This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RzrT6YeegYYjFqEICLtcQhKVTLo.cer File: RzrT6YeegYYjFqEICLtcQhKVTLo.cer (raw, json) Hash identifier: Dzo+hBLHinnFk0JuyjMzi1/C9F6vCkdKRFM+c3cUMEA= Subject key identifier: 47:3A:D3:E9:87:9E:81:86:23:16:A1:08:08:BB:5C:42:12:95:4C:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783468B61FCDE5088AA64F5F0F7EAD2E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/RzrT6YeegYYjFqEICLtcQhKVTLo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210469 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:68:b6:1f:cd:e5:08:8a:a6:4f:5f:0f:7e:ad:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=473ad3e9879e81862316a10808bb5c4212954cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:0c:5c:4c:2c:08:28:3e:98:82:05:e9:7c: ff:ae:a9:ed:f9:bb:ab:88:97:f6:3f:c4:45:6f:46: 18:80:a4:f0:33:77:f6:dc:00:56:a1:2d:06:1c:60: f3:9d:44:27:26:ea:33:0f:fe:ec:71:af:19:08:05: 02:37:11:68:2f:a9:7d:4a:b4:e7:1f:c8:1b:d7:16: b5:af:01:4d:a3:38:6f:96:96:90:1c:86:e2:49:9a: 16:99:10:46:c7:80:2a:f8:aa:03:aa:48:5f:58:c6: f7:4a:a0:60:dc:2f:1a:42:7d:a7:61:b8:1a:5c:d6: 10:91:88:af:7b:1f:9f:35:cd:1e:09:64:e4:14:1d: 1f:2d:b8:0b:c4:ed:24:a4:aa:5e:9e:8f:ba:2d:e6: ad:dc:a2:80:33:8a:20:1b:ad:f2:95:87:a8:02:a2: fe:94:2b:92:8b:e2:9a:0d:c1:69:5c:f3:28:52:1c: 33:5f:37:bb:87:f1:9f:ad:c5:56:f1:12:5a:8e:7a: 24:ff:fe:a8:40:cd:6f:15:69:0f:04:e0:67:08:f7: 74:ac:33:1a:61:43:b2:44:fb:06:3b:51:2a:f6:cf: 89:b0:ea:4e:c7:14:0b:bb:0f:55:67:05:1f:2d:4b: d4:0f:42:32:03:ed:75:1c:d0:ba:0f:0f:f9:7a:11: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3A:D3:E9:87:9E:81:86:23:16:A1:08:08:BB:5C:42:12:95:4C:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/RzrT6YeegYYjFqEICLtcQhKVTLo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210469 Signature Algorithm: sha256WithRSAEncryption 31:13:67:b5:dd:94:5e:03:9f:c3:96:0b:ed:20:0c:33:64:3d: 93:74:0e:6e:02:98:78:0b:85:b8:1c:9b:96:83:47:9c:eb:67: f9:04:04:72:62:e6:30:62:2c:cb:92:cf:f7:b6:9b:a7:67:e7: 0e:31:b1:75:3f:fa:dc:dc:0e:da:d2:3d:81:44:fd:33:18:1b: 45:7f:e1:fb:7d:7a:70:fa:c9:7b:e1:64:e8:7a:52:b2:0b:a6: 07:64:51:c5:98:6c:d6:ee:1b:17:9f:2c:03:fa:10:71:ac:4b: f6:01:bc:f9:22:11:b3:10:46:63:55:0b:f6:23:c0:67:cc:ef: 2b:ba:09:71:99:56:ae:f2:62:47:9f:60:4e:31:33:17:f2:d0: e5:86:fd:a2:d5:be:0c:bf:64:0c:a9:d3:47:a1:33:c7:1f:5d: 91:5e:b4:51:a9:c9:9c:20:30:63:98:6b:2c:7d:3e:04:f0:68: db:32:c0:55:ad:36:2f:67:66:4d:65:42:5d:39:6e:3b:25:82: 3f:86:31:44:2d:30:bd:17:01:09:0a:cb:ed:55:a0:b9:2d:1d: b6:06:70:6c:36:78:87:dd:41:3a:7f:ae:00:08:d1:cd:1b:9f: 5f:c6:c3:b7:76:62:85:6b:24:82:6f:eb:41:88:91:86:4c:96: 70:82:9d:a0 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NGi2H83lCIqmT18Pfq0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzNhZDNlOTg3OWU4MTg2MjMxNmExMDgwOGJiNWM0MjEyOTU0Y2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm50MXEwsCCg+mIIF6Xz/rqnt+bur iJf2P8RFb0YYgKTwM3f23ABWoS0GHGDznUQnJuozD/7sca8ZCAUCNxFoL6l9SrTn H8gb1xa1rwFNozhvlpaQHIbiSZoWmRBGx4Aq+KoDqkhfWMb3SqBg3C8aQn2nYbga XNYQkYivex+fNc0eCWTkFB0fLbgLxO0kpKpeno+6Leat3KKAM4ogG63ylYeoAqL+ lCuSi+KaDcFpXPMoUhwzXze7h/GfrcVW8RJajnok//6oQM1vFWkPBOBnCPd0rDMa YUOyRPsGO1Eq9s+JsOpOxxQLuw9VZwUfLUvUD0IyA+11HNC6Dw/5ehFN3QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFEc60+mHnoGGIxahCAi7XEISlUy6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzFkMjdk YS1iMzlmLTQyYTktOTQ5Zi1iNmMzOWFkOTgzZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvMWQyN2Rh LWIzOWYtNDJhOS05NDlmLWI2YzM5YWQ5ODNkZC8xL1J6clQ2WWVlZ1lZakZxRUlD THRjUWhLVlRMby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM2JTANBgkqhkiG9w0BAQsFAAOCAQEAMRNntd2UXgOf w5YL7SAMM2Q9k3QObgKYeAuFuBybloNHnOtn+QQEcmLmMGIsy5LP97abp2fnDjGx dT/63NwO2tI9gUT9MxgbRX/h+316cPrJe+Fk6HpSsgumB2RRxZhs1u4bF58sA/oQ caxL9gG8+SIRsxBGY1UL9iPAZ8zvK7oJcZlWrvJiR59gTjEzF/LQ5Yb9otW+DL9k DKnTR6Ezxx9dkV60UanJnCAwY5hrLH0+BPBo2zLAVa02L2dmTWVCXTluOyWCP4Yx RC0wvRcBCQrL7VWguS0dtgZwbDZ4h91BOn+uAAjRzRufX8bDt3ZihWskgm/rQYiR hkyWcIKdoA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:18 2026 by rpki-client