This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer (raw, json) Hash identifier: QEFvJUEKPKbPFzmbr3JnmQspLz/9hlO6AyOrpSt9FcU= Subject key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C66984DDC4DBDF9C73265442D6309D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210030 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:69:84:dd:c4:db:df:9c:73:26:54:42:d6:30:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=468f8ae4a267c812f242bf02c064eb9287c35155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:c9:f6:f0:c5:3b:6e:a9:da:fd:10:ac:41: f8:60:56:2c:57:58:d9:12:dd:de:ea:9f:6e:69:58: a8:f3:85:f7:b2:eb:f9:1a:ad:15:d2:68:f6:cb:57: c3:74:71:f3:a2:78:6b:92:9e:06:ac:11:9d:76:4e: b4:d8:cd:83:3a:44:ae:31:77:1d:07:d2:e5:25:a3: 43:b0:af:9b:79:a4:b0:b3:d8:ef:59:e4:fc:18:b2: 02:c3:37:be:a4:4d:00:6e:6b:f1:3c:4a:9f:0a:af: e9:2b:60:64:d0:29:0a:b2:60:b9:f2:74:ae:87:6f: 84:f3:c2:58:f1:29:59:02:3d:38:ea:76:ef:db:6f: 86:f2:80:fe:aa:41:6a:63:f5:27:57:73:1d:6c:24: d2:f7:8b:a3:5f:26:58:f2:38:2c:c9:0c:f4:19:d4: 18:3b:bd:40:67:46:29:9d:c9:0b:e1:87:d0:f4:18: 3d:47:64:cd:4d:45:f6:35:3b:84:cb:25:29:9f:93: 98:76:24:73:5b:a9:b8:22:04:23:d0:ff:3f:bc:6c: 85:79:ba:da:69:f2:2c:1a:f1:32:55:74:fd:cb:88: 09:66:c7:ae:33:1c:40:9a:00:1d:a9:7f:1f:c3:d2: e9:8e:98:be:d5:2d:5e:44:e9:54:dd:4e:97:27:10: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210030 Signature Algorithm: sha256WithRSAEncryption ab:85:e3:6d:8a:d6:df:00:f0:01:7a:5d:b8:b3:4b:f4:16:d9: 02:f3:81:25:85:b9:49:3a:e3:bb:f1:ec:5d:40:6a:22:e8:bf: 0d:9f:90:da:45:1e:3d:70:77:d3:3c:5b:55:0e:8f:f5:91:ec: 35:fd:3e:1d:85:9b:b3:85:0b:aa:94:6b:e1:cb:7e:1e:46:7b: 70:34:f8:12:b3:8a:a5:37:a9:49:5a:f8:68:41:b9:ab:05:5a: 4c:9f:e0:7f:6a:66:58:8b:16:d5:38:74:8b:ea:20:4d:92:2d: 21:56:eb:01:0a:ed:34:8d:f5:b4:8e:e6:1b:c9:c3:9d:34:3a: 7f:9b:2c:49:4e:31:d1:db:f4:4a:0f:9c:84:1c:c9:91:53:e6: fa:d3:d6:16:24:8e:d1:cc:a6:fa:98:64:7b:1a:31:65:1c:38: b4:d6:8c:ac:40:70:60:0f:5a:e4:c0:69:06:b1:50:9f:e2:b1: 3c:07:8b:50:13:9e:84:05:a8:57:21:8f:60:6c:4c:f8:ef:90: c9:7b:a4:77:c5:d3:19:af:80:bc:94:f5:57:e4:ab:42:00:82: f4:c9:f9:c7:de:c2:b8:7d:03:44:47:c0:4c:ca:00:22:a7:60: b6:cd:cf:e3:5b:ab:92:b1:03:f1:cd:a4:5e:aa:b3:25:0a:b4: 39:43:4e:db -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3xmmE3cTb35xzJlRC1jCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjhmOGFlNGEyNjdjODEyZjI0MmJmMDJjMDY0ZWI5Mjg3YzM1MTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5TJ9vDFO26p2v0QrEH4YFYsV1jZ Et3e6p9uaVio84X3suv5Gq0V0mj2y1fDdHHzonhrkp4GrBGddk602M2DOkSuMXcd B9LlJaNDsK+beaSws9jvWeT8GLICwze+pE0AbmvxPEqfCq/pK2Bk0CkKsmC58nSu h2+E88JY8SlZAj046nbv22+G8oD+qkFqY/UnV3MdbCTS94ujXyZY8jgsyQz0GdQY O71AZ0YpnckL4YfQ9Bg9R2TNTUX2NTuEyyUpn5OYdiRzW6m4IgQj0P8/vGyFebra afIsGvEyVXT9y4gJZseuMxxAmgAdqX8fw9Lpjpi+1S1eROlU3U6XJxAGfwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFEaPiuSiZ8gS8kK/AsBk65KHw1FVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzY0NDcw Yi0xYTdhLTQ5NjYtOTMyNS03YTQwN2RhNjY2ZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNjQ0NzBi LTFhN2EtNDk2Ni05MzI1LTdhNDA3ZGE2NjZkNC8xL1JvLUs1S0pueUJMeVFyOEN3 R1Rya29mRFVWVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0bjANBgkqhkiG9w0BAQsFAAOCAQEAq4XjbYrW3wDw AXpduLNL9BbZAvOBJYW5STrju/HsXUBqIui/DZ+Q2kUePXB30zxbVQ6P9ZHsNf0+ HYWbs4ULqpRr4ct+HkZ7cDT4ErOKpTepSVr4aEG5qwVaTJ/gf2pmWIsW1Th0i+og TZItIVbrAQrtNI31tI7mG8nDnTQ6f5ssSU4x0dv0Sg+chBzJkVPm+tPWFiSO0cym +phkexoxZRw4tNaMrEBwYA9a5MBpBrFQn+KxPAeLUBOehAWoVyGPYGxM+O+QyXuk d8XTGa+AvJT1V+SrQgCC9Mn5x97CuH0DREfATMoAIqdgts3P41urkrED8c2kXqqz JQq0OUNO2w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:04 2026 by rpki-client