This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer File: St2XYC4ZGOerwfYtz9TaynNJmz4.cer (raw, json) Hash identifier: Kt27p1G5G837qO97O4rLT2Jcf9iG3o0gz/gpMT7Td+0= Subject key identifier: 4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834AEADAFA14AC766B8A8E2D7B7BDB0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211615 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ae:ad:af:a1:4a:c7:66:b8:a8:e2:d7:b7:bd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4add97602e1918e7abc1f62dcfd4daca73499b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:8c:00:a1:8a:e0:59:1d:db:a8:5e:b3:0c: c9:7a:44:b3:c6:24:49:c4:75:97:e2:4d:80:44:d7: 7b:5a:64:5e:e3:78:35:6f:95:4f:7a:d5:59:aa:20: da:b6:3d:75:d3:f6:4b:74:7b:96:e4:d1:a0:03:89: 79:46:ea:c3:16:38:c7:33:8f:a2:74:70:e4:95:ef: da:d4:34:fe:69:f9:00:4a:52:65:d4:6d:a0:3c:8e: c7:9b:38:c4:20:18:52:20:0f:c0:df:d3:f2:b7:4f: c1:7b:42:7b:a3:fe:31:7f:99:47:aa:d8:d6:1a:50: 27:6a:42:e0:3e:49:e5:0f:1b:9b:dd:6c:14:38:8c: 5a:e0:24:99:5f:35:05:45:f3:d8:cc:72:76:df:26: b6:3b:04:fe:d4:2b:3d:bb:97:06:49:27:74:2d:84: 3f:8a:3d:1a:d4:be:8b:03:71:a4:bd:b1:c1:b7:2f: 05:59:41:09:0c:90:b3:18:43:7a:fb:fe:82:49:b5: e0:28:ba:43:33:59:22:ec:e1:90:c0:07:e4:76:5a: 72:b3:7e:5d:ce:20:49:e5:ca:1c:6d:6d:0a:72:5d: 85:68:db:c6:9d:c9:d9:42:56:4b:50:75:27:d0:b2: ba:3e:a7:67:ef:ec:9c:60:30:38:22:0c:07:5f:f0: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211615 Signature Algorithm: sha256WithRSAEncryption 89:6b:36:e9:63:fe:b5:8b:fc:e1:41:af:9e:22:e5:c1:d7:72: 71:fe:33:8e:97:3b:70:1d:c5:7e:e6:ce:4e:2f:9e:e8:24:7d: de:85:50:f1:4e:11:db:ea:d8:3e:c0:b4:0a:a7:f3:ef:2a:86: 85:6f:11:03:8a:44:10:70:84:62:4e:c8:3d:19:81:82:27:0e: c3:17:00:19:e7:19:22:28:2c:4c:0f:50:91:c4:1f:93:50:de: e9:97:fd:d1:a8:06:f5:1e:12:4f:fa:b4:63:d1:33:cc:f6:99: 2a:22:0b:08:03:40:e7:10:36:b7:a9:1e:8c:79:db:62:ef:92: 83:15:a4:d9:8e:0a:6b:6f:a4:9b:68:86:84:b7:94:6c:6d:69: 17:11:52:41:16:ce:24:d6:70:03:41:90:4b:3d:f5:4e:52:e3: 40:08:05:39:36:03:ab:60:9d:59:22:5a:f6:97:ec:90:43:0c: 20:74:6e:bc:9c:16:59:fc:40:be:e0:61:c9:86:85:30:f9:5d: f8:4c:53:0a:94:b1:e3:be:38:7f:10:aa:5b:22:d6:a3:cb:eb: fc:ed:55:77:92:bd:34:82:b4:70:16:ae:46:3d:6d:ed:57:c3: 2c:6f:03:4f:e6:56:ca:41:a8:28:eb:45:1e:df:0a:60:47:d1: ed:2e:d2:73 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NK6tr6FKx2a4qOLXt72wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWRkOTc2MDJlMTkxOGU3YWJjMWY2MmRjZmQ0ZGFjYTczNDk5YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsGMAKGK4Fkd26heswzJekSzxiRJ xHWX4k2ARNd7WmRe43g1b5VPetVZqiDatj110/ZLdHuW5NGgA4l5RurDFjjHM4+i dHDkle/a1DT+afkASlJl1G2gPI7HmzjEIBhSIA/A39Pyt0/Be0J7o/4xf5lHqtjW GlAnakLgPknlDxub3WwUOIxa4CSZXzUFRfPYzHJ23ya2OwT+1Cs9u5cGSSd0LYQ/ ij0a1L6LA3GkvbHBty8FWUEJDJCzGEN6+/6CSbXgKLpDM1ki7OGQwAfkdlpys35d ziBJ5cocbW0Kcl2FaNvGncnZQlZLUHUn0LK6Pqdn7+ycYDA4IgwHX/AJ1wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFErdl2AuGRjnq8H2Lc/U2spzSZs+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzU3NTQy YS1lMWFjLTQwMTQtODZmZS0xMmU1ZTgxNzMyMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvNTc1NDJh LWUxYWMtNDAxNC04NmZlLTEyZTVlODE3MzIwMS8xL1N0MlhZQzRaR09lcndmWXR6 OVRheW5OSm16NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6nzANBgkqhkiG9w0BAQsFAAOCAQEAiWs26WP+tYv8 4UGvniLlwddycf4zjpc7cB3FfubOTi+e6CR93oVQ8U4R2+rYPsC0Cqfz7yqGhW8R A4pEEHCEYk7IPRmBgicOwxcAGecZIigsTA9QkcQfk1De6Zf90agG9R4ST/q0Y9Ez zPaZKiILCANA5xA2t6kejHnbYu+SgxWk2Y4Ka2+km2iGhLeUbG1pFxFSQRbOJNZw A0GQSz31TlLjQAgFOTYDq2CdWSJa9pfskEMMIHRuvJwWWfxAvuBhyYaFMPld+ExT CpSx4744fxCqWyLWo8vr/O1Vd5K9NIK0cBauRj1t7VfDLG8DT+ZWykGoKOtFHt8K YEfR7S7Scw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:36 2026 by rpki-client