:46: 5b:42:46:ab:ae:6a:ce:af:b3:63:b0:69:ad:af:2f: 03:1e:d6:0c:f7:44:58:36:c5:ae:85:ed:84:f6:0a: bf:d8:a5:f0:6c:41:32:ed:70:1e:8d:54:fe:c3:b2: 25:54:66:ce:0f:8e:1c:19:29:84:49:c5:7b:05:4f: 0b:7f:31:62:f9:28:f0:39:d9:74:fe:b0:ec:52:03: d1:18:24:08:92:7f:d1:45:74:f6:3f:58:6a:b0:d8: ae:e7:b9:88:2a:2c:14:1a:c5:5f:67:06:e0:93:37: 52:e9:2d:64:11:fa:1f:10:11:d8:2a:38:c0:79:6a: c3:55:9c:d5:83:ad:6c:44:ed:da:a6:98:04:51:a7: 23:6c:32:41:2b:49:83:a7:69:ca:63:7a:05:d1:eb: 39:5c:a8:8a:73:49:02:22:f7:90:f2:fd:94:a8:9a: 2e:d8:15:39:79:f8:04:23:0d:1e:6d:3c:ff:4f:c9: d6:8c:50:87:53:2f:09:4c:47:6e:10:de:24:b6:83: 55:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.240.0/23 194.9.22.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57130 Signature Algorithm: sha256WithRSAEncryption 6e:ac:e1:5a:c5:cc:c8:77:57:f8:4f:e8:03:e5:36:4e:ca:5e: 35:43:fd:89:17:62:1b:e4:ee:1b:37:ae:87:1e:13:09:c5:5e: ad:56:1e:6b:59:79:63:91:78:c1:a1:15:f4:07:94:2f:f8:1e: c6:79:7c:12:ea:a0:78:e2:98:cd:ed:03:2f:d0:74:8d:96:af: 71:57:08:cb:ad:21:17:7a:d6:5a:16:9e:89:7e:f2:59:d7:11: 52:39:31:bf:53:de:88:7d:e2:53:49:b9:25:97:78:16:58:51: 4f:cb:78:30:a7:ca:c4:22:2b:2c:1f:18:05:95:99:3d:4f:e9: 75:33:18:c0:14:4e:f8:39:d8:69:5f:d0:1f:48:86:3c:40:3a: 88:80:61:29:d3:03:b4:8b:b0:34:43:68:8f:60:41:f1:63:6e: c6:a3:55:9b:99:5d:30:81:1e:55:b3:8d:72:1d:23:11:26:ef: b1:bc:b3:a8:7c:d7:68:26:39:c2:15:ba:3f:3d:02:a7:cf:d8: 1d:8f:ac:5e:26:50:c2:73:50:ba:aa:9c:2a:a6:8a:eb:40:0f: f9:fd:d4:11:dc:78:65:67:69:58:3d:0b:df:9a:0b:26:84:be: 7d:f6:39:ab:b8:b0:7b:2e:42:dd:5f:92:64:60:ff:96:c1:65: d4:a6:05:9e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt6yIJTDjyVkATPXomAt48YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2NlMDY5ZGZjNWI2MDg4NzZkNjQyNGEzMmU3ODNhOThhOTJlZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolCWC0ad7Di0VISVlKfz951pU/Yj DdzId7B3bHvEa/RuJDaK17D38w9Uyfdbwl5c8edMFQAA7Sk0ykZbQkarrmrOr7Nj sGmtry8DHtYM90RYNsWuhe2E9gq/2KXwbEEy7XAejVT+w7IlVGbOD44cGSmEScV7 BU8LfzFi+SjwOdl0/rDsUgPRGCQIkn/RRXT2P1hqsNiu57mIKiwUGsVfZwbgkzdS 6S1kEfofEBHYKjjAeWrDVZzVg61sRO3appgEUacjbDJBK0mDp2nKY3oF0es5XKiK c0kCIveQ8v2UqJou2BU5efgEIw0ebTz/T8nWjFCHUy8JTEduEN4ktoNVJQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOPOBp38W2CIdtZCSjLng6mKku/yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzU1YWUy ZC0zN2EyLTRmNjctOTUxNi05MDgxNTQ1ZjU2OTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvNTVhZTJk LTM3YTItNGY2Ny05NTE2LTkwODE1NDVmNTY5MS8xLzQ4NEduZnhiWUloMjFrSktN dWVEcVlxUzdfSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW+bwAwQBwgkWMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDfKjANBgkqhkiG9w0BAQsFAAOCAQEAbqzhWsXMyHdX+E/oA+U2Tspe NUP9iRdiG+TuGzeuhx4TCcVerVYea1l5Y5F4waEV9AeUL/gexnl8EuqgeOKYze0D L9B0jZavcVcIy60hF3rWWhaeiX7yWdcRUjkxv1PeiH3iU0m5JZd4FlhRT8t4MKfK xCIrLB8YBZWZPU/pdTMYwBRO+DnYaV/QH0iGPEA6iIBhKdMDtIuwNENoj2BB8WNu xqNVm5ldMIEeVbONch0jESbvsbyzqHzXaCY5whW6Pz0Cp8/YHY+sXiZQwnNQuqqc KqaK60AP+f3UEdx4ZWdpWD0L35oLJoS+ffY5q7iwey5C3V+SZGD/lsFl1KYFng== -----END CERTIFICATE-----Generated at Sun Jan 11 14:37:47 2026 by rpki-client