This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer File: 52m60wYYMt6bfXw3Nzf0NGxsBuY.cer (raw, json) Hash identifier: KhwjTskKaN9HyN5t3+uRwp3OPECyw3CdrDvn98p6Cks= Subject key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF21F2202D39298DD63F35C11C48BCD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201567 IP: 2001:678:13c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1f:22:02:d3:92:98:dd:63:f3:5c:11:c4:8b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e769bad3061832de9b7d7c373737f4346c6c06e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:70:6c:f8:ca:9f:20:63:f4:87:5b:33:06: d7:ce:cf:17:11:ba:04:f7:99:77:b6:7c:35:1e:38: 92:53:ab:71:0c:ac:8d:6e:ed:70:25:cb:3e:4f:3a: ad:05:fb:e6:d2:c8:ba:fc:91:37:80:f5:be:ea:a3: f7:10:87:70:7b:fb:33:1e:74:c3:ae:d1:cb:8d:e0: c1:43:6a:0f:aa:c2:a9:f0:5c:2b:58:17:e6:fc:8d: 6f:5f:c2:23:b0:15:cc:9b:75:ec:10:d7:55:af:d8: 87:f1:b0:a8:67:93:57:06:5a:1d:eb:e0:bd:2f:19: f7:d5:4e:14:e1:19:a1:5b:d6:e5:5f:e2:c2:c9:8b: d7:f4:0b:b6:e0:fe:bd:7b:c1:a9:25:cd:7b:4b:57: b6:2f:dd:c8:ba:8f:dc:df:8b:17:1c:a1:92:f6:84: bb:53:89:3e:f5:c1:74:fb:f0:d6:e5:88:e9:54:77: 80:93:f6:2b:88:b6:46:51:17:33:dd:55:56:93:15: 3c:76:f8:59:86:a6:fe:bf:e1:55:b1:51:61:b3:cb: dd:2a:1f:4c:f0:cd:4b:fe:87:7b:9d:2d:dc:8b:0f: 08:38:87:f8:0f:8d:68:67:f6:5e:19:46:0e:53:eb: 07:d9:03:d9:e8:83:83:e9:91:13:b0:1f:9b:0e:9b: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:13c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201567 Signature Algorithm: sha256WithRSAEncryption 1c:49:e5:a4:b3:83:91:30:d1:ac:72:a0:51:f0:c7:c4:42:ae: 75:a7:9a:bf:ca:16:53:e4:2f:d2:2d:b2:14:0c:31:6c:9e:2b: 86:8c:29:22:b8:0a:0b:78:1c:d9:d4:75:bb:ad:ed:d4:a0:93: b7:c7:2e:9c:b7:59:dc:75:2d:3e:0b:6f:6d:31:4a:00:52:08: c6:9a:9b:ed:d7:f3:13:f0:69:d8:4f:a7:2e:fc:d0:86:bc:9c: 7c:a0:63:50:06:03:24:ca:8a:42:65:a1:e8:5e:ec:64:1f:78: 5c:7a:5f:9a:8a:27:d9:48:ee:0f:a8:20:b8:3a:f5:c1:38:ad: 94:d2:d5:f6:e9:cc:4c:cc:fd:1e:fd:b0:55:6f:aa:fa:6d:73: 83:e0:8a:d4:05:8f:af:23:23:83:b6:ca:37:71:6a:a7:f2:5e: 6b:b6:01:ef:83:de:f9:3c:b0:de:47:9b:65:06:3f:a4:28:60: da:3e:a8:7d:12:d2:2f:b6:be:06:ab:c2:94:a4:18:c4:79:78: a8:cb:90:34:80:b2:80:11:92:09:37:84:d2:34:a7:e9:e4:71: d7:28:d8:5c:b6:2c:89:85:2b:50:ac:df:b4:cc:76:2d:44:e0: 57:df:dc:cc:12:c4:32:5c:40:0c:20:ea:74:0f:53:35:73:c8: e4:ca:a3:86 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt/8h8iAtOSmN1j81wRxIvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzY5YmFkMzA2MTgzMmRlOWI3ZDdjMzczNzM3ZjQzNDZjNmMwNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ5wbPjKnyBj9IdbMwbXzs8XEboE 95l3tnw1HjiSU6txDKyNbu1wJcs+TzqtBfvm0si6/JE3gPW+6qP3EIdwe/szHnTD rtHLjeDBQ2oPqsKp8FwrWBfm/I1vX8IjsBXMm3XsENdVr9iH8bCoZ5NXBlod6+C9 Lxn31U4U4RmhW9blX+LCyYvX9Au24P69e8GpJc17S1e2L93Iuo/c34sXHKGS9oS7 U4k+9cF0+/DW5YjpVHeAk/YriLZGURcz3VVWkxU8dvhZhqb+v+FVsVFhs8vdKh9M 8M1L/od7nS3ciw8IOIf4D41oZ/ZeGUYOU+sH2QPZ6IOD6ZETsB+bDpvX1wIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFOdputMGGDLem318Nzc39DRsbAbmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2QxYmNk YS05MjcwLTQzYTMtYmFhZS0yY2M4ZGM0ZjAyMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZDFiY2Rh LTkyNzAtNDNhMy1iYWFlLTJjYzhkYzRmMDIyMC8xLzUybTYwd1lZTXQ2YmZYdzNO emYwTkd4c0J1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAE8MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMTXzANBgkqhkiG9w0BAQsFAAOCAQEAHEnlpLODkTDRrHKgUfDHxEKudaea v8oWU+Qv0i2yFAwxbJ4rhowpIrgKC3gc2dR1u63t1KCTt8cunLdZ3HUtPgtvbTFK AFIIxpqb7dfzE/Bp2E+nLvzQhrycfKBjUAYDJMqKQmWh6F7sZB94XHpfmoon2Uju D6gguDr1wTitlNLV9unMTMz9Hv2wVW+q+m1zg+CK1AWPryMjg7bKN3Fqp/Jea7YB 74Pe+Tyw3kebZQY/pChg2j6ofRLSL7a+BqvClKQYxHl4qMuQNICygBGSCTeE0jSn 6eRx1yjYXLYsiYUrUKzftMx2LUTgV9/czBLEMlxADCDqdA9TNXPI5Mqjhg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:09 2026 by rpki-client