This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_cmkuOXbmY8RgGzH-d-PpZeZOMs.cer File: _cmkuOXbmY8RgGzH-d-PpZeZOMs.cer (raw, json) Hash identifier: yFMy25RidEBJZYdaHF2Q/Torl1jSR9zFzH82pQPxa3E= Subject key identifier: FD:C9:A4:B8:E5:DB:99:8F:11:80:6C:C7:F9:DF:8F:A5:97:99:38:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B9BF3897E55E21D9F0040170AF690FBC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 08 Jan 2026 04:53:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209601 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9b:f3:89:7e:55:e2:1d:9f:00:40:17:0a:f6:90:fb:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 8 04:53:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdc9a4b8e5db998f11806cc7f9df8fa5979938cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:ff:16:99:7a:ad:86:4a:df:7c:ee:b8:10: 8f:ba:8b:69:d3:ac:f9:ef:56:45:ec:ac:24:d0:2b: 73:2e:a9:a7:be:77:f9:9f:f2:9d:4e:1a:cd:b1:81: 14:d4:6a:32:70:4b:04:c8:e4:b0:f1:51:22:44:89: 4c:6f:79:93:20:9b:33:7b:74:43:62:bd:c5:6f:30: 67:9f:5d:07:b7:24:3a:13:d8:f7:da:24:d5:5c:fc: 29:f9:2c:dd:52:63:89:51:61:8b:98:6c:d3:37:cb: 0e:f6:e4:7c:16:01:b5:69:92:dd:9a:d4:5a:e2:dd: 43:ca:db:34:38:ad:98:fd:df:ee:2b:ca:04:bb:20: fd:9c:1f:f0:af:67:8e:99:80:fb:67:8b:40:a6:d9: 88:24:48:1e:61:77:60:9c:26:f3:bc:c1:a5:5e:32: 55:a4:79:1c:f2:ce:f4:ee:07:d3:38:bf:d3:7c:38: da:f3:37:31:6a:ae:32:92:67:42:b5:83:34:6f:b3: 07:e8:d6:dd:b0:c6:c9:3d:cf:ea:20:f0:c4:a1:b6: c0:fc:6a:7d:12:9b:df:b6:c4:6e:61:ae:bd:19:e0: 08:22:7f:ef:e5:59:c0:3d:35:91:59:87:45:3d:cd: 3c:96:f5:be:99:7f:15:6c:85:f7:41:1d:9e:0d:b2: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C9:A4:B8:E5:DB:99:8F:11:80:6C:C7:F9:DF:8F:A5:97:99:38:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209601 Signature Algorithm: sha256WithRSAEncryption 1c:38:dc:d9:8c:a3:a2:13:fc:0b:2a:ee:ef:52:fc:ce:c5:25: d4:d3:28:ff:55:f9:cd:c0:b4:7b:28:c9:be:f4:74:64:46:e9: aa:5c:38:f7:d1:dc:94:61:e8:32:86:1f:8d:0f:15:bc:42:dd: 56:cd:de:d5:bf:85:b1:45:a8:82:b3:f3:9b:ef:df:69:1b:99: 64:b8:63:3f:cb:4c:ec:a5:64:2b:a3:d4:d4:09:c8:be:83:19: c8:b9:22:8c:92:32:36:48:73:96:85:8b:d1:97:16:bd:5c:75: 2c:ed:b3:d8:8b:56:7e:ea:dd:57:fc:e1:cd:e2:d3:77:0c:e0: 82:00:a6:6e:eb:07:75:e2:a8:9d:0d:fc:94:8a:e9:f4:4d:0a: 50:87:ca:fa:4d:44:8d:cf:71:93:f2:9f:7a:83:6e:db:42:4f: 0a:66:85:bd:f6:02:fc:e1:61:70:04:bb:79:7e:2f:eb:0b:8c: 17:6e:ac:80:a2:59:6b:83:83:54:dc:8a:a8:55:20:f1:da:20: f5:09:82:2a:9f:46:04:62:d0:65:d8:10:69:17:56:14:52:55: 1a:f8:1e:93:d1:0c:f5:11:28:31:70:fb:49:54:a8:b6:45:b8: 93:82:2e:9e:dc:48:71:af:97:7c:b1:64:5b:68:10:0f:e4:d5: 5c:d9:86:41 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZub84l+VeIdnwBAFwr2kPvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA4MDQ1MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGM5YTRiOGU1ZGI5OThmMTE4MDZjYzdmOWRmOGZhNTk3OTkzOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudL/Fpl6rYZK33zuuBCPuotp06z5 71ZF7Kwk0CtzLqmnvnf5n/KdThrNsYEU1GoycEsEyOSw8VEiRIlMb3mTIJsze3RD Yr3FbzBnn10HtyQ6E9j32iTVXPwp+SzdUmOJUWGLmGzTN8sO9uR8FgG1aZLdmtRa 4t1Dyts0OK2Y/d/uK8oEuyD9nB/wr2eOmYD7Z4tAptmIJEgeYXdgnCbzvMGlXjJV pHkc8s707gfTOL/TfDja8zcxaq4ykmdCtYM0b7MH6NbdsMbJPc/qIPDEobbA/Gp9 EpvftsRuYa69GeAIIn/v5VnAPTWRWYdFPc08lvW+mX8VbIX3QR2eDbKXiwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFP3JpLjl25mPEYBsx/nfj6WXmTjLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzU0OGYx YS0xNTk4LTQ4YTgtYmE3MS01ZDg4ODY2ZTM4Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNTQ4ZjFh LTE1OTgtNDhhOC1iYTcxLTVkODg4NjZlMzhjYS8xL19jbWt1T1hibVk4UmdHekgt ZC1QcFplWk9Ncy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMywTANBgkqhkiG9w0BAQsFAAOCAQEAHDjc2YyjohP8 Cyru71L8zsUl1NMo/1X5zcC0eyjJvvR0ZEbpqlw499HclGHoMoYfjQ8VvELdVs3e 1b+FsUWogrPzm+/faRuZZLhjP8tM7KVkK6PU1AnIvoMZyLkijJIyNkhzloWL0ZcW vVx1LO2z2ItWfurdV/zhzeLTdwzgggCmbusHdeKonQ38lIrp9E0KUIfK+k1Ejc9x k/KfeoNu20JPCmaFvfYC/OFhcAS7eX4v6wuMF26sgKJZa4ODVNyKqFUg8dog9QmC Kp9GBGLQZdgQaRdWFFJVGvgek9EM9REoMXD7SVSotkW4k4IuntxIca+XfLFkW2gQ D+TVXNmGQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:37 2026 by rpki-client