This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer File: Y-ftmpXgsiN2kMdL_njP7eLETnw.cer (raw, json) Hash identifier: 8kiO7QiabwgmwClfoI5XMKf+N5HOhKO+suQDcYq8X6Y= Subject key identifier: 63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC855B1C01B1E85295B18B4E501743F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58052 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:55:b1:c0:1b:1e:85:29:5b:18:b4:e5:01:74:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:22:af:7a:38:0c:06:65:25:f8:e7:47:0d: 80:1a:63:55:3a:b3:7c:fa:8f:5d:cb:15:c3:85:ba: 38:7f:8f:d0:ca:30:76:21:29:7a:57:3a:15:6f:aa: 99:11:e7:68:25:f6:00:9d:ee:d3:ce:38:e8:a3:97: b9:4d:50:35:18:31:13:4d:43:c6:c1:e1:bb:1b:9a: 83:20:2e:38:d3:95:68:df:16:8c:56:d0:4c:1a:c7: 2f:17:3a:a1:9d:5c:8c:df:e3:4e:29:8b:59:a7:78: ab:f7:9a:af:f7:97:50:3b:30:ac:83:de:9c:b1:1b: 16:06:39:ed:08:9b:9c:4a:f7:5f:a0:ee:90:94:08: 8b:bd:98:ce:0f:ef:7b:74:c7:06:b4:64:c1:ad:2a: 15:bf:ab:c7:10:2c:df:59:f0:16:4a:9a:cc:20:13: fd:42:a6:d6:6a:6f:1a:82:da:4c:8e:18:f6:fb:a0: be:e5:a1:60:4a:aa:e7:df:3c:b1:9a:59:21:d8:2f: 33:b9:cd:45:12:fd:f7:c2:0d:0a:24:ff:8a:76:80: 88:68:ee:63:a5:b5:04:8e:c9:ef:98:da:9c:f3:d7: f0:0d:f0:12:69:03:f0:eb:eb:2d:00:a6:31:86:15: 85:32:e6:a8:ff:01:69:fd:41:fe:31:b5:1a:60:cd: a7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 58052 Signature Algorithm: sha256WithRSAEncryption 9e:78:5a:f9:1d:42:6c:1a:67:d0:6e:60:fd:06:f0:80:86:91: 60:6f:0f:ca:6b:a2:d2:82:24:90:a5:f1:81:ea:19:75:cd:25: 6f:d9:2f:0f:dd:ed:d7:98:1e:0b:1f:30:56:ce:3d:b2:61:ee: 08:2b:bd:22:64:5a:e7:32:28:e8:ca:73:34:36:6b:34:5e:99: ec:ed:75:b1:35:aa:b7:03:f9:02:ad:bb:a0:b6:c4:4b:4d:f6: 8c:db:16:97:fe:68:67:a9:c2:81:81:c9:e9:cf:ef:88:89:88: c6:ca:6a:a6:33:10:f6:6f:e3:fc:eb:cd:75:f6:57:19:b9:0e: f2:2f:01:4b:aa:e8:4e:04:3a:69:b1:29:d0:1c:a7:6a:36:ee: e4:d7:5a:56:71:39:8f:a6:9b:b0:6e:08:fc:db:50:3e:82:b6: aa:9d:f0:6d:c3:e5:71:77:46:2f:84:65:dd:8f:6d:90:44:a0: 60:6c:c2:84:39:71:86:4f:cd:b8:eb:81:be:b3:ea:2c:ec:33: 58:19:51:01:f6:10:b1:a8:4b:46:06:1c:d1:38:01:85:41:c3: d5:a7:15:41:91:13:5f:fe:7a:4e:1f:74:26:fd:4e:6d:c8:d1: 45:9e:8f:15:b7:64:b3:66:04:71:e9:d9:7c:fc:bf:78:46:fe: 60:4e:e8:70 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6yFWxwBsehSlbGLTlAXQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2U3ZWQ5YTk1ZTBiMjIzNzY5MGM3NGJmZTc4Y2ZlZGUyYzQ0ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Iir3o4DAZlJfjnRw2AGmNVOrN8 +o9dyxXDhbo4f4/QyjB2ISl6VzoVb6qZEedoJfYAne7Tzjjoo5e5TVA1GDETTUPG weG7G5qDIC4405Vo3xaMVtBMGscvFzqhnVyM3+NOKYtZp3ir95qv95dQOzCsg96c sRsWBjntCJucSvdfoO6QlAiLvZjOD+97dMcGtGTBrSoVv6vHECzfWfAWSprMIBP9 QqbWam8agtpMjhj2+6C+5aFgSqrn3zyxmlkh2C8zuc1FEv33wg0KJP+KdoCIaO5j pbUEjsnvmNqc89fwDfASaQPw6+stAKYxhhWFMuao/wFp/UH+MbUaYM2nUQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGPn7ZqV4LIjdpDHS/54z+3ixE58MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzL2YwYzkx NC1lODNmLTQ5M2EtOGIwNy0xOWIyZDQxYmVhNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZjBjOTE0 LWU4M2YtNDkzYS04YjA3LTE5YjJkNDFiZWE3OS8xL1ktZnRtcFhnc2lOMmtNZExf bmpQN2VMRVRudy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDixDANBgkqhkiG9w0BAQsFAAOCAQEAnnha+R1CbBpn 0G5g/QbwgIaRYG8Pymui0oIkkKXxgeoZdc0lb9kvD93t15geCx8wVs49smHuCCu9 ImRa5zIo6MpzNDZrNF6Z7O11sTWqtwP5Aq27oLbES032jNsWl/5oZ6nCgYHJ6c/v iImIxspqpjMQ9m/j/OvNdfZXGbkO8i8BS6roTgQ6abEp0Bynajbu5NdaVnE5j6ab sG4I/NtQPoK2qp3wbcPlcXdGL4Rl3Y9tkESgYGzChDlxhk/NuOuBvrPqLOwzWBlR AfYQsahLRgYc0TgBhUHD1acVQZETX/56Th90Jv1ObcjRRZ6PFbdks2YEcenZfPy/ eEb+YE7ocA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:48 2026 by rpki-client