This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer File: 468Yd0OnoHf2oeBmX92q700SSfs.cer (raw, json) Hash identifier: LRF8qLHU/KlKjxRZwRe9Ah0Xway5eepdLAKvALXYlew= Subject key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF293551887E9C18E4E4FFA665A3D64 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205861 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:93:55:18:87:e9:c1:8e:4e:4f:fa:66:5a:3d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b7:aa:05:f4:0a:b6:6d:20:5c:5d:d6:fb:be: 49:74:5b:15:1c:bf:73:3a:74:28:fe:c3:be:6b:ec: 7a:b6:e2:e4:7b:37:3a:1f:52:de:f8:32:a5:e3:f1: 72:65:e3:e5:b7:41:22:eb:d2:81:b8:78:ea:95:68: 62:cd:29:ab:aa:4c:25:c1:c8:fb:6e:0e:18:4a:af: 00:f5:2a:af:a2:7c:56:0b:84:c9:70:48:a6:94:79: eb:8d:eb:96:8e:5e:92:97:8e:98:cc:44:ef:29:71: 1d:d7:f1:54:98:fc:ec:80:1c:f2:61:2e:21:a8:37: ac:1f:48:fb:c5:f7:44:d1:3e:6b:1a:40:a9:d0:8e: 61:e0:7e:66:c8:11:46:5b:c0:95:c9:d1:63:4a:97: f8:3a:89:96:38:1f:af:2f:2c:11:2c:b2:fb:31:8c: 07:d4:de:c2:36:46:eb:a7:7b:7b:35:e2:a8:8a:31: 41:a1:a8:54:56:b6:3c:f8:7b:85:7e:e7:a2:37:5d: 1b:24:07:dd:72:32:d5:31:2b:4a:cc:ae:8b:ed:5b: 76:9c:63:37:5a:ba:95:db:8f:c2:3d:b4:14:20:3f: 89:1f:e7:e6:61:7d:94:5a:4a:58:af:de:9f:92:9e: 43:43:b1:a3:be:8c:7e:42:53:19:63:ec:fa:d8:b7: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205861 Signature Algorithm: sha256WithRSAEncryption 4c:77:86:a2:78:3a:64:57:c6:03:55:b5:9a:3f:4c:c9:5d:ff: c3:52:fa:91:89:20:ab:12:00:09:e3:6b:52:67:1a:33:79:5d: 11:bd:0e:f8:07:9e:7c:cf:b7:33:6a:10:68:5c:9c:12:45:bb: af:07:5e:63:4b:2c:fd:8d:1f:3a:60:90:99:e7:13:0a:e3:d8: 9c:04:f1:c1:18:54:62:fe:e1:84:1a:72:d0:e9:8e:33:1c:3e: 82:c2:55:d6:4e:11:77:80:34:73:63:8b:d9:e6:ef:ae:90:38: 94:27:78:51:f5:82:f5:27:54:39:94:f0:98:10:13:76:66:85: 2e:98:a0:fb:2c:90:0b:15:7b:be:b7:9c:a5:5e:6a:af:cc:86: 76:17:61:93:40:75:2b:9b:5c:8a:ae:e0:79:66:c2:c9:49:95: 0f:dc:3f:33:d4:49:9a:57:14:c4:1b:c6:1b:ca:4c:4c:dd:cf: 3a:0a:70:49:31:6e:d3:53:cf:7e:c0:34:35:59:70:2d:90:29: 19:01:56:41:a7:f5:66:49:8e:75:41:35:24:8e:52:1e:81:18: 00:3e:cf:19:61:61:fb:c4:24:96:e0:34:0a:1e:2f:6b:56:b3: 65:94:af:9a:ac:c3:dd:e6:b6:e9:25:79:40:49:cc:8e:fa:73: d9:8b:31:10 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/8pNVGIfpwY5OT/pmWj1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2FmMTg3NzQzYTdhMDc3ZjZhMWUwNjY1ZmRkYWFlZjRkMTI0OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbeqBfQKtm0gXF3W+75JdFsVHL9z OnQo/sO+a+x6tuLkezc6H1Le+DKl4/FyZePlt0Ei69KBuHjqlWhizSmrqkwlwcj7 bg4YSq8A9SqvonxWC4TJcEimlHnrjeuWjl6Sl46YzETvKXEd1/FUmPzsgBzyYS4h qDesH0j7xfdE0T5rGkCp0I5h4H5myBFGW8CVydFjSpf4OomWOB+vLywRLLL7MYwH 1N7CNkbrp3t7NeKoijFBoahUVrY8+HuFfueiN10bJAfdcjLVMStKzK6L7Vt2nGM3 WrqV24/CPbQUID+JH+fmYX2UWkpYr96fkp5DQ7Gjvox+QlMZY+z62LevpwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOOvGHdDp6B39qHgZl/dqu9NEkn7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2NmNmJj ZS0xMjM3LTQ0MGMtYTNjOC00MWViZTY5ZTMwMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvY2Y2YmNl LTEyMzctNDQwYy1hM2M4LTQxZWJlNjllMzAzMS8xLzQ2OFlkME9ub0hmMm9lQm1Y OTJxNzAwU1Nmcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkJTANBgkqhkiG9w0BAQsFAAOCAQEATHeGong6ZFfG A1W1mj9MyV3/w1L6kYkgqxIACeNrUmcaM3ldEb0O+AeefM+3M2oQaFycEkW7rwde Y0ss/Y0fOmCQmecTCuPYnATxwRhUYv7hhBpy0OmOMxw+gsJV1k4Rd4A0c2OL2ebv rpA4lCd4UfWC9SdUOZTwmBATdmaFLpig+yyQCxV7vrecpV5qr8yGdhdhk0B1K5tc iq7geWbCyUmVD9w/M9RJmlcUxBvGG8pMTN3POgpwSTFu01PPfsA0NVlwLZApGQFW Qaf1ZkmOdUE1JI5SHoEYAD7PGWFh+8QkluA0Ch4va1azZZSvmqzD3ea26SV5QEnM jvpz2YsxEA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:39 2026 by rpki-client