This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer File: elJNrL4CqVkxyh1u4ps8iVek7L4.cer (raw, json) Hash identifier: V5RYYEDQCddhKl5B8c2S9+/tCIHB572/cDNgbVfj4jw= Subject key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38ED111E20E34A955A4CE36051BA68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214621 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ed:11:1e:20:e3:4a:95:5a:4c:e3:60:51:ba:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:84:73:73:34:12:25:f8:e4:a2:ef:33:5e:df: 0e:20:21:23:7d:b2:d1:6c:df:8e:10:3f:ea:2d:ff: f6:1e:e4:dc:a5:a9:a9:79:34:53:6f:a7:66:a1:c9: 48:c9:b4:f4:a3:98:5c:fb:5e:63:b3:c6:5b:f2:1a: 0a:1d:47:88:e4:b5:50:4d:95:47:93:21:d3:f5:46: 1a:91:cc:f4:9c:0e:af:09:ca:49:be:35:21:34:0d: e1:9c:fa:b2:61:a9:8b:ca:dc:67:cc:b6:ba:8d:cd: 96:ca:6c:3e:63:cb:a8:73:ee:be:e0:34:29:e7:84: f2:ff:31:37:9b:34:7d:0c:78:06:5d:d4:6a:c0:e3: 7b:55:81:94:3f:11:9e:12:bc:bd:bd:f1:9e:49:4e: e2:b8:40:d2:4a:48:f3:2b:bc:05:7c:20:20:5f:68: 95:a3:b1:46:e2:09:6f:d9:4f:7a:4b:60:40:05:97: 00:9b:25:38:99:53:33:dc:a0:24:7c:c5:d9:a0:17: e4:33:6d:04:9e:7b:e7:39:d3:6c:a4:fe:c8:11:c4: ca:67:8c:d3:f0:b3:c3:52:ba:55:ea:3a:cd:b0:05: cc:4d:d6:f4:f3:eb:83:9a:7e:d7:48:0d:ef:6e:ec: 96:8f:41:1f:49:a4:79:54:49:fe:ae:d9:20:ba:11: cd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214621 Signature Algorithm: sha256WithRSAEncryption 61:73:26:c1:1a:8c:45:2d:ed:02:43:4b:2b:71:d4:11:90:15: 1e:df:02:02:5b:ac:ab:99:29:59:ac:15:6d:b9:f7:01:e1:b1: 24:d2:5e:11:5b:75:b1:2b:0c:68:34:ab:12:dd:22:c8:10:e4: 76:61:3d:88:14:5f:6e:4b:93:4a:f2:08:26:1b:6a:22:cb:6d: b0:13:0d:c8:9a:4d:32:bc:08:49:7f:9f:dd:71:79:2c:56:52: 95:a9:c0:88:c0:61:a6:e0:61:87:bd:3f:4f:a1:20:59:c4:d7: 2c:f9:01:14:49:3e:d2:f6:b6:f1:15:47:6f:a3:b7:d0:e5:53: 96:ab:1b:65:66:60:1b:f3:5b:8f:a7:42:c4:a4:f3:52:78:f2: bd:fb:a7:74:3d:10:cd:55:fd:ab:04:a3:af:d8:d1:75:4b:79: cf:c8:de:fb:cc:ac:37:db:77:f0:50:00:55:3e:a9:4c:fe:38: 9c:aa:9a:70:42:82:9a:f3:fd:a2:33:5b:e4:80:dc:ba:ed:4c: 88:bb:ef:da:ec:e6:36:67:23:14:1e:1b:89:13:20:dc:62:6d: f2:19:da:73:52:91:45:c4:de:17:32:56:e9:cf:11:fe:c0:7a: 2e:35:f6:e4:4f:cf:c2:09:74:f1:15:38:49:88:bd:a8:cd:0f: eb:9f:c2:65 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OO0RHiDjSpVaTONgUbpoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTUyNGRhY2JlMDJhOTU5MzFjYTFkNmVlMjliM2M4OTU3YTRlY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oRzczQSJfjkou8zXt8OICEjfbLR bN+OED/qLf/2HuTcpampeTRTb6dmoclIybT0o5hc+15js8Zb8hoKHUeI5LVQTZVH kyHT9UYakcz0nA6vCcpJvjUhNA3hnPqyYamLytxnzLa6jc2Wymw+Y8uoc+6+4DQp 54Ty/zE3mzR9DHgGXdRqwON7VYGUPxGeEry9vfGeSU7iuEDSSkjzK7wFfCAgX2iV o7FG4glv2U96S2BABZcAmyU4mVMz3KAkfMXZoBfkM20EnnvnOdNspP7IEcTKZ4zT 8LPDUrpV6jrNsAXMTdb08+uDmn7XSA3vbuyWj0EfSaR5VEn+rtkguhHNEwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHpSTay+AqlZMcodbuKbPIlXpOy+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzBjZmU0 NS00MmU3LTRiY2YtOTRkNS1iOGIxMGM2ZDVlYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvMGNmZTQ1 LTQyZTctNGJjZi05NGQ1LWI4YjEwYzZkNWViZi8xL2VsSk5yTDRDcVZreHloMXU0 cHM4aVZlazdMNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNGXTANBgkqhkiG9w0BAQsFAAOCAQEAYXMmwRqMRS3t AkNLK3HUEZAVHt8CAlusq5kpWawVbbn3AeGxJNJeEVt1sSsMaDSrEt0iyBDkdmE9 iBRfbkuTSvIIJhtqIsttsBMNyJpNMrwISX+f3XF5LFZSlanAiMBhpuBhh70/T6Eg WcTXLPkBFEk+0va28RVHb6O30OVTlqsbZWZgG/Nbj6dCxKTzUnjyvfundD0QzVX9 qwSjr9jRdUt5z8je+8ysN9t38FAAVT6pTP44nKqacEKCmvP9ojNb5IDcuu1MiLvv 2uzmNmcjFB4biRMg3GJt8hnac1KRRcTeFzJW6c8R/sB6LjX25E/Pwgl08RU4SYi9 qM0P65/CZQ== -----END CERTIFICATE-----Generated at Tue Jan 13 03:37:56 2026 by rpki-client