This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer (raw, json) Hash identifier: K4SSgp6y6mOb3fKTOYTLVWESM3Y5xdfq9b+NbJyA+2Y= Subject key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F821B0A6F17E3D946717B50B194C048 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212427 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:1b:0a:6f:17:e3:d9:46:71:7b:50:b1:94:c0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:0b:7e:ad:39:88:ae:da:89:1a:e5:3c:41: a6:d1:ac:f5:4a:ed:b0:4e:6a:d7:a2:8c:19:6e:51: 79:dc:49:8c:5c:c0:d8:99:40:6b:59:db:02:f3:99: b0:d1:f0:a5:8c:6c:22:0b:9e:37:e6:d0:7e:82:64: 8e:3f:79:5e:4c:ff:1b:b4:cf:a2:72:e9:c9:e4:ac: be:07:7f:c1:0f:9e:f2:06:24:d1:05:34:8d:16:3d: 9c:01:90:17:66:a3:ec:ae:25:e2:39:6c:a0:ba:3c: 1a:f3:1d:f3:00:06:cc:12:10:04:6d:73:91:c5:27: 58:a4:1c:4e:2b:e9:63:69:fd:d2:3d:10:ed:06:56: a1:bf:5b:c4:a5:79:d7:6e:2f:be:50:9a:21:61:20: e2:80:a7:1c:6b:fb:31:44:97:17:9e:ca:75:4b:a8: 3f:11:52:e2:ad:8b:e2:87:ea:92:f3:5e:60:0f:86: b4:7f:df:1e:26:76:db:06:36:5c:88:16:11:64:06: 79:b5:56:76:0e:90:38:5d:9e:63:17:c4:43:5f:d2: 0a:9b:b4:a0:98:de:ca:01:1a:e8:9a:22:13:73:b4: 8b:3f:9c:1f:01:f7:29:6b:15:22:30:48:5c:21:b3: f7:5d:67:8b:cc:d1:06:d9:b9:87:e6:23:f3:ad:98: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212427 Signature Algorithm: sha256WithRSAEncryption 6f:47:a0:19:e8:d5:1a:f9:ec:79:39:96:0d:07:b4:f5:85:19: 58:9c:8b:44:e3:b7:9f:16:39:4d:48:63:e4:0c:1f:dd:8f:63: c2:62:99:a1:a1:47:87:b8:1f:0b:32:fa:19:c8:ff:ba:61:8c: 95:d6:7e:82:06:2d:bb:60:09:2c:e2:23:30:ff:39:73:2e:77: d3:4b:c2:48:a1:11:a6:38:ca:ae:5c:b2:aa:36:0a:a2:ac:a7: 49:90:d8:76:db:cd:d9:0b:f7:ec:e5:0f:b4:70:c8:7e:4f:15: d4:91:f6:93:99:af:30:3d:f6:1a:b2:f3:07:33:26:a1:3e:87: 07:9f:dd:46:9a:27:46:b0:48:d0:6e:df:30:e1:0e:1f:78:f8: 20:1f:4a:35:b2:fb:e3:19:d2:c8:f7:03:78:4a:45:90:dd:0f: a3:19:93:77:5a:55:a0:35:f5:86:01:13:0b:68:36:9d:0d:5e: ed:1d:35:c5:a0:2e:d1:90:21:a4:06:c4:85:5a:2b:d7:4d:99: 36:db:7d:b8:8b:b0:84:73:c0:b3:b5:ca:06:2b:01:b1:c1:de: d5:83:20:46:a9:ff:4f:f7:19:7f:43:a5:46:24:3a:70:24:b5: 90:0a:27:6e:f4:85:a0:e4:3b:a9:e5:08:62:aa:e8:76:1b:7d: bb:82:dc:37 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZt/ghsKbxfj2UZxe1CxlMBIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmFmMmYxOWIwZTRkOTZjNjU1YmYzNzcwNjY0NjJlMmIxNDFjZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdkLfq05iK7aiRrlPEGm0az1Su2w TmrXoowZblF53EmMXMDYmUBrWdsC85mw0fCljGwiC5435tB+gmSOP3leTP8btM+i cunJ5Ky+B3/BD57yBiTRBTSNFj2cAZAXZqPsriXiOWygujwa8x3zAAbMEhAEbXOR xSdYpBxOK+ljaf3SPRDtBlahv1vEpXnXbi++UJohYSDigKcca/sxRJcXnsp1S6g/ EVLirYvih+qS815gD4a0f98eJnbbBjZciBYRZAZ5tVZ2DpA4XZ5jF8RDX9IKm7Sg mN7KARromiITc7SLP5wfAfcpaxUiMEhcIbP3XWeLzNEG2bmH5iPzrZhmXwIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFPuvLxmw5NlsZVvzdwZkYuKxQc1gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2UzYzM2 Ny0zN2EyLTRjNjUtODNjMi01OTJiODRmZDUzMzYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZTNjMzY3 LTM3YTItNGM2NS04M2MyLTU5MmI4NGZkNTMzNi8xLzEtNjh2R2JEazJXeGxXX04z Qm1SaTRyRkJ6V0EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDPcswDQYJKoZIhvcNAQELBQADggEBAG9HoBno1Rr5 7Hk5lg0HtPWFGVici0Tjt58WOU1IY+QMH92PY8JimaGhR4e4Hwsy+hnI/7phjJXW foIGLbtgCSziIzD/OXMud9NLwkihEaY4yq5csqo2CqKsp0mQ2HbbzdkL9+zlD7Rw yH5PFdSR9pOZrzA99hqy8wczJqE+hwef3UaaJ0awSNBu3zDhDh94+CAfSjWy++MZ 0sj3A3hKRZDdD6MZk3daVaA19YYBEwtoNp0NXu0dNcWgLtGQIaQGxIVaK9dNmTbb fbiLsIRzwLO1ygYrAbHB3tWDIEap/0/3GX9DpUYkOnAktZAKJ270haDkO6nlCGKq 6HYbfbuC3Dc= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:18 2026 by rpki-client