This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer File: cnOYybFuqY0iKkwpyvey68mE8oI.cer (raw, json) Hash identifier: ffbNnoOyYEElzV4lDUvUmY8QNC3rg+IoFsnjCGw7qi0= Subject key identifier: 72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB5DBE416866458B68A4CD572C2D0E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212871 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5d:be:41:68:66:45:8b:68:a4:cd:57:2c:2d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=727398c9b16ea98d222a4c29caf7b2ebc984f282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ca:f6:42:d0:af:fb:d0:4e:3d:05:73:19:38: 57:34:1b:b0:1f:b5:4d:f2:0d:f3:83:f7:87:39:52: 12:d0:8b:6c:6b:73:d3:d0:ec:5c:90:8a:4d:08:4d: 0d:5e:0d:d8:2f:61:02:34:72:d8:a1:ac:96:2c:9c: 99:e1:26:c3:bb:6c:e2:80:2e:c7:26:b9:9c:88:3a: a5:fe:fa:08:3d:8e:18:3f:96:c1:cc:7a:f0:cd:8f: f8:a8:59:71:ec:d5:e6:19:3f:f8:88:70:56:43:f0: b7:80:64:63:6f:db:84:ab:4d:06:be:b7:a1:78:0b: 6e:3b:59:f7:fb:97:53:06:82:24:fa:3d:36:97:58: 0c:3c:ad:cd:93:4c:05:b2:9f:d5:a1:d0:ed:5a:df: 4a:5e:bc:b6:1a:b0:5d:10:28:01:40:f2:ee:92:20: 81:db:5f:6d:af:61:5f:23:02:6c:9b:c3:de:d9:19: 5c:f8:42:14:4e:a1:82:08:71:82:2f:2b:2f:bc:32: b4:7e:09:3e:2a:8c:03:43:ad:cd:94:e1:bf:5d:8f: 7c:a7:ce:5a:9a:2e:ee:13:0f:03:f2:36:23:3d:28: 2c:b1:d4:a4:6e:4f:3a:18:06:96:c0:c9:67:73:42: 17:b1:a7:cb:c2:4e:19:3e:68:2a:93:56:fb:1a:42: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212871 Signature Algorithm: sha256WithRSAEncryption a9:79:55:0a:b6:ea:b8:a5:1e:23:f8:d5:47:1a:b8:28:e1:f3: 60:9d:22:4f:72:60:17:a1:bd:3c:33:69:16:93:7c:d5:e8:50: cd:94:48:bf:03:04:93:3e:5c:12:3c:0a:ca:43:2f:63:aa:1c: 2c:93:11:f3:d1:b3:8a:4a:47:a6:48:5c:7e:b4:6d:7c:5e:a2: bb:76:33:8a:ac:2c:e0:67:4b:54:98:ae:c0:d5:37:0a:5e:6c: 02:1a:fb:fc:f3:e0:22:fa:76:0f:25:6e:86:42:16:33:b1:8a: 43:8e:4f:33:cf:44:b4:31:4a:2f:27:97:b1:64:ba:07:1a:08: b9:00:d3:ef:e1:58:2a:0c:e4:ae:9f:3c:a7:7c:eb:69:c6:f7: 98:32:e8:2e:7e:43:df:e7:42:31:03:7e:28:f7:96:a1:5e:f9: 96:77:74:e5:c2:26:26:8a:7e:39:13:da:f7:a0:ab:bf:e8:db: 08:b4:b6:b2:79:3e:e6:fa:8a:6f:ff:24:b7:79:c7:46:24:3d: fe:88:ad:79:7d:3b:5a:88:cf:8a:30:09:c8:ad:87:17:3e:5e: 0e:c5:0a:c3:f9:59:bd:ab:be:fa:87:ea:3a:ad:e1:ac:b5:3c: 6a:53:17:50:98:0c:3b:4f:e3:4b:0e:12:4d:96:a8:a8:2e:51: 66:d6:7b:12 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9y12+QWhmRYtopM1XLC0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjczOThjOWIxNmVhOThkMjIyYTRjMjljYWY3YjJlYmM5ODRmMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mr2QtCv+9BOPQVzGThXNBuwH7VN 8g3zg/eHOVIS0Itsa3PT0OxckIpNCE0NXg3YL2ECNHLYoayWLJyZ4SbDu2zigC7H JrmciDql/voIPY4YP5bBzHrwzY/4qFlx7NXmGT/4iHBWQ/C3gGRjb9uEq00Gvreh eAtuO1n3+5dTBoIk+j02l1gMPK3Nk0wFsp/VodDtWt9KXry2GrBdECgBQPLukiCB 219tr2FfIwJsm8Pe2Rlc+EIUTqGCCHGCLysvvDK0fgk+KowDQ63NlOG/XY98p85a mi7uEw8D8jYjPSgssdSkbk86GAaWwMlnc0IXsafLwk4ZPmgqk1b7GkLhjwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHJzmMmxbqmNIipMKcr3suvJhPKCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzNjNjA0 ZS1lNmE4LTRlNGUtYjc2OS01YTA3ZTI2ZmI4MjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvM2M2MDRl LWU2YTgtNGU0ZS1iNzY5LTVhMDdlMjZmYjgyMi8xL2NuT1l5YkZ1cVkwaUtrd3B5 dmV5NjhtRThvSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/hzANBgkqhkiG9w0BAQsFAAOCAQEAqXlVCrbquKUe I/jVRxq4KOHzYJ0iT3JgF6G9PDNpFpN81ehQzZRIvwMEkz5cEjwKykMvY6ocLJMR 89GzikpHpkhcfrRtfF6iu3Yziqws4GdLVJiuwNU3Cl5sAhr7/PPgIvp2DyVuhkIW M7GKQ45PM89EtDFKLyeXsWS6BxoIuQDT7+FYKgzkrp88p3zracb3mDLoLn5D3+dC MQN+KPeWoV75lnd05cImJop+ORPa96Crv+jbCLS2snk+5vqKb/8kt3nHRiQ9/oit eX07WojPijAJyK2HFz5eDsUKw/lZvau++ofqOq3hrLU8alMXUJgMO0/jSw4STZao qC5RZtZ7Eg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:14 2026 by rpki-client