This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer File: 69xd5v5ftQVVoFyXxbDdR369C_U.cer (raw, json) Hash identifier: p8JyBukZsHfhmQxBeaSXPDdGgU2rMM9oCJdoifewcBU= Subject key identifier: EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791032F180C6029DE49800FEA149AE58 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.30.136.0/22 IP: 2001:67c:6b4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:32:f1:80:c6:02:9d:e4:98:00:fe:a1:49:ae:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:b9:a2:26:21:70:06:c7:2f:2e:4d:12:50: c1:65:53:e5:78:12:14:73:7d:dc:03:fe:3e:a0:2e: 04:10:c4:d6:6a:9e:c2:fa:45:44:f1:c9:e9:10:0c: f8:33:9c:97:67:d4:fa:30:23:86:93:ee:9c:aa:8a: 38:48:07:53:ea:72:06:c4:da:bc:ec:db:9e:52:1d: d2:9d:a1:19:23:b0:74:52:2b:d5:29:44:91:17:3a: fa:57:5e:61:61:39:ac:33:5d:23:db:65:d7:ec:19: 0d:e2:38:48:cd:ec:c4:32:35:4b:38:2d:4e:f1:d2: 46:a9:f7:31:fb:9f:41:e6:9d:9a:b8:82:75:75:9b: ae:6e:b4:85:df:b9:b3:47:88:24:ab:a7:73:88:4d: f3:f9:52:84:d6:0c:22:5a:0c:fe:49:5b:22:ce:65: 5f:8b:27:b3:af:b6:b2:a1:89:7d:7f:a1:2d:5c:37: e1:c7:f7:0d:59:0b:d9:26:c8:a6:26:e8:06:9e:d3: 7e:3a:c7:6c:da:75:17:f2:32:79:79:1e:99:1c:cb: 63:15:70:13:31:be:1e:50:3e:f8:84:f5:92:8a:61: c8:64:56:e0:c9:80:23:2e:c9:ae:7c:fd:be:ea:70: e1:2d:e1:7c:5a:5a:43:98:1a:77:0f:ed:23:d3:dd: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.136.0/22 IPv6: 2001:67c:6b4::/48 Signature Algorithm: sha256WithRSAEncryption 35:54:d9:a4:42:73:41:97:c2:fc:dc:b0:56:15:15:23:13:d4: 17:8b:81:97:49:66:f2:ff:75:61:9f:f9:af:d5:d9:48:cb:cf: ed:9d:4c:d7:10:c5:8f:c9:b9:7e:f8:54:d6:0a:5d:ec:00:5e: 99:29:66:30:17:16:cd:8b:2f:d8:33:96:5a:c8:89:e0:03:5e: 38:5e:03:e9:5f:b7:5a:74:0b:95:aa:19:df:68:c8:28:01:0f: 4c:c7:a6:a9:5d:64:df:f4:28:07:52:7e:7c:ee:b4:39:2f:2a: 05:d0:5e:7d:9b:f3:f0:64:da:5d:f1:e5:e6:07:41:3a:36:31: 94:85:f7:c1:45:e8:22:96:cb:c0:4c:3b:7b:fb:0f:56:73:d5: 47:d2:75:1b:03:43:46:c2:3a:1a:81:8e:24:cd:20:e2:64:06: f2:33:2e:9e:78:c5:d1:94:d1:80:1f:16:3d:25:79:ee:53:d4: be:3d:b5:00:91:92:37:70:19:d0:5f:9c:9a:46:56:b9:3c:af: 58:4d:23:45:36:10:1d:3d:c3:e3:3b:d9:78:a5:65:4f:84:7e: 12:73:d8:8c:25:4b:8e:07:11:31:df:01:6b:e9:e2:9f:60:00: b0:5d:ef:3c:37:1f:70:e0:56:9e:43:24:82:65:81:3a:c6:2a: 5a:48:7a:44 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt5EDLxgMYCneSYAP6hSa5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmRjNWRlNmZlNWZiNTA1NTVhMDVjOTdjNWIwZGQ0NzdlYmQwYmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwm5oiYhcAbHLy5NElDBZVPleBIU c33cA/4+oC4EEMTWap7C+kVE8cnpEAz4M5yXZ9T6MCOGk+6cqoo4SAdT6nIGxNq8 7NueUh3SnaEZI7B0UivVKUSRFzr6V15hYTmsM10j22XX7BkN4jhIzezEMjVLOC1O 8dJGqfcx+59B5p2auIJ1dZuubrSF37mzR4gkq6dziE3z+VKE1gwiWgz+SVsizmVf iyezr7ayoYl9f6EtXDfhx/cNWQvZJsimJugGntN+Osds2nUX8jJ5eR6ZHMtjFXAT Mb4eUD74hPWSimHIZFbgyYAjLsmufP2+6nDhLeF8WlpDmBp3D+0j093UOQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFOvcXeb+X7UFVaBcl8Ww3Ud+vQv1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwL2U0YTY2 OC1mYmQ2LTQ1NTMtYWU5Zi0wYmJiMjM4MWJhODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvZTRhNjY4 LWZiZDYtNDU1My1hZTlmLTBiYmIyMzgxYmE4OC8xLzY5eGQ1djVmdFFWVm9GeVh4 YkRkUjM2OUNfVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCwR6IMA8EAgACMAkDBwAgAQZ8BrQwDQYJKoZI hvcNAQELBQADggEBADVU2aRCc0GXwvzcsFYVFSMT1BeLgZdJZvL/dWGf+a/V2UjL z+2dTNcQxY/JuX74VNYKXewAXpkpZjAXFs2LL9gzllrIieADXjheA+lft1p0C5Wq Gd9oyCgBD0zHpqldZN/0KAdSfnzutDkvKgXQXn2b8/Bk2l3x5eYHQTo2MZSF98FF 6CKWy8BMO3v7D1Zz1UfSdRsDQ0bCOhqBjiTNIOJkBvIzLp54xdGU0YAfFj0lee5T 1L49tQCRkjdwGdBfnJpGVrk8r1hNI0U2EB09w+M72XilZU+EfhJz2IwlS44HETHf AWvp4p9gALBd7zw3H3DgVp5DJIJlgTrGKlpIekQ= -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:51 2026 by rpki-client