This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer File: Afp6rPiShM693j1MEkYvxE3rw4Q.cer (raw, json) Hash identifier: VSQN5rZ1rJdj/lIWP50jTU2EDN60eaDPfLRdcZzvBO8= Subject key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36C4F114F5A315C6CB631BB04B5F02 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60231 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c4:f1:14:f5:a3:15:c6:cb:63:1b:b0:4b:5f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01fa7aacf89284cebdde3d4c12462fc44debc384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:32:e3:33:ea:1b:ec:e2:7e:26:16:2b:45:f7: 40:57:50:17:3e:8c:83:fb:81:7d:17:1c:28:eb:e3: a9:bf:b7:12:41:ea:35:f1:be:1e:ec:e3:ee:6b:87: 28:8c:62:d1:2b:52:79:16:51:b1:6d:73:83:4e:00: 59:23:ff:e2:2a:cc:81:be:46:a9:05:be:a6:f9:1b: 5d:c6:d0:51:3f:2f:7a:2e:b9:05:37:ce:ea:07:e8: 44:08:a1:34:5a:5f:af:35:91:92:a7:a3:24:3f:bb: a2:66:71:e1:f1:eb:e5:3f:80:82:b4:a6:96:e8:6b: 46:d3:77:9b:8c:46:cf:62:ef:58:6f:7c:8d:8c:f2: d1:73:be:34:9a:1d:dd:13:5f:6b:92:1a:fa:bf:db: ec:64:16:d4:ed:14:9f:9f:d5:30:86:df:76:63:74: a2:a5:63:bd:6d:02:a3:b4:6b:72:ba:5b:53:60:52: 13:8c:3b:82:a7:6f:e3:97:01:20:88:41:fc:8b:0d: b0:70:96:65:b9:3c:17:7b:65:e6:c1:86:cf:58:34: 4e:8b:c6:6c:11:e1:bc:4c:82:1f:b9:e0:5c:aa:89: 79:16:45:9e:37:c6:57:0e:c5:26:0d:c8:4f:52:f9: 11:8e:6a:d7:bc:bf:5c:a0:d7:10:d0:6a:12:8c:a7: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 60231 Signature Algorithm: sha256WithRSAEncryption 4b:94:65:42:cc:c6:3f:dc:b7:c5:8a:16:16:30:53:2f:f6:e2: 63:85:a5:f9:01:44:b7:8c:ef:d0:f6:da:cb:56:17:e4:e8:9b: 2a:8a:3c:ba:5f:ad:2b:57:5a:aa:50:23:91:ad:f2:a2:3d:ac: fd:e7:60:09:1c:32:f4:dd:d0:eb:0c:91:db:46:42:1f:a8:a1: 00:80:7c:32:f4:e6:72:6b:ac:1b:a8:2a:da:c9:c7:40:88:69: 27:99:1d:cd:fb:af:13:ab:4f:05:f1:c3:e9:16:52:7e:7d:5d: 7e:09:67:04:5d:59:0f:24:f6:88:49:a0:0c:a9:56:c2:72:38: 04:2f:0f:2d:1d:e9:7d:77:79:fc:57:dc:aa:3e:e0:cf:10:b9: 98:de:d1:c0:07:80:c7:d3:df:f8:d1:0b:52:0d:04:48:fc:79: 8f:c5:9e:a9:f3:0b:44:96:43:44:0d:34:7b:f6:f3:44:90:2c: 65:41:c1:ca:ea:2e:59:ab:d3:06:65:d3:82:01:e3:d7:dd:0f: da:67:7f:d8:11:27:92:f1:47:84:b9:37:e8:07:0e:59:0b:47: 7c:21:89:e5:7f:f3:d6:fb:27:28:0f:47:44:72:7e:26:0d:cb: 09:e9:23:67:3a:cc:f4:99:25:00:54:a5:2d:0e:bc:77:45:da: 56:7d:d1:ee -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NsTxFPWjFcbLYxuwS18CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWZhN2FhY2Y4OTI4NGNlYmRkZTNkNGMxMjQ2MmZjNDRkZWJjMzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TLjM+ob7OJ+JhYrRfdAV1AXPoyD +4F9Fxwo6+Opv7cSQeo18b4e7OPua4cojGLRK1J5FlGxbXODTgBZI//iKsyBvkap Bb6m+RtdxtBRPy96LrkFN87qB+hECKE0Wl+vNZGSp6MkP7uiZnHh8evlP4CCtKaW 6GtG03ebjEbPYu9Yb3yNjPLRc740mh3dE19rkhr6v9vsZBbU7RSfn9Uwht92Y3Si pWO9bQKjtGtyultTYFITjDuCp2/jlwEgiEH8iw2wcJZluTwXe2XmwYbPWDROi8Zs EeG8TIIfueBcqol5FkWeN8ZXDsUmDchPUvkRjmrXvL9coNcQ0GoSjKdCXwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFAH6eqz4koTOvd49TBJGL8RN68OEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzY0NWUx YS1lZjcyLTQ5MjItYWE5YS03YmU0M2VkZGYyY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvNjQ1ZTFh LWVmNzItNDkyMi1hYTlhLTdiZTQzZWRkZjJjYS8xL0FmcDZyUGlTaE02OTNqMU1F a1l2eEUzcnc0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDrRzANBgkqhkiG9w0BAQsFAAOCAQEAS5RlQszGP9y3 xYoWFjBTL/biY4Wl+QFEt4zv0Pbay1YX5OibKoo8ul+tK1daqlAjka3yoj2s/edg CRwy9N3Q6wyR20ZCH6ihAIB8MvTmcmusG6gq2snHQIhpJ5kdzfuvE6tPBfHD6RZS fn1dfglnBF1ZDyT2iEmgDKlWwnI4BC8PLR3pfXd5/Ffcqj7gzxC5mN7RwAeAx9Pf +NELUg0ESPx5j8WeqfMLRJZDRA00e/bzRJAsZUHByuouWavTBmXTggHj190P2md/ 2BEnkvFHhLk36AcOWQtHfCGJ5X/z1vsnKA9HRHJ+Jg3LCekjZzrM9JklAFSlLQ68 d0XaVn3R7g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:45 2026 by rpki-client