This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer File: 87qQxx60ywFpyUhD5ccv13dQGQY.cer (raw, json) Hash identifier: 8u5XjHDSEpjLko/1IaDo/9n+zz3yF0xEwvs+5kgjz1E= Subject key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF122E3AA202DBB1665DE5C9AF4C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209651 IP: 193.104.133.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f1:22:e3:aa:20:2d:bb:16:65:de:5c:9a:f4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:fe:f2:97:b5:15:8e:c6:25:0d:44:19:54: d8:9f:e8:2a:c0:b9:16:d3:a4:0a:6f:8c:d9:30:8f: 53:be:db:39:66:aa:21:0f:79:fc:ad:9e:fb:f5:3a: 47:6b:5f:f3:32:31:1b:6e:0c:15:74:1a:40:1e:fb: 7e:b9:01:2d:36:e8:9b:2a:3e:64:e8:25:7c:48:56: 87:1a:88:18:84:98:68:1a:b5:65:49:77:61:05:9f: e5:6a:d4:bb:6f:d7:eb:ab:87:2f:22:e8:f8:98:8b: 67:14:bd:30:f0:4e:2c:f8:67:76:08:14:92:22:9a: 61:57:39:73:b9:9e:fb:e6:33:55:e8:58:da:03:f5: e6:46:a3:8e:f2:fb:38:a9:5e:9b:54:de:4d:f3:52: 30:1a:cf:e6:2b:52:62:82:68:0a:1f:f6:74:e3:fa: 5d:96:87:e4:fd:c8:43:ea:d1:a7:b4:22:84:1c:44: 7b:cc:50:3a:1d:e3:39:4b:84:01:78:57:f3:23:d0: 4c:b3:90:15:15:89:4c:3a:cf:9d:49:7a:79:a1:be: 3f:cc:a8:81:39:72:ea:de:02:0b:ba:e2:21:80:f8: e6:7b:e8:54:57:9f:b2:9f:88:25:32:b6:52:d3:2f: bf:72:65:a2:60:03:8f:7b:9c:d3:91:b2:d8:cf:8a: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.133.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209651 Signature Algorithm: sha256WithRSAEncryption 80:45:ba:c9:f3:a2:b5:61:21:22:62:d1:b7:1e:f4:2d:f7:b4: 4e:da:96:7b:68:49:f3:3b:30:04:1e:c3:1e:1e:e4:6e:0f:61: b2:0c:f4:ed:a9:ec:75:cd:71:c3:c6:c1:1c:12:23:ff:13:41: 04:43:c4:b9:6d:65:71:d5:6b:0e:73:9b:ab:fd:87:c5:97:cf: d9:0e:1f:47:c1:0b:8d:dd:7c:fe:6d:cd:b6:d8:6c:d1:8b:be: a6:4b:e2:aa:69:72:4f:2c:42:a0:00:09:16:37:22:5b:3f:79: 98:9a:3b:38:45:6d:99:c7:ad:4e:38:3b:29:02:1b:10:38:26: 9c:28:d4:41:57:dd:02:aa:58:cf:fb:76:5f:3a:6e:2a:61:49: 5f:57:9c:4d:68:14:63:80:b0:98:3c:f6:68:00:92:e8:bc:f1: 69:2e:14:98:f9:6a:33:1d:06:4e:90:33:f7:9d:69:aa:d3:15: 9d:21:a3:74:ac:9f:2c:16:2f:92:32:df:22:54:3a:a3:7f:19: 33:8f:e0:55:d4:f0:e4:85:88:68:3c:ba:74:90:f0:57:c3:09: c1:cd:15:64:62:c1:1d:bd:72:bb:d9:7b:ba:d8:89:4c:fa:91: 50:46:21:35:cd:21:20:16:cc:bf:a3:22:72:fd:46:4a:34:9f: 2d:7f:27:40 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt26vEi46ogLbsWZd5cmvTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2JhOTBjNzFlYjRjYjAxNjljOTQ4NDNlNWM3MmZkNzc3NTAxOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAren+8pe1FY7GJQ1EGVTYn+gqwLkW 06QKb4zZMI9Tvts5ZqohD3n8rZ779TpHa1/zMjEbbgwVdBpAHvt+uQEtNuibKj5k 6CV8SFaHGogYhJhoGrVlSXdhBZ/latS7b9frq4cvIuj4mItnFL0w8E4s+Gd2CBSS IpphVzlzuZ775jNV6FjaA/XmRqOO8vs4qV6bVN5N81IwGs/mK1JigmgKH/Z04/pd lofk/chD6tGntCKEHER7zFA6HeM5S4QBeFfzI9BMs5AVFYlMOs+dSXp5ob4/zKiB OXLq3gILuuIhgPjme+hUV5+yn4glMrZS0y+/cmWiYAOPe5zTkbLYz4riuwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPO6kMcetMsBaclIQ+XHL9d3UBkGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2FiY2Mw Ny05YTYwLTQ5ZjYtYTFlZi04ZDUyOTAyYWM4MzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvYWJjYzA3 LTlhNjAtNDlmNi1hMWVmLThkNTI5MDJhYzgzMC8xLzg3cVF4eDYweXdGcHlVaEQ1 Y2N2MTNkUUdRWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWiFMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMy8zANBgkqhkiG9w0BAQsFAAOCAQEAgEW6yfOitWEhImLRtx70Lfe0TtqWe2hJ 8zswBB7DHh7kbg9hsgz07ansdc1xw8bBHBIj/xNBBEPEuW1lcdVrDnObq/2HxZfP 2Q4fR8ELjd18/m3Ntths0Yu+pkviqmlyTyxCoAAJFjciWz95mJo7OEVtmcetTjg7 KQIbEDgmnCjUQVfdAqpYz/t2XzpuKmFJX1ecTWgUY4CwmDz2aACS6LzxaS4UmPlq Mx0GTpAz951pqtMVnSGjdKyfLBYvkjLfIlQ6o38ZM4/gVdTw5IWIaDy6dJDwV8MJ wc0VZGLBHb1yu9l7utiJTPqRUEYhNc0hIBbMv6Micv1GSjSfLX8nQA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:42 2026 by rpki-client