This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer File: rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer (raw, json) Hash identifier: URtF356FuJ6AdrG4l9LSfEaD4ML8oORPmehzkJHUxB0= Subject key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAED346D7580BDE49D5F6720C9580B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44355 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ed:34:6d:75:80:bd:e4:9d:5f:67:20:c9:58:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adffd477857d1e9be95b82717a427f35afa9a7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:2f:82:f5:07:f5:c8:b2:09:3f:1b:8a:2f: de:71:d2:04:da:0e:8f:49:05:73:9e:e1:91:14:b3: 82:b9:f4:ca:1d:7a:17:15:e4:34:39:2c:92:ec:19: 67:4b:e0:99:79:7b:49:40:33:97:08:b4:e5:dd:08: 4c:70:cd:81:3c:0c:04:85:ec:77:fc:d6:71:03:d4: 7f:46:be:6e:6a:bd:7b:d4:f5:68:67:14:c9:bf:17: f4:1b:05:88:32:01:d7:12:cc:5a:c2:85:a0:d6:b0: 02:e9:60:5a:d2:87:07:d3:94:af:09:02:88:0f:f9: c1:f7:64:c1:0d:de:6e:ef:82:1e:18:d0:61:d6:28: 9d:04:52:a1:38:ca:aa:a3:13:2f:8e:f1:59:1d:31: 57:4a:03:9f:0a:7b:f2:53:86:1b:b2:49:6f:16:56: f4:e3:d6:b3:b5:8c:54:e2:d5:5d:50:3e:56:24:69: c6:3b:42:e5:a9:b3:e2:b1:c0:2f:b8:dd:f1:cf:d2: ad:c8:15:42:4c:da:b6:47:6d:23:2a:bf:cf:6b:36: b8:cf:7c:cf:b7:eb:fc:33:cd:09:ad:14:2b:2e:72: 5b:a0:56:d7:f5:2b:14:00:96:87:fd:73:cd:79:e0: be:d4:ac:d1:52:53:49:0d:10:8e:9a:cd:5d:00:d7: 05:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 44355 Signature Algorithm: sha256WithRSAEncryption a0:29:c1:23:8d:0f:55:93:bb:3f:98:e2:c0:ea:3c:fe:b2:19: 8d:78:4c:12:cc:a5:95:e8:63:67:97:eb:51:43:c7:52:cc:cd: 9f:45:a8:7a:f9:ff:a7:c5:3e:44:e4:35:18:84:e0:3d:71:43: c6:8e:e7:e4:88:0f:57:99:18:b8:c4:7b:ec:c0:3c:02:af:60: 11:41:a7:2d:7d:a8:96:48:8f:9a:bb:38:7d:13:07:33:6f:a7: 69:9a:d4:d7:7c:07:22:3f:dc:6d:7d:cd:94:56:d5:69:9e:2d: 6c:aa:5c:eb:55:04:13:0f:61:e1:4d:7a:57:2b:96:8b:d4:97: 1c:be:6b:d8:c2:7c:20:43:c1:a5:09:10:b6:b0:31:40:36:d2: 7b:6d:24:b3:3c:7c:70:bf:66:f1:6f:6b:96:db:4f:7f:be:f5: 65:c0:30:e7:ed:20:7f:79:98:f9:1d:b5:f2:5d:5a:3f:79:75: 5d:fd:11:5a:ec:f2:30:1e:9b:52:01:5d:7d:dc:ed:70:e2:9f: f2:7d:fe:2a:5f:e6:14:2d:f2:86:c7:94:e4:81:5f:80:76:f8: 22:d2:f3:ad:78:00:0d:72:7b:25:05:b6:d2:75:2a:28:19:b2: 7e:5a:4f:fc:47:70:a0:a9:f3:56:86:a5:8d:02:9e:7b:0b:00: 38:e4:81:9a -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt26u00bXWAveSdX2cgyVgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGZmZDQ3Nzg1N2QxZTliZTk1YjgyNzE3YTQyN2YzNWFmYTlhN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE8vgvUH9ciyCT8bii/ecdIE2g6P SQVznuGRFLOCufTKHXoXFeQ0OSyS7BlnS+CZeXtJQDOXCLTl3QhMcM2BPAwEhex3 /NZxA9R/Rr5uar171PVoZxTJvxf0GwWIMgHXEsxawoWg1rAC6WBa0ocH05SvCQKI D/nB92TBDd5u74IeGNBh1iidBFKhOMqqoxMvjvFZHTFXSgOfCnvyU4YbsklvFlb0 49aztYxU4tVdUD5WJGnGO0LlqbPiscAvuN3xz9KtyBVCTNq2R20jKr/Paza4z3zP t+v8M80JrRQrLnJboFbX9SsUAJaH/XPNeeC+1KzRUlNJDRCOms1dANcFewIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFK3/1HeFfR6b6VuCcXpCfzWvqafWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUx ODEwLTE5ODctNDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8yLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODRk NTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2NGY0LzIvQURGRkQ0Nzc4NTdE MUU5QkU5NUI4MjcxN0E0MjdGMzVBRkE5QTdENi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMArUMw DQYJKoZIhvcNAQELBQADggEBAKApwSOND1WTuz+Y4sDqPP6yGY14TBLMpZXoY2eX 61FDx1LMzZ9FqHr5/6fFPkTkNRiE4D1xQ8aO5+SID1eZGLjEe+zAPAKvYBFBpy19 qJZIj5q7OH0TBzNvp2ma1Nd8ByI/3G19zZRW1WmeLWyqXOtVBBMPYeFNelcrlovU lxy+a9jCfCBDwaUJELawMUA20nttJLM8fHC/ZvFva5bbT3++9WXAMOftIH95mPkd tfJdWj95dV39EVrs8jAem1IBXX3c7XDin/J9/ipf5hQt8obHlOSBX4B2+CLS8614 AA1yeyUFttJ1KigZsn5aT/xHcKCp81aGpY0CnnsLADjkgZo= -----END CERTIFICATE-----Generated at Fri Jan 9 07:46:04 2026 by rpki-client