This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer File: Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer (raw, json) Hash identifier: wfUjy4WQ9GjZ4VJCGZTm7lZGpBmOAAZ9SOclZgRggYU= Subject key identifier: 21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758D9C9642BEB2ADD3363003230959A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208171 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d9:c9:64:2b:eb:2a:dd:33:63:00:32:30:95:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:cb:29:de:c2:44:f3:34:9c:05:b3:01:66: 4f:c7:cd:b1:d1:13:03:12:06:50:06:46:50:86:e8: 5e:f7:11:4b:d6:1a:f8:ff:c9:ab:d3:43:fa:59:97: 0d:58:1c:2d:30:b7:5a:60:09:47:49:c2:2f:f3:a0: 2e:fe:67:f6:df:43:83:b2:a6:22:38:06:4d:fe:97: f8:cd:f0:f9:46:a3:11:fa:b6:a9:55:03:a5:dd:0c: d0:d1:a1:90:f5:65:48:b2:b6:6d:00:e1:ed:92:36: 1b:5b:d8:48:40:27:dd:87:e7:71:e6:84:53:4a:df: 8d:f7:18:b0:07:90:e0:2d:49:a7:a1:21:4c:a9:b5: 24:11:c0:2b:eb:06:e3:07:ea:a3:ba:b7:d2:1a:c0: 1a:a2:8a:f2:5a:23:96:4c:70:ca:dd:bc:2b:44:b1: e7:b3:d5:25:78:7f:17:1e:33:9a:94:6e:19:66:78: e3:c6:1e:24:22:e1:7c:e6:74:80:aa:f0:ef:73:9b: c5:07:8a:78:bb:5c:32:88:2e:26:c4:a1:66:6d:68: 5c:bc:10:9a:c9:52:74:fa:2c:de:ff:2f:c6:fa:ed: 34:90:20:56:67:31:84:3e:84:51:ce:8c:d2:73:a1: ad:64:95:e6:dd:db:3b:7b:24:56:1c:75:65:ca:86: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208171 Signature Algorithm: sha256WithRSAEncryption 94:e3:6d:8a:41:77:f9:99:21:e3:67:fb:0e:d4:39:51:c4:79: 64:74:59:5c:dc:be:ee:06:11:ab:4e:3c:d5:b0:fb:23:fd:0d: 57:85:5f:84:70:27:8d:39:18:8c:63:d9:8e:1d:af:d2:c7:ca: 39:bc:f7:41:3e:75:cd:cc:6f:ce:58:6f:d0:7e:2e:38:34:7f: 60:5e:bf:0d:ca:8d:55:af:50:2f:54:01:bc:93:27:3e:76:1b: 77:6a:4d:8b:d2:75:1e:18:8b:9a:4a:32:64:df:24:24:bc:50: 8d:40:02:8f:c0:e2:8b:c4:d9:f0:a3:33:39:74:9a:dd:61:de: 5f:e7:8a:9a:9f:94:2c:08:d3:ed:34:93:4f:be:b5:c2:a1:57: d1:22:b7:dd:dd:09:6a:39:6e:a2:d8:7e:6a:73:62:c4:b4:6e: cb:0d:47:65:67:9e:c5:67:80:b0:13:83:53:2d:d6:f1:5b:77: ca:77:05:73:c6:b0:b6:5a:ef:3d:f4:55:20:b5:79:0c:3b:ef: 60:c6:5d:2a:9d:93:c2:06:11:09:63:ec:fe:e1:91:6b:f9:48: 5a:15:2d:3e:cc:d8:20:e3:6f:b7:8f:84:8d:6c:6b:78:00:4a: 0a:c2:d5:09:8d:d4:2e:62:51:28:31:5c:1c:f2:af:d2:f1:a9: cf:8d:3e:fb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WNnJZCvrKt0zYwAyMJWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWRlYTVmOTJlOTI5ZDY3NDRkNGM4ZGE2YTVkYzkyZWEzMmJmNjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvHLKd7CRPM0nAWzAWZPx82x0RMD EgZQBkZQhuhe9xFL1hr4/8mr00P6WZcNWBwtMLdaYAlHScIv86Au/mf230ODsqYi OAZN/pf4zfD5RqMR+rapVQOl3QzQ0aGQ9WVIsrZtAOHtkjYbW9hIQCfdh+dx5oRT St+N9xiwB5DgLUmnoSFMqbUkEcAr6wbjB+qjurfSGsAaooryWiOWTHDK3bwrRLHn s9UleH8XHjOalG4ZZnjjxh4kIuF85nSAqvDvc5vFB4p4u1wyiC4mxKFmbWhcvBCa yVJ0+ize/y/G+u00kCBWZzGEPoRRzozSc6GtZJXm3ds7eyRWHHVlyobe7QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCHepfkukp1nRNTI2mpdyS6jK/ZxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2RjMzZh MC1kZDQzLTQ1NTctOWJjNC1kZDk1YWM2MTk3MGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZGMzNmEw LWRkNDMtNDU1Ny05YmM0LWRkOTVhYzYxOTcwZi8xL0lkNmwtUzZTbldkRTFNamFh bDNKTHFNcjluRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtKzANBgkqhkiG9w0BAQsFAAOCAQEAlONtikF3+Zkh 42f7DtQ5UcR5ZHRZXNy+7gYRq0481bD7I/0NV4VfhHAnjTkYjGPZjh2v0sfKObz3 QT51zcxvzlhv0H4uODR/YF6/DcqNVa9QL1QBvJMnPnYbd2pNi9J1HhiLmkoyZN8k JLxQjUACj8Dii8TZ8KMzOXSa3WHeX+eKmp+ULAjT7TSTT761wqFX0SK33d0Jajlu oth+anNixLRuyw1HZWeexWeAsBODUy3W8Vt3yncFc8awtlrvPfRVILV5DDvvYMZd Kp2TwgYRCWPs/uGRa/lIWhUtPszYIONvt4+EjWxreABKCsLVCY3ULmJRKDFcHPKv 0vGpz40++w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:12 2026 by rpki-client