This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer File: 98_k1DTTh2RAV9JB6sb2nT7oHBI.cer (raw, json) Hash identifier: +8VSt/e3CbU70+vsEPlxuKl0BcAb3zes2IIoIGLZBfM= Subject key identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC986346B14938A8C652033AD3BC8C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a12:5d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:98:63:46:b1:49:38:a8:c6:52:03:3a:d3:bc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7cfe4d434d387644057d241eac6f69d3ee81c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:7e:e6:ee:e5:4c:6a:92:02:0c:38:71:3e: 4d:d3:25:05:42:5d:ef:93:1e:07:ba:4d:20:11:d6: ec:8c:23:0d:50:eb:03:cd:66:2f:a5:f3:ca:5e:6d: 04:d5:ca:69:2b:87:d6:81:8f:17:d5:29:54:5f:da: 92:57:0f:8b:77:c8:1b:9c:f7:eb:75:af:14:bf:fb: 8f:9f:73:b5:98:dc:59:fd:96:1c:d6:43:c3:f4:a7: 99:8c:21:05:f2:7b:74:c0:04:8c:1f:f7:f1:02:66: fe:c2:92:37:ce:58:9e:bf:f3:38:d1:ba:20:8f:4e: fb:b8:3b:5e:3f:f3:25:d5:ee:5b:2d:cf:96:a5:17: 06:1d:93:61:2e:c6:33:04:10:80:97:25:f6:82:a5: e8:e3:c2:de:7d:a8:7e:de:19:d6:44:74:a1:9d:99: 91:43:c4:5f:7d:48:81:7e:56:6c:9c:b1:73:84:15: 6f:ec:b9:6d:19:8d:ba:db:61:7e:f6:36:b1:45:1e: 00:49:d7:1c:04:e0:66:ed:01:e4:a9:64:7f:6b:f0: ab:cf:92:63:f9:39:66:61:be:3c:d7:c0:df:4e:3c: 1a:5b:e4:1e:5a:c5:53:1a:dc:04:6e:96:bc:3a:78: 12:a2:8b:e7:b4:cf:de:00:43:38:83:7b:d7:62:32: 22:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5d40::/29 Signature Algorithm: sha256WithRSAEncryption 55:a6:4a:10:65:b6:81:f7:bb:5a:30:59:02:fd:f1:e8:65:a3: 32:87:db:4d:4f:e4:d6:02:cd:8f:c8:3f:03:e1:88:c9:5d:af: 43:08:7f:bb:03:39:48:f1:d1:9b:e5:c2:fc:3a:9f:97:b9:96: 4a:c9:83:94:2f:3e:81:e8:f2:e6:24:72:bf:8c:49:2a:de:30: 22:c6:3c:18:e6:39:67:d8:1e:48:66:97:ac:75:56:50:45:e6: b5:04:67:ff:fb:c1:dc:b2:75:f3:2b:79:a4:7d:9d:18:a0:be: d2:0d:ab:f2:a0:2d:6d:ae:17:8f:ed:0d:46:88:7d:6d:e6:f5: da:30:a1:77:c8:87:fd:b8:52:34:a4:21:01:f4:ca:e2:fa:56: 81:22:8d:15:32:d6:3d:fc:f7:f7:f5:f6:4e:18:fb:7c:82:d6: f8:05:d3:c6:22:35:f0:bf:71:29:13:9c:c6:d7:b2:0b:3c:f3: 0f:64:16:16:95:66:0d:a3:d1:0e:c1:b7:b7:3b:43:2c:a9:89: 77:99:bb:a9:98:43:22:07:14:5a:e9:6f:bc:c5:dc:68:e9:ac: f3:fd:bf:1f:8c:0f:74:0a:06:79:03:48:db:dd:bd:40:3c:ab: 32:d8:ee:bd:b3:02:81:e5:ba:bb:aa:ff:7c:47:bd:da:87:ec: f0:8a:51:04 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt57JhjRrFJOKjGUgM607yMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2NmZTRkNDM0ZDM4NzY0NDA1N2QyNDFlYWM2ZjY5ZDNlZTgxYzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5t+5u7lTGqSAgw4cT5N0yUFQl3v kx4Huk0gEdbsjCMNUOsDzWYvpfPKXm0E1cppK4fWgY8X1SlUX9qSVw+Ld8gbnPfr da8Uv/uPn3O1mNxZ/ZYc1kPD9KeZjCEF8nt0wASMH/fxAmb+wpI3zliev/M40bog j077uDteP/Ml1e5bLc+WpRcGHZNhLsYzBBCAlyX2gqXo48Lefah+3hnWRHShnZmR Q8RffUiBflZsnLFzhBVv7LltGY2622F+9jaxRR4ASdccBOBm7QHkqWR/a/Crz5Jj +TlmYb4818DfTjwaW+QeWsVTGtwEbpa8OngSoovntM/eAEM4g3vXYjIiqQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFPfP5NQ004dkQFfSQerG9p0+6BwSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzBjODAw OC04YTUyLTQxNzYtYjY5My1jNDA1NDQyODFlYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvMGM4MDA4 LThhNTItNDE3Ni1iNjkzLWM0MDU0NDI4MWViMC8xLzk4X2sxRFRUaDJSQVY5SkI2 c2IyblQ3b0hCSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhJdQDANBgkqhkiG9w0BAQsFAAOCAQEAVaZK EGW2gfe7WjBZAv3x6GWjMofbTU/k1gLNj8g/A+GIyV2vQwh/uwM5SPHRm+XC/Dqf l7mWSsmDlC8+gejy5iRyv4xJKt4wIsY8GOY5Z9geSGaXrHVWUEXmtQRn//vB3LJ1 8yt5pH2dGKC+0g2r8qAtba4Xj+0NRoh9beb12jChd8iH/bhSNKQhAfTK4vpWgSKN FTLWPfz39/X2Thj7fILW+AXTxiI18L9xKROcxteyCzzzD2QWFpVmDaPRDsG3tztD LKmJd5m7qZhDIgcUWulvvMXcaOms8/2/H4wPdAoGeQNI2929QDyrMtjuvbMCgeW6 u6r/fEe92ofs8IpRBA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:44 2026 by rpki-client