This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer (raw, json) Hash identifier: 6z17LLHHZ/TrCA16wFINlNY1YRbqsmiGCqdU5aDtGZw= Subject key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36E9C649B62B8C53DFB1C5C8A31514 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41333 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e9:c6:49:b6:2b:8c:53:df:b1:c5:c8:a3:15:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43c16eeca6afea844ca4688258ce3300d2a393fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:2f:b7:6e:9b:f5:d7:de:d5:11:6e:ed:b7: 32:54:59:f2:fd:b1:27:47:54:01:f6:58:47:6d:21: 5a:ce:ad:b8:c2:f1:ac:4b:bb:68:68:de:72:d3:17: ac:1c:ee:37:47:e0:ea:19:76:20:2b:36:65:0a:17: af:bd:cd:20:a6:2a:92:d4:ce:de:c5:fc:ae:4d:33: 61:e2:1e:e3:0b:a7:e9:e8:cd:df:d3:35:74:88:34: 2e:d4:e9:a3:de:a6:9c:72:05:74:46:08:ba:13:bc: e2:70:8b:d2:27:0c:22:40:34:b0:5f:a2:78:9b:20: 5e:59:71:7a:6d:11:81:f8:0d:c0:45:55:af:2b:ce: f3:c6:6d:ed:9c:ab:df:2f:1f:73:6a:3c:0d:e0:e2: e9:5e:9b:ac:c9:a7:8c:2e:63:5f:03:1a:15:b7:df: 18:3b:de:ad:f2:b4:37:ba:74:1a:7f:76:28:b7:70: ca:c3:23:c4:cc:75:d8:9f:fb:1a:49:ba:00:7b:07: 18:73:d3:c5:24:b9:83:2a:3d:b9:3d:5d:26:17:70: a6:c5:6f:a4:95:4d:46:71:c9:3b:34:6d:d2:ca:94: 94:95:58:a3:e1:3c:c3:c1:93:bf:12:c7:0c:e7:6e: c4:da:16:91:0b:ca:99:4e:38:27:0e:d2:8e:9a:ac: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 41333 Signature Algorithm: sha256WithRSAEncryption 9b:42:d2:76:c9:c1:9f:2e:7f:94:c5:c0:79:60:bd:e7:ac:07: c0:1e:e0:19:7d:56:0f:e1:e9:9e:15:86:46:a5:f4:89:de:d2: 91:03:f7:2d:60:27:cc:25:3e:ec:a8:5e:19:6f:54:a8:e6:df: cc:45:ac:21:3a:55:94:95:bc:43:f9:cf:01:02:29:96:dc:c5: bd:a3:4d:93:35:9e:f3:0d:ce:cf:a0:63:e3:75:d7:19:36:82: c0:07:d7:3c:9d:0f:44:09:ae:eb:8f:53:95:10:a4:be:f9:90: 01:05:b6:87:b7:4c:9f:6f:49:58:eb:e4:17:ea:e0:05:40:1c: 9e:2c:a1:fe:b3:c1:a8:1e:41:1a:84:70:60:fb:0d:ad:fb:b7: 9c:8a:ab:49:74:66:72:4f:1e:7c:65:c9:75:c1:ea:ac:66:7e: eb:f4:27:1a:10:bb:96:39:9b:47:78:8d:80:36:36:1f:e7:54: f6:c8:31:40:f3:c6:a7:53:59:aa:0a:7c:ad:3b:c9:c2:91:82: 37:39:c1:b3:d1:63:d8:42:b9:3c:a3:7a:4a:12:fb:2b:ca:16: d7:f1:57:48:81:b2:5c:f5:a5:4a:e7:8d:82:3c:d0:a4:fb:99: 7c:16:73:0a:1e:c0:e2:a2:ca:51:db:78:51:33:ab:a1:09:47: f2:59:3b:8a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NunGSbYrjFPfscXIoxUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2MxNmVlY2E2YWZlYTg0NGNhNDY4ODI1OGNlMzMwMGQyYTM5M2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNkvt26b9dfe1RFu7bcyVFny/bEn R1QB9lhHbSFazq24wvGsS7toaN5y0xesHO43R+DqGXYgKzZlChevvc0gpiqS1M7e xfyuTTNh4h7jC6fp6M3f0zV0iDQu1Omj3qaccgV0Rgi6E7zicIvSJwwiQDSwX6J4 myBeWXF6bRGB+A3ARVWvK87zxm3tnKvfLx9zajwN4OLpXpusyaeMLmNfAxoVt98Y O96t8rQ3unQaf3Yot3DKwyPEzHXYn/saSboAewcYc9PFJLmDKj25PV0mF3CmxW+k lU1Gcck7NG3SypSUlVij4TzDwZO/EscM527E2haRC8qZTjgnDtKOmqyT4QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFEPBbuymr+qETKRogljOMwDSo5P+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzkyOWEz Mi1hNDBmLTQ1NzAtYTc4NS1iMzk3N2Y2NDQ3YjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvOTI5YTMy LWE0MGYtNDU3MC1hNzg1LWIzOTc3ZjY0NDdiMy8xL1E4RnU3S2F2Nm9STXBHaUNX TTR6QU5LamtfNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwChdTANBgkqhkiG9w0BAQsFAAOCAQEAm0LSdsnBny5/ lMXAeWC956wHwB7gGX1WD+HpnhWGRqX0id7SkQP3LWAnzCU+7KheGW9UqObfzEWs ITpVlJW8Q/nPAQIpltzFvaNNkzWe8w3Oz6Bj43XXGTaCwAfXPJ0PRAmu649TlRCk vvmQAQW2h7dMn29JWOvkF+rgBUAcniyh/rPBqB5BGoRwYPsNrfu3nIqrSXRmck8e fGXJdcHqrGZ+6/QnGhC7ljmbR3iNgDY2H+dU9sgxQPPGp1NZqgp8rTvJwpGCNznB s9Fj2EK5PKN6ShL7K8oW1/FXSIGyXPWlSueNgjzQpPuZfBZzCh7A4qLKUdt4UTOr oQlH8lk7ig== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:48 2026 by rpki-client