This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QEcbNMIaUAj28Jbkj-jjVRnWuEc.cer File: QEcbNMIaUAj28Jbkj-jjVRnWuEc.cer (raw, json) Hash identifier: /yX3kEHyxyU4uGCbEPVr32rn3WWXcVXOO6jhzq64qT4= Subject key identifier: 40:47:1B:34:C2:1A:50:08:F6:F0:96:E4:8F:E8:E3:55:19:D6:B8:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C129F8983FBA2A3EE9109518C50BB8A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/04f9f3-31f6-4366-93a1-1142dfacfccf/1/QEcbNMIaUAj28Jbkj-jjVRnWuEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/04f9f3-31f6-4366-93a1-1142dfacfccf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60700 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9f:89:83:fb:a2:a3:ee:91:09:51:8c:50:bb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40471b34c21a5008f6f096e48fe8e35519d6b847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:ea:cf:ae:c3:24:2e:72:97:95:d1:c6:03: 56:80:74:8c:05:50:d4:46:6e:bd:24:c3:dd:e2:ee: 83:79:52:6a:99:d0:c9:8f:de:ee:7e:a1:84:ec:e0: a1:78:e6:c2:d2:12:f0:ed:8b:47:7d:83:65:1c:c8: fb:d1:02:6a:b2:24:8a:60:f1:01:5d:69:17:e9:b6: 17:63:cd:60:8f:90:99:ca:ad:02:88:24:8d:c3:0e: c6:21:69:6c:30:50:b4:48:a0:81:6f:47:29:de:9a: 06:d2:c1:bd:4e:16:d5:ed:69:1f:f6:c8:47:0c:7a: 62:95:d1:6e:22:cb:2c:89:7e:70:aa:a2:1c:67:74: b9:6d:7c:7f:43:ee:75:fd:25:72:fa:c4:60:c6:ce: 5f:db:eb:fa:c0:b4:f7:fd:df:51:e1:7f:fb:a0:8d: 20:ca:87:dd:78:66:db:1c:db:2c:a6:d4:06:2b:b3: 8c:fc:59:dd:f1:a9:a7:e8:c7:e8:ef:12:ff:f6:5b: ec:3d:b9:7e:7f:17:39:1b:6a:52:c7:6b:ab:24:6b: c2:10:44:ba:10:21:f2:96:3b:45:ed:74:a2:5c:1d: 19:72:80:f5:b5:2e:72:b4:cb:cf:f4:d8:e9:87:d4: cf:c5:df:50:a4:f2:a3:f2:e0:bd:2b:b1:62:54:b8: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:47:1B:34:C2:1A:50:08:F6:F0:96:E4:8F:E8:E3:55:19:D6:B8:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/04f9f3-31f6-4366-93a1-1142dfacfccf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/04f9f3-31f6-4366-93a1-1142dfacfccf/1/QEcbNMIaUAj28Jbkj-jjVRnWuEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 60700 Signature Algorithm: sha256WithRSAEncryption b0:5b:8d:e3:b1:ad:dc:90:84:81:78:fc:b5:32:fa:bd:8b:fb: 43:d7:84:63:d4:cb:fb:9e:db:35:e5:56:68:94:95:a0:0b:31: e0:89:04:e0:46:fe:68:56:a5:16:0e:ee:a7:d1:25:03:ba:64: b8:cf:48:a7:1f:be:95:f5:c2:fe:a7:5d:34:09:d0:ca:c4:0a: 7c:31:5c:8c:7d:e8:52:9c:aa:2a:68:fc:5d:f8:f9:9b:42:9e: 83:97:f3:78:18:37:3e:44:4f:7b:46:7a:f6:6c:d2:56:0d:f2: 33:83:00:b9:25:ac:da:f5:7e:57:91:88:a2:36:ff:df:e2:43: 23:4f:b8:68:78:9b:38:3c:e1:4f:c6:bf:36:66:3b:58:be:db: 3e:55:ac:6a:ef:28:3b:08:56:c6:59:2b:4d:48:c1:55:06:a3: 32:b4:0a:4e:2c:4e:72:89:b9:72:86:c3:be:ce:43:35:fd:de: 84:26:38:e3:9d:eb:79:43:c2:f8:75:d2:ee:b0:f9:2e:de:37: 7c:df:97:b6:b5:0d:a0:50:d7:57:1c:79:1e:99:43:b7:74:c7: 23:4f:f4:26:4b:57:38:0b:9a:50:dc:90:c5:ee:ba:cd:5a:19: 72:af:8a:6e:d9:20:c8:13:6c:55:5c:d8:b9:e2:81:27:d5:22: 13:cb:79:13 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8Ep+Jg/uio+6RCVGMULuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDQ3MWIzNGMyMWE1MDA4ZjZmMDk2ZTQ4ZmU4ZTM1NTE5ZDZiODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ/qz67DJC5yl5XRxgNWgHSMBVDU Rm69JMPd4u6DeVJqmdDJj97ufqGE7OCheObC0hLw7YtHfYNlHMj70QJqsiSKYPEB XWkX6bYXY81gj5CZyq0CiCSNww7GIWlsMFC0SKCBb0cp3poG0sG9ThbV7Wkf9shH DHpildFuIsssiX5wqqIcZ3S5bXx/Q+51/SVy+sRgxs5f2+v6wLT3/d9R4X/7oI0g yofdeGbbHNssptQGK7OM/Fnd8amn6Mfo7xL/9lvsPbl+fxc5G2pSx2urJGvCEES6 ECHyljtF7XSiXB0ZcoD1tS5ytMvP9Njph9TPxd9QpPKj8uC9K7FiVLh8CwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFEBHGzTCGlAI9vCW5I/o41UZ1rhHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzA0Zjlm My0zMWY2LTQzNjYtOTNhMS0xMTQyZGZhY2ZjY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvMDRmOWYz LTMxZjYtNDM2Ni05M2ExLTExNDJkZmFjZmNjZi8xL1FFY2JOTUlhVUFqMjhKYmtq LWpqVlJuV3VFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDtHDANBgkqhkiG9w0BAQsFAAOCAQEAsFuN47Gt3JCE gXj8tTL6vYv7Q9eEY9TL+57bNeVWaJSVoAsx4IkE4Eb+aFalFg7up9ElA7pkuM9I px++lfXC/qddNAnQysQKfDFcjH3oUpyqKmj8Xfj5m0Keg5fzeBg3PkRPe0Z69mzS Vg3yM4MAuSWs2vV+V5GIojb/3+JDI0+4aHibODzhT8a/NmY7WL7bPlWsau8oOwhW xlkrTUjBVQajMrQKTixOcom5cobDvs5DNf3ehCY4453reUPC+HXS7rD5Lt43fN+X trUNoFDXVxx5HplDt3THI0/0JktXOAuaUNyQxe66zVoZcq+KbtkgyBNsVVzYueKB J9UiE8t5Ew== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:00 2026 by rpki-client