This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer File: 55rcKmJwJwixoO4N87TPkiiW3NY.cer (raw, json) Hash identifier: DKkYU5e98rwNuCeaQQjHKLQP/cp+pqXr4JYD/4yGan8= Subject key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA34A454E2B09BA9581CAA1607D84B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202279 AS: 214721 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4a:45:4e:2b:09:ba:95:81:ca:a1:60:7d:84:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b3:20:4a:84:20:b1:26:71:d1:6a:ab:82:75: 81:6e:52:f7:48:a9:96:43:c3:32:7a:85:4b:ae:2d: bb:0b:95:a3:21:a8:b8:9b:4d:bb:1e:4b:2f:3f:a6: a2:b5:3a:eb:ec:48:67:16:cc:8f:82:68:2b:be:b9: a1:74:c6:1b:de:66:0e:ff:0a:46:ca:62:43:f6:bc: 09:15:9d:d4:77:c1:82:34:85:bf:a3:cc:2e:96:49: bf:2d:86:75:f0:49:fa:e8:28:de:c2:37:3a:8a:82: b6:89:8f:10:fd:c0:c1:46:de:74:66:97:0a:c9:51: 51:dd:a3:78:15:64:38:e4:f6:10:f9:59:d9:83:d8: 0c:42:3b:62:e8:5b:9b:f2:e5:33:d7:35:f1:7a:fb: a2:5b:5a:d1:74:b5:0c:fb:a2:fb:3c:ff:7a:e8:64: e2:07:ab:d9:e9:0f:ed:b7:c4:f6:7e:4a:f7:30:91: 66:d0:e0:2b:c9:87:1e:6f:00:7f:40:a7:1f:79:74: af:68:6f:d9:22:3e:ac:15:02:c2:4c:d3:82:70:36: 33:44:04:05:12:cc:46:b0:13:d8:1c:68:84:36:8d: b1:1e:30:db:16:b5:c5:0f:56:50:40:c3:31:d8:aa: b4:f5:09:4c:f9:8f:dd:89:80:a8:93:4c:a8:4f:2a: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202279 214721 Signature Algorithm: sha256WithRSAEncryption 31:29:4b:34:65:17:1a:cc:0f:5c:60:d1:1f:4a:c5:da:9c:0f: b0:d4:cc:22:1a:b6:73:75:e1:e9:b8:67:a3:5a:f3:c3:06:40: 8a:d9:ee:50:1c:a8:89:d0:4b:59:99:a1:2b:12:5b:69:86:d1: 34:92:97:17:64:66:6d:9a:80:76:6b:7b:c9:4e:3f:ab:db:c2: 8b:33:21:b5:bc:00:f3:2f:9b:87:10:3d:b5:67:3e:73:6f:f7: 68:5b:68:a6:15:c1:67:34:70:5e:79:2c:f1:1e:14:17:88:66: 91:a6:95:2e:5d:ab:77:6c:1e:74:b9:9f:56:e6:ae:f0:46:69: b4:53:b3:50:0d:63:3b:e9:6c:d9:1e:da:31:2d:26:03:38:aa: 23:4d:f9:f4:4e:15:7e:0e:8d:6a:33:82:10:c7:cf:21:b7:38: 7e:2e:66:0f:c0:13:95:40:f4:d1:cd:f7:33:14:9f:32:02:ab: 98:7d:aa:1a:f1:37:02:b3:02:15:c9:82:cd:5b:e3:bf:11:cd: 68:db:29:cb:4b:5e:0e:48:76:a4:89:bb:05:ed:28:89:39:4e: 08:3c:df:59:7e:5b:4b:ff:b9:0d:de:7c:49:08:aa:0b:e5:22: cc:db:07:57:c4:8c:da:c8:62:5b:d8:c8:57:d4:08:d5:e4:67: 0e:bc:b7:da -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7o0pFTisJupWByqFgfYS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzlhZGMyYTYyNzAyNzA4YjFhMGVlMGRmM2I0Y2Y5MjI4OTZkY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rMgSoQgsSZx0WqrgnWBblL3SKmW Q8MyeoVLri27C5WjIai4m027HksvP6aitTrr7EhnFsyPgmgrvrmhdMYb3mYO/wpG ymJD9rwJFZ3Ud8GCNIW/o8wulkm/LYZ18En66Cjewjc6ioK2iY8Q/cDBRt50ZpcK yVFR3aN4FWQ45PYQ+VnZg9gMQjti6Fub8uUz1zXxevuiW1rRdLUM+6L7PP966GTi B6vZ6Q/tt8T2fkr3MJFm0OAryYcebwB/QKcfeXSvaG/ZIj6sFQLCTNOCcDYzRAQF EsxGsBPYHGiENo2xHjDbFrXFD1ZQQMMx2Kq09QlM+Y/diYCok0yoTyr1ewIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFOea3CpicCcIsaDuDfO0z5IoltzWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzViNjE3 ZC0wOGVhLTQ2NzQtYjNjNC0zNjNjMWI0MzE5NjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvNWI2MTdk LTA4ZWEtNDY3NC1iM2M0LTM2M2MxYjQzMTk2My8xLzU1cmNLbUp3SndpeG9PNE44 N1RQa2lpVzNOWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMWJwIDA0bBMA0GCSqGSIb3DQEBCwUAA4IBAQAxKUs0 ZRcazA9cYNEfSsXanA+w1MwiGrZzdeHpuGejWvPDBkCK2e5QHKiJ0EtZmaErEltp htE0kpcXZGZtmoB2a3vJTj+r28KLMyG1vADzL5uHED21Zz5zb/doW2imFcFnNHBe eSzxHhQXiGaRppUuXat3bB50uZ9W5q7wRmm0U7NQDWM76WzZHtoxLSYDOKojTfn0 ThV+Do1qM4IQx88htzh+LmYPwBOVQPTRzfczFJ8yAquYfaoa8TcCswIVyYLNW+O/ Ec1o2ynLS14OSHakibsF7SiJOU4IPN9ZfltL/7kN3nxJCKoL5SLM2wdXxIzayGJb 2MhX1AjV5GcOvLfa -----END CERTIFICATE-----Generated at Sun Jan 11 23:17:02 2026 by rpki-client