This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer File: b69IsCuX3C0xIlCqI0CDuMG7noE.cer (raw, json) Hash identifier: lD1sk4BGUa3R/DGy4VkmwMyoTfsJVWhEUnpTRyLp3RI= Subject key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C3200657C32306074EC25B39266B268D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 06 Feb 2026 08:10:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214088 IP: 192.166.36.0/24 IP: 2001:30c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:00:65:7c:32:30:60:74:ec:25:b3:92:66:b2:68:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 6 08:10:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d0:1d:d5:cc:c5:cb:db:64:d4:49:d4:00:5a: 29:e1:6c:29:a9:e5:eb:f1:f8:83:f1:03:5f:3b:73: f8:47:98:20:8f:10:cf:ef:d5:1e:95:7e:6c:59:43: b8:d7:94:e1:b0:58:db:f7:e1:87:db:00:6d:5b:13: 6e:fe:d4:cf:7e:38:50:6f:59:5d:fd:b2:c7:72:3b: 21:71:d0:35:9c:13:07:f3:6e:74:54:14:2c:e8:38: 90:39:f7:5f:ac:ba:e1:80:21:50:86:30:b4:d7:c5: 52:dd:69:06:52:85:f0:3a:6b:21:05:b4:dd:51:9d: 33:9c:48:82:c2:cf:16:53:4d:89:c4:74:2f:0e:e2: 80:45:e2:c8:49:86:fb:5c:df:95:83:c5:1d:f1:91: a4:6f:57:13:e4:db:c0:9f:0d:a1:f9:7b:34:02:4a: c2:a3:26:5f:32:c0:61:77:c1:71:fe:ea:38:03:58: 18:0f:80:72:bd:15:66:87:06:b8:b5:22:01:ba:c6: 67:31:96:a9:cb:28:2c:8c:76:01:33:ab:50:7d:55: 36:4f:cc:89:e0:1e:17:fa:ac:52:86:5f:90:8d:61: 06:1f:ff:ce:3b:ad:35:d8:f2:eb:b2:f9:b4:31:b0: 0f:42:c9:a1:1a:b1:25:8a:c3:d4:07:55:63:df:e0: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.36.0/24 IPv6: 2001:30c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214088 Signature Algorithm: sha256WithRSAEncryption 9b:9f:f4:9a:d3:0a:6a:40:52:0c:ed:54:ed:76:c2:8a:6b:77: 41:8c:7d:f2:6b:a5:1f:57:d8:98:90:9a:bc:9b:d6:e8:72:52: c0:eb:d4:ef:b9:22:51:73:1d:e3:6d:ff:4c:1e:90:31:f1:2d: 11:2c:ce:ca:c6:a7:b6:50:2c:6b:1c:47:cf:08:70:66:07:1f: d4:98:dd:d3:36:9b:a6:7f:c8:45:a5:7a:ea:81:e5:8c:eb:62: 2c:02:3a:d0:3b:22:30:0d:03:50:db:fb:e4:ca:3a:a5:81:ee: 01:f6:b8:d5:d1:f4:6e:05:df:3f:bd:9f:ec:40:69:88:14:71: 52:f5:05:eb:49:70:7f:93:2b:a7:bc:5e:1a:34:35:28:48:10: 65:4e:05:59:0b:4a:53:04:29:c1:3f:df:8e:74:33:2e:e7:12: 84:e8:d8:85:23:83:76:d4:ec:58:1f:22:a7:04:95:2e:c8:84: 13:b7:a8:0b:27:ca:e7:51:a3:02:f6:5e:ae:c2:8c:d7:b4:3d: 31:d7:27:00:2c:36:36:49:42:7f:c8:ad:a1:ce:be:65:ab:ea: 44:84:ec:af:07:0b:66:10:bf:4c:b3:f4:ef:93:f3:46:a4:74: 07:10:44:c9:36:8d:26:f6:d2:b1:2f:a9:3b:4f:7c:ca:98:51: d5:42:e6:e0 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZwyAGV8MjBgdOwls5JmsmjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA2MDgxMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmFmNDhiMDJiOTdkYzJkMzEyMjUwYWEyMzQwODNiOGMxYmI5ZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Ad1czFy9tk1EnUAFop4WwpqeXr 8fiD8QNfO3P4R5ggjxDP79UelX5sWUO415ThsFjb9+GH2wBtWxNu/tTPfjhQb1ld /bLHcjshcdA1nBMH8250VBQs6DiQOfdfrLrhgCFQhjC018VS3WkGUoXwOmshBbTd UZ0znEiCws8WU02JxHQvDuKAReLISYb7XN+Vg8Ud8ZGkb1cT5NvAnw2h+Xs0AkrC oyZfMsBhd8Fx/uo4A1gYD4ByvRVmhwa4tSIBusZnMZapyygsjHYBM6tQfVU2T8yJ 4B4X+qxShl+QjWEGH//OO6012PLrsvm0MbAPQsmhGrElisPUB1Vj3+CIMQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG+vSLArl9wtMSJQqiNAg7jBu56BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2MyMzBi NS00NzkxLTQ4ZDAtYjg4Ny1iMzRkNjQ5Y2ZiN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYzIzMGI1 LTQ3OTEtNDhkMC1iODg3LWIzNGQ2NDljZmI3Yi8xL2I2OUlzQ3VYM0MweElsQ3FJ MENEdU1HN25vRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwKYkMA0EAgACMAcDBQMgATDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNESDANBgkqhkiG9w0BAQsFAAOCAQEAm5/0mtMKakBS DO1U7XbCimt3QYx98mulH1fYmJCavJvW6HJSwOvU77kiUXMd423/TB6QMfEtESzO ysantlAsaxxHzwhwZgcf1Jjd0zabpn/IRaV66oHljOtiLAI60DsiMA0DUNv75Mo6 pYHuAfa41dH0bgXfP72f7EBpiBRxUvUF60lwf5Mrp7xeGjQ1KEgQZU4FWQtKUwQp wT/fjnQzLucShOjYhSODdtTsWB8ipwSVLsiEE7eoCyfK51GjAvZersKM17Q9Mdcn ACw2NklCf8itoc6+ZavqRITsrwcLZhC/TLP075PzRqR0BxBEyTaNJvbSsS+pO098 yphR1ULm4A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:19 2026 by rpki-client