This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer File: 97LAktArE86qejP_BXqECmjXFSE.cer (raw, json) Hash identifier: 69142DEi86tHMIqNfR4WbayaMgVTpalld5Kt+65BHgc= Subject key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12AA61286599BC2AE4B4EDF3389A32 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211424 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:aa:61:28:65:99:bc:2a:e4:b4:ed:f3:38:9a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:ea:4a:90:6e:fe:c4:a3:58:9b:20:36:ba: f8:c5:c6:7f:80:72:15:86:78:35:99:98:79:05:b0: 0a:fc:82:b0:57:f1:da:92:78:1c:e7:56:14:52:1e: 89:9f:2f:0d:dc:2a:dd:8b:98:17:9c:0b:96:6b:07: b3:69:37:46:c5:b1:ac:40:d4:46:13:f0:5a:53:26: cb:72:6a:be:b0:c3:3e:5e:b1:0f:f6:3d:93:e7:12: 93:c1:27:7c:6f:e6:15:21:4f:ba:1e:eb:86:51:1b: 5c:6a:52:bb:a7:fb:6e:f6:9c:35:47:e8:01:81:3e: 41:e6:95:88:92:5d:ba:45:37:ad:33:12:ba:e8:2c: 94:0d:ed:cc:d8:97:9d:c2:21:95:f8:57:36:9d:63: c5:fd:ab:90:8f:a3:ec:db:f4:13:47:eb:a9:c5:6a: ff:c0:37:64:d8:61:28:a4:fa:0c:14:c0:31:e5:3f: 86:39:41:65:0e:66:d4:ea:c7:d0:82:7d:e5:0e:f9: f7:eb:9d:1a:b8:8f:72:43:60:e3:19:f4:25:3c:46: fa:2d:e6:ce:17:3e:e5:0f:bc:d5:39:44:e5:91:f7: 30:4f:2a:a3:c4:37:03:fa:c7:e9:79:0f:4b:c9:01: c7:bd:dd:9e:77:4d:57:8a:46:ce:7a:7c:4e:27:08: 55:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211424 Signature Algorithm: sha256WithRSAEncryption 57:66:6f:d4:2c:93:19:3e:ce:d1:bf:e3:15:cd:c3:7c:d4:5e: 71:84:b9:1b:1c:bc:00:15:f9:67:0e:3b:7b:77:88:3e:fd:a0: 91:97:5b:dc:9f:10:23:e8:19:ce:f2:39:8f:4e:41:a6:be:3f: 12:6b:66:74:a8:83:37:ff:dc:64:dd:da:95:41:60:77:23:a1: 15:23:1f:1e:cb:b6:26:60:3f:be:a5:70:28:4b:a7:41:4c:fb: 3f:54:34:f7:fc:95:9b:7e:ed:ff:f1:50:a8:bb:a7:1d:36:81: 0e:0a:40:2c:97:78:1d:03:b5:bc:39:52:7a:78:eb:66:cf:c2: 3e:20:d7:11:99:d7:78:1e:8b:32:e3:a5:b3:87:48:c9:e2:74: 9d:e7:90:2d:2d:6f:06:61:15:b2:c1:50:c0:54:dd:5a:f9:34: 04:5a:d6:35:57:04:be:25:a9:65:6f:35:14:45:67:32:36:e9: cf:bb:ef:d2:92:a2:d9:e1:14:14:e5:7c:ce:94:d6:09:47:9e: 8d:1f:24:a3:24:55:ef:67:9e:9a:aa:b0:eb:42:6d:04:41:39: 3b:8a:44:63:85:93:dd:e6:c4:61:3b:e4:53:e9:a1:70:e4:17: bb:8a:9c:6b:13:0f:57:fe:34:b5:a4:0f:d2:f2:0f:94:c1:df: 80:ce:74:44 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8EqphKGWZvCrktO3zOJoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2IyYzA5MmQwMmIxM2NlYWE3YTMzZmYwNTdhODQwYTY4ZDcxNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+HqSpBu/sSjWJsgNrr4xcZ/gHIV hng1mZh5BbAK/IKwV/Hakngc51YUUh6Jny8N3Crdi5gXnAuWawezaTdGxbGsQNRG E/BaUybLcmq+sMM+XrEP9j2T5xKTwSd8b+YVIU+6HuuGURtcalK7p/tu9pw1R+gB gT5B5pWIkl26RTetMxK66CyUDe3M2JedwiGV+Fc2nWPF/auQj6Ps2/QTR+upxWr/ wDdk2GEopPoMFMAx5T+GOUFlDmbU6sfQgn3lDvn3650auI9yQ2DjGfQlPEb6LebO Fz7lD7zVOUTlkfcwTyqjxDcD+sfpeQ9LyQHHvd2ed01XikbOenxOJwhVpQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPeywJLQKxPOqnoz/wV6hApo1xUhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2NiYjY3 Zi1iYjczLTRiNmEtYjFkZC0zZjA1MjU3MTljOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvY2JiNjdm LWJiNzMtNGI2YS1iMWRkLTNmMDUyNTcxOWM5NC8xLzk3TEFrdEFyRTg2cWVqUF9C WHFFQ21qWEZTRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM54DANBgkqhkiG9w0BAQsFAAOCAQEAV2Zv1CyTGT7O 0b/jFc3DfNRecYS5Gxy8ABX5Zw47e3eIPv2gkZdb3J8QI+gZzvI5j05Bpr4/Emtm dKiDN//cZN3alUFgdyOhFSMfHsu2JmA/vqVwKEunQUz7P1Q09/yVm37t//FQqLun HTaBDgpALJd4HQO1vDlSenjrZs/CPiDXEZnXeB6LMuOls4dIyeJ0neeQLS1vBmEV ssFQwFTdWvk0BFrWNVcEviWpZW81FEVnMjbpz7vv0pKi2eEUFOV8zpTWCUeejR8k oyRV72eemqqw60JtBEE5O4pEY4WT3ebEYTvkU+mhcOQXu4qcaxMPV/40taQP0vIP lMHfgM50RA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:24 2026 by rpki-client