This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer File: 89SUuLJxr7fGLxOX9xLPLc02QYU.cer (raw, json) Hash identifier: waBBmcGS1UirL7ZBweV843exIqFfa+FOW7//JyOVPVE= Subject key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8F8CC99C278848316ED7276F8A91C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206885 IP: 2001:678:284::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f8:cc:99:c2:78:84:83:16:ed:72:76:f8:a9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:25:e9:30:14:0d:7d:db:8e:37:34:31:93: 83:65:f4:ae:0e:83:14:01:31:0c:4f:78:cc:56:d6: 45:6c:6b:11:71:73:cc:81:15:11:5f:95:69:60:ce: 29:bb:dc:69:f6:e2:e6:37:89:2f:32:33:da:4a:68: 81:f2:b8:64:ae:a3:77:f4:45:12:b7:00:b9:c8:b8: e9:78:c1:38:e0:bd:af:59:40:cf:55:33:a9:f6:26: a8:ea:5a:c5:93:93:a9:fc:eb:b3:d8:99:95:43:e3: 35:ff:4e:57:3a:eb:8d:a8:a3:c6:28:ec:43:d3:09: f5:4b:a6:55:3a:5a:93:cb:d5:cc:f4:9a:10:c9:f8: 18:44:15:a8:6e:89:f1:7c:da:dc:e6:7b:6b:44:75: 37:01:40:f8:e2:93:2e:47:00:ff:f0:9a:28:e5:a9: 3f:71:6a:03:51:7e:2f:ce:c2:12:86:4b:20:68:dc: ee:b2:7f:f5:ef:f8:2f:a0:23:a6:41:fa:78:a0:6b: 85:b8:d5:9b:eb:ab:a0:f3:26:bc:3c:03:1c:df:3e: 80:49:ee:6b:f4:d0:5c:98:9b:ad:e5:73:73:17:1b: ca:49:4a:33:0a:ac:3e:96:49:38:d3:46:fd:c6:79: 40:fd:30:a6:e0:ff:dc:a7:ab:95:2d:9e:5b:71:38: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:284::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206885 Signature Algorithm: sha256WithRSAEncryption 82:9d:9f:19:2e:87:2a:ba:b7:03:94:05:b3:2c:ed:1e:38:80: 5b:e2:f8:f2:de:0e:f0:6c:ce:6b:1d:ab:bd:3b:3b:7a:3d:d3: a3:83:f1:0c:c0:3c:5f:c4:ee:b2:1f:b4:d2:95:b8:f9:67:be: 73:4d:c6:55:66:47:3b:86:13:57:45:96:01:07:16:c1:03:c6: 83:70:a6:8c:8a:7f:7d:2c:ed:e9:3d:af:b1:15:de:8e:37:bb: 92:a6:82:44:9b:23:39:54:2b:ed:9c:e4:22:c6:fd:e5:66:b0: 02:e8:a1:08:a2:d4:01:29:67:ea:cb:db:93:29:26:ab:86:75: ee:8f:c7:84:75:38:f0:df:8f:f3:2c:f5:82:ff:be:5b:c7:15: 0d:f1:25:a8:8c:ec:ca:e5:0f:8e:a6:f6:7b:6f:44:94:39:36: 3c:98:33:39:e2:bb:c0:f6:10:a1:13:74:2c:a3:c8:66:72:e2: 5b:b3:5a:98:c7:4c:de:eb:91:4d:9c:53:06:d5:fc:a5:f2:15: d8:87:5b:bd:1e:18:20:30:64:38:cd:77:79:a9:12:c6:a3:cf: 19:2c:e5:d2:fc:a5:e1:83:87:85:a1:86:a1:92:4b:cd:42:84: 2d:4f:b9:2b:a1:49:6a:7f:46:8f:91:24:63:8a:d7:7c:3a:3e: 1f:bf:87:94 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6yPjMmcJ4hIMW7XJ2+KkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2Q0OTRiOGIyNzFhZmI3YzYyZjEzOTdmNzEyY2YyZGNkMzY0MTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi0l6TAUDX3bjjc0MZODZfSuDoMU ATEMT3jMVtZFbGsRcXPMgRURX5VpYM4pu9xp9uLmN4kvMjPaSmiB8rhkrqN39EUS twC5yLjpeME44L2vWUDPVTOp9iao6lrFk5Op/Ouz2JmVQ+M1/05XOuuNqKPGKOxD 0wn1S6ZVOlqTy9XM9JoQyfgYRBWobonxfNrc5ntrRHU3AUD44pMuRwD/8Joo5ak/ cWoDUX4vzsIShksgaNzusn/17/gvoCOmQfp4oGuFuNWb66ug8ya8PAMc3z6ASe5r 9NBcmJut5XNzFxvKSUozCqw+lkk400b9xnlA/TCm4P/cp6uVLZ5bcTijYQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFPPUlLiyca+3xi8Tl/cSzy3NNkGFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzEyODU4 OC0zMjA3LTRmMzYtOTgzYy1mNzlhZDgxMjJlZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMTI4NTg4 LTMyMDctNGYzNi05ODNjLWY3OWFkODEyMmVmNS8xLzg5U1V1TEp4cjdmR0x4T1g5 eExQTGMwMlFZVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAKEMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMoJTANBgkqhkiG9w0BAQsFAAOCAQEAgp2fGS6HKrq3A5QFsyztHjiAW+L4 8t4O8GzOax2rvTs7ej3To4PxDMA8X8Tush+00pW4+We+c03GVWZHO4YTV0WWAQcW wQPGg3CmjIp/fSzt6T2vsRXejje7kqaCRJsjOVQr7ZzkIsb95WawAuihCKLUASln 6svbkykmq4Z17o/HhHU48N+P8yz1gv++W8cVDfElqIzsyuUPjqb2e29ElDk2PJgz OeK7wPYQoRN0LKPIZnLiW7NamMdM3uuRTZxTBtX8pfIV2IdbvR4YIDBkOM13eakS xqPPGSzl0vyl4YOHhaGGoZJLzUKELU+5K6FJan9Gj5EkY4rXfDo+H7+HlA== -----END CERTIFICATE-----Generated at Sun Feb 8 13:10:40 2026 by rpki-client