This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F-6GQi--PqSClo1Du-gwphS8MFg.cer File: F-6GQi--PqSClo1Du-gwphS8MFg.cer (raw, json) Hash identifier: 24u9gKeRGM3/YWJQZEgIY3Aylv8QgCgzqlqyg2m8Bu4= Subject key identifier: 17:EE:86:42:2F:BE:3E:A4:82:96:8D:43:BB:E8:30:A6:14:BC:30:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DF6E77BFAB486FCB05739EFD05B5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206526 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f6:e7:7b:fa:b4:86:fc:b0:57:39:ef:d0:5b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17ee86422fbe3ea482968d43bbe830a614bc3058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:18:f0:50:46:67:94:70:69:97:66:40:dd: 3a:99:6e:33:cb:30:d0:b4:90:14:9d:ed:64:54:23: 3e:be:4b:7e:11:5d:d6:20:52:ed:c0:47:1a:33:37: 3d:45:42:bc:80:68:a8:7d:ff:5d:75:88:06:a7:64: 99:6e:91:f5:f7:18:c4:53:e3:ea:d4:4c:9e:a0:5e: f7:c7:b3:d3:ca:9d:b5:a8:45:93:2e:d4:38:bd:2b: d8:6c:6e:07:d9:b3:58:d8:76:d0:27:1c:b7:12:56: ea:53:58:13:81:3f:a3:61:b9:74:ef:1c:c6:c7:33: 46:b0:11:62:c2:4b:75:2e:4a:45:92:47:de:ba:ae: 8f:d8:f4:ea:95:22:f4:5b:44:47:76:ba:81:2c:be: f4:e5:1f:85:2b:05:79:74:94:66:a8:2f:97:c9:4a: b0:50:d7:fa:ff:14:bd:ea:34:34:ae:51:54:a3:cf: 9f:d7:65:27:ab:3f:e4:33:6b:d8:09:95:7e:85:d9: cb:20:26:35:31:c9:a1:cd:27:75:de:ab:80:ee:55: 3b:ef:4a:51:a8:32:19:7e:63:b0:14:2e:ff:c9:42: 76:cb:4f:22:a3:b3:cc:ef:ed:06:27:ae:a2:55:99: 68:7e:3c:cd:10:6c:fb:9c:6a:f0:41:2f:dc:7e:ec: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EE:86:42:2F:BE:3E:A4:82:96:8D:43:BB:E8:30:A6:14:BC:30:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206526 Signature Algorithm: sha256WithRSAEncryption 2c:fd:0c:3b:23:ee:ab:c5:72:8c:c0:09:e2:31:b0:9e:db:c2: 15:3d:e8:d5:60:27:1a:bb:44:dc:df:9e:98:e2:14:12:d6:01: 9c:2e:b6:34:cb:f5:41:79:19:2b:63:4f:bf:4d:81:5b:c8:a6: 9d:44:e8:e6:89:da:6e:e4:b8:05:80:92:d6:c6:7a:92:1f:fb: b4:be:1d:7e:06:d2:ae:a2:83:fb:b0:38:79:d5:7c:91:0c:ae: 73:8d:82:b7:2a:95:8f:35:c9:d0:f4:98:f6:16:1e:42:6b:1f: 01:04:d0:02:79:0e:73:27:ee:09:5c:00:30:df:f3:fa:07:01: 35:92:fd:61:f1:7c:50:7c:61:8b:5e:b0:f4:bc:78:e2:f8:ba: e8:e2:f4:3d:4a:6f:71:36:50:20:81:ce:fb:ac:10:6c:aa:e4: eb:0e:be:61:d0:f3:9d:09:58:a6:67:e9:72:96:09:9e:11:9e: dd:6f:e8:fc:fe:00:94:a6:59:13:13:7d:fd:16:ce:05:ec:47: c4:40:fd:76:36:11:7d:8b:f8:47:fe:f0:b7:9d:ae:43:45:38: 16:f4:7d:a0:17:b7:3f:8f:3c:29:fa:7a:dc:c9:cc:cb:ec:e0: 0c:0e:d8:6f:d3:10:a0:8f:07:d8:df:68:1e:b2:eb:85:cd:04: da:5c:dd:21 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5ffbne/q0hvywVznv0FtcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2VlODY0MjJmYmUzZWE0ODI5NjhkNDNiYmU4MzBhNjE0YmMzMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK8Y8FBGZ5RwaZdmQN06mW4zyzDQ tJAUne1kVCM+vkt+EV3WIFLtwEcaMzc9RUK8gGioff9ddYgGp2SZbpH19xjEU+Pq 1EyeoF73x7PTyp21qEWTLtQ4vSvYbG4H2bNY2HbQJxy3ElbqU1gTgT+jYbl07xzG xzNGsBFiwkt1LkpFkkfeuq6P2PTqlSL0W0RHdrqBLL705R+FKwV5dJRmqC+XyUqw UNf6/xS96jQ0rlFUo8+f12Unqz/kM2vYCZV+hdnLICY1McmhzSd13quA7lU770pR qDIZfmOwFC7/yUJ2y08io7PM7+0GJ66iVZlofjzNEGz7nGrwQS/cfuyRwwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBfuhkIvvj6kgpaNQ7voMKYUvDBYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzA0NThl ZS1mYTU1LTQ3YTYtOTQ2NC0yMGUzMzc0MzZhYmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMDQ1OGVl LWZhNTUtNDdhNi05NDY0LTIwZTMzNzQzNmFiZS8xL0YtNkdRaS0tUHFTQ2xvMUR1 LWd3cGhTOE1GZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMmvjANBgkqhkiG9w0BAQsFAAOCAQEALP0MOyPuq8Vy jMAJ4jGwntvCFT3o1WAnGrtE3N+emOIUEtYBnC62NMv1QXkZK2NPv02BW8imnUTo 5onabuS4BYCS1sZ6kh/7tL4dfgbSrqKD+7A4edV8kQyuc42CtyqVjzXJ0PSY9hYe QmsfAQTQAnkOcyfuCVwAMN/z+gcBNZL9YfF8UHxhi16w9Lx44vi66OL0PUpvcTZQ IIHO+6wQbKrk6w6+YdDznQlYpmfpcpYJnhGe3W/o/P4AlKZZExN9/RbOBexHxED9 djYRfYv4R/7wt52uQ0U4FvR9oBe3P488Kfp63MnMy+zgDA7Yb9MQoI8H2N9oHrLr hc0E2lzdIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:33 2026 by rpki-client