This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.cer (raw, json) Hash identifier: UXpJIDiPEji25wrGsj8KFggRQru96yWyARkoTM0DRoU= Subject key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2906B5EBE389506B6DC792341A093 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211688 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:90:6b:5e:be:38:95:06:b6:dc:79:23:41:a0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:f9:4d:93:a0:89:28:64:fb:1f:d2:58:5c: 28:7d:03:d4:52:5e:66:07:4d:91:89:7a:dd:a7:c2: fe:36:fa:1e:f4:b6:da:28:65:ad:b9:37:a1:c9:2a: a9:c9:09:7e:28:82:26:85:94:f0:5a:5e:36:84:3c: 18:94:67:0d:bd:fd:da:9c:c6:9c:d9:23:f0:29:19: ab:53:a5:cb:9d:b6:14:32:d7:c1:e2:fc:6a:0f:9c: c7:9e:5b:61:f1:75:37:e6:5a:9a:5b:ff:8b:32:50: c2:8b:e4:6c:e7:ed:e8:94:42:7e:54:65:7b:e0:a7: 06:0d:d2:67:9f:c9:79:04:ab:0f:53:d2:b5:a6:e1: 9f:97:f5:86:71:26:e3:ae:3d:cb:8a:17:78:db:60: 41:59:74:a7:61:41:8d:b5:39:dc:02:08:27:17:f6: cd:ea:aa:4a:19:44:89:d7:4b:d1:ae:ce:d5:99:d6: ea:e6:15:12:d4:da:4b:e5:f2:8f:92:d8:8d:3f:9d: 51:89:18:52:6a:37:de:c5:f7:f8:28:31:27:e3:91: 27:f7:24:6b:e3:0a:6a:57:6a:fc:60:6a:df:99:64: 33:70:d3:47:3a:8a:57:99:86:f7:57:76:24:36:5b: c0:57:d5:67:5e:61:86:ed:63:12:17:49:61:0a:e2: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211688 Signature Algorithm: sha256WithRSAEncryption 8e:f2:a7:f3:9c:a5:18:9b:30:bd:9c:fc:68:9c:d9:31:77:75: d6:7a:c0:5f:ea:3f:36:1f:93:f7:bd:f5:54:21:5c:3d:ac:89: 82:ac:05:1e:4f:df:6b:10:6e:ed:53:e4:0a:1b:c2:20:c2:e6: 69:1b:0d:43:74:d4:a1:54:22:69:bc:8e:e2:cb:8d:13:e3:49: bb:4d:15:f3:af:4e:63:a7:11:22:0a:25:5b:64:f1:f0:9a:fb: 88:a3:49:e2:bf:71:ec:71:5b:8a:e3:af:d3:d6:cb:73:0e:d7: 32:26:fd:37:63:db:78:5a:62:eb:f6:9e:2c:06:85:0e:23:6b: 54:8b:50:50:99:5e:2e:c3:cf:e6:20:d9:36:e3:93:9e:35:9d: 0a:d9:bb:90:3c:60:6c:3b:ac:ba:38:69:b3:bf:03:13:4d:0e: 0f:ef:35:9d:7a:51:08:59:bb:1e:13:0c:27:8c:93:5c:7f:84: ae:da:a1:9d:72:a7:01:3b:95:b7:64:a6:8f:a9:f0:4e:eb:7a: 33:66:2f:f7:07:a6:21:03:fa:41:09:03:45:02:19:11:78:df: 44:6b:db:de:91:9b:0d:ea:9b:93:52:02:d3:b9:3a:53:77:f0: 6c:17:8b:da:85:98:43:fd:82:b7:1a:00:1f:f9:31:44:ab:f1: c6:a5:74:84 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/8pBrXr44lQa23HkjQaCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2IyYTIzZDliMDVmNTc1NzlkZTJmMDI0NDliNjY2MDNlM2U1NzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWn5TZOgiShk+x/SWFwofQPUUl5m B02RiXrdp8L+Nvoe9LbaKGWtuTehySqpyQl+KIImhZTwWl42hDwYlGcNvf3anMac 2SPwKRmrU6XLnbYUMtfB4vxqD5zHnlth8XU35lqaW/+LMlDCi+Rs5+3olEJ+VGV7 4KcGDdJnn8l5BKsPU9K1puGfl/WGcSbjrj3Lihd422BBWXSnYUGNtTncAggnF/bN 6qpKGUSJ10vRrs7Vmdbq5hUS1NpL5fKPktiNP51RiRhSajfexff4KDEn45En9yRr 4wpqV2r8YGrfmWQzcNNHOopXmYb3V3YkNlvAV9VnXmGG7WMSF0lhCuK4qQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPeyoj2bBfV1ed4vAkSbZmA+Plc6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzBhMWI3 Zi1kZmQyLTQ2ZjktODMxMy01YmU2YTc1OWYzMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvMGExYjdm LWRmZDItNDZmOS04MzEzLTViZTZhNzU5ZjMxOC8xLzk3S2lQWnNGOVhWNTNpOENS SnRtWUQ0LVZ6by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM66DANBgkqhkiG9w0BAQsFAAOCAQEAjvKn85ylGJsw vZz8aJzZMXd11nrAX+o/Nh+T9731VCFcPayJgqwFHk/faxBu7VPkChvCIMLmaRsN Q3TUoVQiabyO4suNE+NJu00V869OY6cRIgolW2Tx8Jr7iKNJ4r9x7HFbiuOv09bL cw7XMib9N2PbeFpi6/aeLAaFDiNrVItQUJleLsPP5iDZNuOTnjWdCtm7kDxgbDus ujhps78DE00OD+81nXpRCFm7HhMMJ4yTXH+ErtqhnXKnATuVt2Smj6nwTut6M2Yv 9wemIQP6QQkDRQIZEXjfRGvb3pGbDeqbk1IC07k6U3fwbBeL2oWYQ/2CtxoAH/kx RKvxxqV0hA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:22 2026 by rpki-client