This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SpR3QFKci4QPf4kzCXmshyyj-rg.cer File: SpR3QFKci4QPf4kzCXmshyyj-rg.cer (raw, json) Hash identifier: SUJxqdGbq4XOGXJfdVwHbSboaiYHOrSsbeA9ziHMIUU= Subject key identifier: 4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7785EE1B4363DB294CD0B0B924063 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214097 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:78:5e:e1:b4:36:3d:b2:94:cd:0b:0b:92:40:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a947740529c8b840f7f89330979ac872ca3fab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:32:60:49:50:d3:f9:a4:a9:da:96:6b:74: 1f:bf:d6:2e:ef:1f:e9:57:1a:76:cd:e9:43:c9:df: db:68:85:37:ea:68:f7:f7:bc:09:6f:fe:0d:f3:5c: 3d:7e:12:fb:a1:8d:cb:d3:7a:c4:df:97:c5:39:ff: d0:69:f3:69:03:e8:2a:95:85:c8:5a:1c:39:d3:7b: 88:40:47:f9:88:e1:75:5c:64:65:aa:b0:7c:d9:ff: bb:d9:07:f8:4b:3e:3d:42:25:47:a1:d7:17:91:b2: 99:e9:a9:98:2d:7d:33:3e:9a:87:9f:98:bf:bd:7e: 2f:34:b7:0c:84:7d:c3:76:05:12:74:1a:7c:22:37: 45:03:55:cb:24:d2:2b:84:5b:88:8b:d9:2f:5a:e4: bf:75:3b:c6:7c:10:b4:c1:36:dc:bb:72:eb:d3:d7: a1:5f:0c:1b:61:fc:49:a1:80:c8:83:3c:f6:58:b7: d8:44:a6:ef:aa:68:4b:55:be:9c:9f:59:8b:c8:85: 04:7c:1a:f6:79:55:c9:46:10:71:90:17:12:5e:5a: a7:0a:af:f2:4a:a8:9c:a2:ac:66:2c:23:de:dd:67: e4:0d:b1:e0:9f:21:7a:ac:82:cb:97:31:5a:80:92: 67:08:38:b6:29:37:0e:fc:86:45:6b:d6:e2:57:80: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:94:77:40:52:9C:8B:84:0F:7F:89:33:09:79:AC:87:2C:A3:FA:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e90d6b-52e0-4195-88af-7db25ad7cd4c/1/SpR3QFKci4QPf4kzCXmshyyj-rg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214097 Signature Algorithm: sha256WithRSAEncryption 4c:55:b4:7a:3c:25:6b:8c:54:e5:b5:70:e8:fe:95:62:57:2d: d6:a6:46:4c:05:58:14:c9:e8:fd:8c:c5:7f:ad:85:9d:37:92: 8c:9e:88:91:16:27:a9:b0:1d:a9:84:28:d1:f2:1e:a5:2f:ed: 91:8e:94:d2:54:c5:ee:2f:8a:ee:26:f7:b1:cb:87:78:f3:85: 79:91:8c:24:c0:91:1f:79:8e:a0:4d:a4:a5:dc:bf:1c:f0:23: 52:e2:3f:75:ae:ec:b3:00:90:6a:34:2e:5b:b0:4d:3f:61:2c: 61:a5:d2:19:21:99:20:96:e8:ed:15:97:93:b1:90:45:61:fa: 1f:a2:4e:d3:7e:46:ef:75:c9:3b:09:a4:b8:59:58:28:55:8a: 79:1b:f1:c5:d6:04:4a:16:e1:63:91:6c:cb:38:fb:57:f2:a3: 86:27:a9:27:7e:43:bd:1b:b0:f0:7c:25:d5:39:b6:83:7b:e6: a7:57:74:89:2f:0f:07:65:cf:41:e8:bc:0e:a3:32:c2:17:36: ea:9d:74:bf:99:66:db:1b:26:46:8e:bb:68:e0:4e:3b:35:5e: 0e:2b:e3:dd:1e:2c:d2:e2:89:6d:9c:04:ad:1e:ca:4b:ac:76: e4:f7:9f:c7:88:86:3d:5b:36:2e:c2:15:d4:a8:d4:9f:49:cc: 66:90:86:ea -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6x3he4bQ2PbKUzQsLkkBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTk0Nzc0MDUyOWM4Yjg0MGY3Zjg5MzMwOTc5YWM4NzJjYTNmYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf8yYElQ0/mkqdqWa3Qfv9Yu7x/p Vxp2zelDyd/baIU36mj397wJb/4N81w9fhL7oY3L03rE35fFOf/QafNpA+gqlYXI Whw503uIQEf5iOF1XGRlqrB82f+72Qf4Sz49QiVHodcXkbKZ6amYLX0zPpqHn5i/ vX4vNLcMhH3DdgUSdBp8IjdFA1XLJNIrhFuIi9kvWuS/dTvGfBC0wTbcu3Lr09eh XwwbYfxJoYDIgzz2WLfYRKbvqmhLVb6cn1mLyIUEfBr2eVXJRhBxkBcSXlqnCq/y SqicoqxmLCPe3WfkDbHgnyF6rILLlzFagJJnCDi2KTcO/IZFa9biV4D3JwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFEqUd0BSnIuED3+JMwl5rIcso/q4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2U5MGQ2 Yi01MmUwLTQxOTUtODhhZi03ZGIyNWFkN2NkNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZTkwZDZi LTUyZTAtNDE5NS04OGFmLTdkYjI1YWQ3Y2Q0Yy8xL1NwUjNRRktjaTRRUGY0a3pD WG1zaHl5ai1yZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNEUTANBgkqhkiG9w0BAQsFAAOCAQEATFW0ejwla4xU 5bVw6P6VYlct1qZGTAVYFMno/YzFf62FnTeSjJ6IkRYnqbAdqYQo0fIepS/tkY6U 0lTF7i+K7ib3scuHePOFeZGMJMCRH3mOoE2kpdy/HPAjUuI/da7sswCQajQuW7BN P2EsYaXSGSGZIJbo7RWXk7GQRWH6H6JO035G73XJOwmkuFlYKFWKeRvxxdYEShbh Y5Fsyzj7V/KjhiepJ35DvRuw8Hwl1Tm2g3vmp1d0iS8PB2XPQei8DqMywhc26p10 v5lm2xsmRo67aOBOOzVeDivj3R4s0uKJbZwErR7KS6x25Pefx4iGPVs2LsIV1KjU n0nMZpCG6g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:29 2026 by rpki-client