This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer File: _ME6qqHk6E6wwly5UOJp_z3bzuA.cer (raw, json) Hash identifier: 5qo1xIkthvJaD0nQiD/RQaobMr6yTBD4wWeWSOiTX6w= Subject key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA3FC1990E1D3485B7D68E95CB0A3E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202275 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3f:c1:99:0e:1d:34:85:b7:d6:8e:95:cb:0a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:47:ee:a9:e7:62:da:6f:ae:65:ff:8a:26: 08:cd:d9:63:35:ec:f2:cc:e3:17:28:66:c8:80:c4: 63:53:bc:e4:72:99:ae:cf:cc:51:0f:6d:01:9b:7d: 15:d8:37:61:b5:28:e1:78:d4:bb:e4:46:62:4b:f9: 93:6c:1f:bf:6f:0e:5f:db:cb:c1:19:e4:17:7a:f1: 36:1b:e5:52:e2:89:ce:5e:49:8f:81:f4:71:63:06: 64:da:53:68:3b:0c:d9:aa:ca:d5:6b:f9:85:4b:2f: 8d:7a:3d:a1:1e:5c:4f:9e:33:c0:1f:18:44:b0:f7: fe:a7:3a:15:5b:d5:bf:39:62:b6:26:11:07:fe:a5: a9:68:47:7e:88:06:e3:e3:4b:06:23:f3:4e:97:34: b6:6e:a6:07:7a:d0:8c:89:25:ca:7f:29:a7:a0:09: 00:1f:3d:11:53:72:3d:48:41:f4:3a:fd:44:8f:88: 57:19:63:cc:d0:86:bf:2a:74:88:68:9c:08:14:7b: ee:b7:b4:3c:62:21:be:19:72:8f:d7:13:b9:fe:a9: 23:07:56:3a:25:6c:df:53:02:62:9b:1f:c7:81:6b: 1a:4a:39:44:29:c5:dd:8a:48:fb:7b:45:f1:2b:03: 21:81:73:ef:6e:dd:40:23:72:e3:23:41:2c:8c:07: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202275 Signature Algorithm: sha256WithRSAEncryption 8b:19:a4:8f:67:20:8e:6b:ca:bf:8b:a5:78:c6:fb:65:5c:43: ef:77:4f:d7:67:86:ea:9f:09:e9:55:d8:d2:22:65:76:1f:fe: 4d:b1:61:24:2c:c1:9f:a4:ed:1e:7d:06:3d:fc:c9:df:1e:d3: 60:99:b9:ed:ef:80:9f:76:ab:ca:0f:dc:81:72:ff:95:05:59: 13:58:d3:65:5c:b2:7e:55:b1:f9:6e:4f:d6:11:f3:a1:92:65: e5:60:bb:62:ec:3a:ec:2a:5a:41:41:2d:58:f7:d8:53:99:6b: f8:c4:7c:63:0b:6a:3a:6a:6c:0e:d1:42:0c:0d:6b:d0:34:48: e7:1e:f1:5a:d0:ec:80:74:e0:76:bd:1b:8b:70:d5:e6:b4:48: eb:d5:8c:1b:31:8f:cb:08:dd:d9:a1:21:f3:0e:8f:ce:13:a6: af:d9:d5:72:59:fc:7c:9f:34:e6:af:60:e1:72:56:39:89:42: ee:b4:0f:ce:cf:b2:ee:46:a7:2f:2f:1a:5c:f0:7f:fa:1d:db: 8e:f8:5d:7b:fa:2d:47:ce:70:70:af:bf:09:d0:74:93:f4:67: f1:11:a0:0b:1e:98:40:89:42:41:b2:83:05:a9:e8:d3:34:7a: b1:ef:27:35:8a:ad:0f:e1:8c:0c:00:36:b9:29:e7:ec:63:db: 0c:08:03:79 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9yj/BmQ4dNIW31o6Vywo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2MxM2FhYWExZTRlODRlYjBjMjVjYjk1MGUyNjlmZjNkZGJjZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozZH7qnnYtpvrmX/iiYIzdljNezy zOMXKGbIgMRjU7zkcpmuz8xRD20Bm30V2DdhtSjheNS75EZiS/mTbB+/bw5f28vB GeQXevE2G+VS4onOXkmPgfRxYwZk2lNoOwzZqsrVa/mFSy+Nej2hHlxPnjPAHxhE sPf+pzoVW9W/OWK2JhEH/qWpaEd+iAbj40sGI/NOlzS2bqYHetCMiSXKfymnoAkA Hz0RU3I9SEH0Ov1Ej4hXGWPM0Ia/KnSIaJwIFHvut7Q8YiG+GXKP1xO5/qkjB1Y6 JWzfUwJimx/HgWsaSjlEKcXdikj7e0XxKwMhgXPvbt1AI3LjI0EsjAepQQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFPzBOqqh5OhOsMJcuVDiaf89287gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1L2RkMGRm YS05MTkzLTQyOWItOTg2My0zZmY2OTUyYzVlZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvZGQwZGZh LTkxOTMtNDI5Yi05ODYzLTNmZjY5NTJjNWVlOS8xL19NRTZxcUhrNkU2d3dseTVV T0pwX3ozYnp1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMWIzANBgkqhkiG9w0BAQsFAAOCAQEAixmkj2cgjmvK v4uleMb7ZVxD73dP12eG6p8J6VXY0iJldh/+TbFhJCzBn6TtHn0GPfzJ3x7TYJm5 7e+An3aryg/cgXL/lQVZE1jTZVyyflWx+W5P1hHzoZJl5WC7Yuw67CpaQUEtWPfY U5lr+MR8YwtqOmpsDtFCDA1r0DRI5x7xWtDsgHTgdr0bi3DV5rRI69WMGzGPywjd 2aEh8w6PzhOmr9nVcln8fJ805q9g4XJWOYlC7rQPzs+y7kanLy8aXPB/+h3bjvhd e/otR85wcK+/CdB0k/Rn8RGgCx6YQIlCQbKDBano0zR6se8nNYqtD+GMDAA2uSnn 7GPbDAgDeQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:22 2026 by rpki-client