This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer File: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer (raw, json) Hash identifier: i58J4dTL8NkOLk04UHfBCOsXVJym59ac8CbTiooNLaE= Subject key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C72F982413A3362846F29D73441512 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215899 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2f:98:24:13:a3:36:28:46:f2:9d:73:44:15:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:34:4c:4c:25:dd:59:8e:86:7c:99:31:b1:d4: fb:be:bd:60:43:7d:6a:e1:c2:6f:61:99:03:0c:d8: 4f:5f:2c:6a:b3:87:56:08:d1:9a:59:30:39:ae:08: 0b:29:ba:61:2f:c4:59:36:bc:f2:3e:5b:eb:04:7e: 1f:90:5c:8f:05:a5:2d:0f:ef:b9:e0:7b:ef:8c:af: ff:89:fb:88:01:79:13:67:35:db:2d:e7:5d:9c:b3: c2:13:eb:0d:9c:60:df:94:89:72:db:a7:6c:9b:9a: af:8d:78:3a:a5:58:09:3f:18:2b:fe:f4:4e:da:74: ce:5b:aa:c2:e3:31:6a:ce:30:02:cf:2b:22:a9:30: 8e:33:d5:30:86:d1:a3:07:c7:50:e9:66:77:52:ed: eb:a5:e2:a7:06:4d:c5:06:fe:06:b3:ac:92:0a:17: 77:0b:57:f7:24:14:95:a7:6d:9c:92:a2:83:45:89: 5d:ee:22:fb:2d:c3:05:b3:a1:a7:e3:fc:d4:00:4c: 11:b2:0e:d5:a9:db:2d:56:88:bc:61:19:d9:41:ae: fb:2a:b0:9f:b9:2d:f8:19:e3:5e:e4:78:be:6c:43: 0e:f4:49:2c:1e:a0:52:a1:6b:40:93:69:e6:c1:0d: e9:77:4e:2b:43:6f:d2:05:34:ef:4e:08:f1:7a:38: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215899 Signature Algorithm: sha256WithRSAEncryption 9a:cb:f8:9d:fd:79:f7:f0:b0:15:34:67:bc:87:1b:77:93:3c: c0:ad:bc:ed:b7:da:f7:4b:d6:9e:33:0c:67:22:94:da:f7:a1: 44:44:54:63:92:19:a9:e9:55:6e:3a:ee:d0:6c:ab:a7:db:15: fe:ef:02:0e:80:b4:05:46:08:84:aa:4f:2a:61:7c:94:3a:60: e0:56:45:c2:79:2c:96:d9:2b:71:49:6d:00:a5:68:31:b7:1a: 9b:77:ec:95:df:7e:60:c8:53:cb:e7:04:88:ec:54:b5:f0:3b: 11:91:5c:a0:4a:5c:aa:79:b9:cb:0d:aa:29:49:d3:05:a3:76: e0:83:a6:e8:c8:f2:1a:16:d9:b7:d5:2d:41:c3:1f:4d:53:1d: 43:92:bf:d8:2f:14:3b:15:6c:a0:2e:33:00:ff:c2:3a:37:61: 3c:f4:d1:08:07:f6:12:ee:10:8f:a5:d3:6f:bb:95:aa:5a:97: 2e:e8:84:44:be:3d:31:b9:17:48:59:ec:57:c9:f5:83:42:a9: 0d:ba:d9:19:c9:f8:57:c1:46:ad:e4:e5:60:e2:54:a5:6c:3a: c6:92:e9:00:a9:ae:e6:5a:49:db:95:0c:3b:5b:ee:8d:f7:fd: df:d5:75:9b:d5:41:6e:98:bf:ae:48:86:a7:51:e8:0f:e7:8e: f4:16:01:27 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZt3xy+YJBOjNihG8p1zRBUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmFkMjI4ODAzNWU0MDU2ZWIwY2VjMTU0NDZhMGM0MTgwZDI2ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjRMTCXdWY6GfJkxsdT7vr1gQ31q 4cJvYZkDDNhPXyxqs4dWCNGaWTA5rggLKbphL8RZNrzyPlvrBH4fkFyPBaUtD++5 4HvvjK//ifuIAXkTZzXbLeddnLPCE+sNnGDflIly26dsm5qvjXg6pVgJPxgr/vRO 2nTOW6rC4zFqzjACzysiqTCOM9UwhtGjB8dQ6WZ3Uu3rpeKnBk3FBv4Gs6ySChd3 C1f3JBSVp22ckqKDRYld7iL7LcMFs6Gn4/zUAEwRsg7VqdstVoi8YRnZQa77KrCf uS34GeNe5Hi+bEMO9EksHqBSoWtAk2nmwQ3pd04rQ2/SBTTvTgjxejhqrwIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFPutIogDXkBW6wzsFURqDEGA0m6kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyL2E2YjBi Zi1jMDY1LTQ4ZDEtYWZjZS04OGE2NTkzYTY1Y2IvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvYTZiMGJm LWMwNjUtNDhkMS1hZmNlLTg4YTY1OTNhNjVjYi8xLzEtNjBpaUFOZVFGYnJET3dW UkdvTVFZRFNicVEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDS1swDQYJKoZIhvcNAQELBQADggEBAJrL+J39effw sBU0Z7yHG3eTPMCtvO232vdL1p4zDGcilNr3oUREVGOSGanpVW467tBsq6fbFf7v Ag6AtAVGCISqTyphfJQ6YOBWRcJ5LJbZK3FJbQClaDG3Gpt37JXffmDIU8vnBIjs VLXwOxGRXKBKXKp5ucsNqilJ0wWjduCDpujI8hoW2bfVLUHDH01THUOSv9gvFDsV bKAuMwD/wjo3YTz00QgH9hLuEI+l02+7lapaly7ohES+PTG5F0hZ7FfJ9YNCqQ26 2RnJ+FfBRq3k5WDiVKVsOsaS6QCpruZaSduVDDtb7o33/d/VdZvVQW6Yv65IhqdR 6A/njvQWASc= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:35 2026 by rpki-client