This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer File: F2wVCakW_qd6H9QIipnQ5iLWTD8.cer (raw, json) Hash identifier: XVBwqnMgN6AAKR4SdhfK7K1CEUAoqTtYLfytBx29Ymo= Subject key identifier: 17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A25729886368E4436D2FA2F68243A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:57:29:88:63:68:e4:43:6d:2f:a2:f6:82:43:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=176c1509a916fea77a1fd4088a99d0e622d64c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:e4:c4:7a:cd:28:e3:f6:c4:46:20:9e:a3: 3e:15:7c:11:b0:68:d4:70:fa:d9:39:bc:a2:d1:fd: 93:cb:0f:73:ab:00:db:b6:cc:64:67:60:70:ae:33: f4:27:2a:be:1d:fd:4c:56:77:6f:d2:0c:34:56:8c: 0d:0b:94:53:17:5e:db:0f:58:d7:da:60:af:a8:a2: 7d:c4:b0:3c:56:79:fa:30:a7:98:a2:35:16:cc:d4: fe:a8:71:52:4e:07:fe:a4:42:ab:9a:51:ed:fa:c3: 84:02:c1:a7:00:f5:78:b6:cf:92:36:0d:01:32:b2: 4a:52:4f:e1:68:ec:b9:9b:52:cc:c4:4c:68:43:c8: f7:64:03:6d:3e:7e:3b:6e:d9:2f:72:3c:fb:57:ef: d1:57:10:62:7b:4b:02:32:44:45:67:b3:7b:e3:16: d0:c2:16:b5:a1:8c:c6:98:64:2a:95:62:b3:c6:50: dd:01:7c:e7:f1:9f:87:4f:56:4a:1a:83:a7:de:08: 66:65:c5:8b:13:e1:5d:23:e7:5f:22:df:d5:48:60: 09:0d:60:51:34:5f:b3:42:5c:3d:33:20:61:2c:b1: ae:b0:4f:da:5d:cd:a7:d1:89:a5:8b:59:c4:52:a0: 5f:4b:15:ce:be:ec:af:89:f2:6e:f3:46:8d:fc:db: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214128 Signature Algorithm: sha256WithRSAEncryption 3a:42:fa:f2:81:d6:89:51:d4:20:67:1a:e7:1a:3d:e6:7e:e4: 86:ed:a7:86:83:95:26:5c:b0:29:20:9d:84:56:8a:87:dc:77: a0:a9:cc:cb:08:20:91:81:5d:4a:ee:ef:cc:c3:3b:91:c9:0d: 46:e8:f4:ec:c5:53:d0:2a:97:8a:d8:b6:9c:79:3e:6e:8e:fa: 4c:90:85:1f:89:aa:aa:f3:95:2b:7d:94:7a:55:90:f8:23:6a: f2:05:d0:30:88:55:01:f8:84:aa:e3:f4:1a:48:54:83:aa:be: e8:67:41:94:a5:69:6d:b5:9d:3f:be:dc:0c:f6:62:a7:97:14: 3a:01:4c:72:8b:95:e9:02:02:4f:26:9d:39:6d:a9:78:82:05: 22:27:3d:e5:34:4d:a9:16:5a:cc:3c:a5:46:1b:bb:e2:7a:fa: ae:97:1d:b2:3f:8e:7b:8f:49:33:11:59:04:26:8a:1c:83:2e: 9a:fc:70:1b:4f:7a:12:23:f5:5a:4a:f3:1c:bb:7f:d2:f1:49: 50:7f:da:3b:bb:9d:14:35:f7:f7:c7:fb:db:c7:3e:f0:95:b0: f6:52:5a:8a:a0:9b:ef:4f:8f:05:1e:ba:26:4e:6e:5f:90:c3: 41:8f:6e:a8:8b:80:6a:41:18:16:56:7c:cd:61:35:38:df:49: 30:9a:1e:0c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4olcpiGNo5ENtL6L2gkOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzZjMTUwOWE5MTZmZWE3N2ExZmQ0MDg4YTk5ZDBlNjIyZDY0YzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD/kxHrNKOP2xEYgnqM+FXwRsGjU cPrZObyi0f2Tyw9zqwDbtsxkZ2BwrjP0Jyq+Hf1MVndv0gw0VowNC5RTF17bD1jX 2mCvqKJ9xLA8Vnn6MKeYojUWzNT+qHFSTgf+pEKrmlHt+sOEAsGnAPV4ts+SNg0B MrJKUk/haOy5m1LMxExoQ8j3ZANtPn47btkvcjz7V+/RVxBie0sCMkRFZ7N74xbQ wha1oYzGmGQqlWKzxlDdAXzn8Z+HT1ZKGoOn3ghmZcWLE+FdI+dfIt/VSGAJDWBR NF+zQlw9MyBhLLGusE/aXc2n0Ymli1nEUqBfSxXOvuyvifJu80aN/NstxQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBdsFQmpFv6neh/UCIqZ0OYi1kw/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmL2VjM2M4 Ni03NWE2LTQ3YzMtOWJkZi04OGVkMTgzZjljMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvZWMzYzg2 LTc1YTYtNDdjMy05YmRmLTg4ZWQxODNmOWMwMy8xL0Yyd1ZDYWtXX3FkNkg5UUlp cG5RNWlMV1REOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNEcDANBgkqhkiG9w0BAQsFAAOCAQEAOkL68oHWiVHU IGca5xo95n7khu2nhoOVJlywKSCdhFaKh9x3oKnMywggkYFdSu7vzMM7kckNRuj0 7MVT0CqXiti2nHk+bo76TJCFH4mqqvOVK32UelWQ+CNq8gXQMIhVAfiEquP0GkhU g6q+6GdBlKVpbbWdP77cDPZip5cUOgFMcouV6QICTyadOW2peIIFIic95TRNqRZa zDylRhu74nr6rpcdsj+Oe49JMxFZBCaKHIMumvxwG096EiP1WkrzHLt/0vFJUH/a O7udFDX398f728c+8JWw9lJaiqCb70+PBR66Jk5uX5DDQY9uqIuAakEYFlZ8zWE1 ON9JMJoeDA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:49 2026 by rpki-client