This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer File: d1xabqkPXz0AfBDkROO5Y7bTDMU.cer (raw, json) Hash identifier: j0vQJlKpyUFwFzD53AExp8KUyNC4/mKNSPcGs+f4qcs= Subject key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC80AB34CAA03C43B329B85969A4318 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214511 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0a:b3:4c:aa:03:c4:3b:32:9b:85:96:9a:43:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:68:51:f3:bc:e6:12:fe:3a:96:38:82:26:5b: e7:a3:24:38:0a:12:0a:d7:1c:0d:5b:d1:56:6c:95: 54:a0:95:1a:56:81:c4:d5:76:6c:ad:0d:cb:76:1a: bc:72:6a:5b:4a:52:70:aa:6e:a1:c9:d6:de:db:d8: e4:8e:76:a5:70:05:cb:45:75:2b:3a:21:94:ec:be: 58:b8:c3:e2:9c:87:71:86:ae:91:55:ce:75:56:d7: 98:9c:d3:41:ce:96:f1:e8:89:6c:d9:25:3f:42:03: 02:b1:35:f3:16:17:05:dc:5b:f5:ea:28:df:94:24: f7:64:fc:18:5e:52:12:96:82:69:f9:16:33:53:7d: 02:82:0a:17:ad:d5:6a:bd:8f:1c:aa:8b:62:01:27: d1:ea:2b:c1:88:bd:44:38:14:dc:57:56:10:8a:4a: c6:85:b2:41:b0:06:10:37:41:a1:a4:76:3c:ca:e7: 71:f3:e1:75:de:40:a6:78:eb:44:0b:75:99:40:a9: 12:e8:dd:02:ea:5c:cc:28:3d:60:fc:e7:8b:4f:53: 7f:db:e9:3f:0f:4c:a8:d7:4e:71:f4:fa:f9:26:0b: b6:e6:3d:84:35:54:9a:7c:7d:2d:9b:1d:b4:d4:c8: 56:91:9a:e6:76:fb:3f:c9:17:99:13:f6:17:7b:de: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214511 Signature Algorithm: sha256WithRSAEncryption 9e:79:3d:6b:b6:d0:6d:c1:ad:64:75:ac:e1:71:e4:d6:91:12: 42:03:86:fe:9b:af:57:b1:64:db:92:3d:4e:28:d0:7e:3b:d3: e7:b7:6e:f5:02:5e:d7:5d:c2:d0:d7:b4:2f:5f:48:ae:a3:fb: cc:f0:52:ec:5e:c8:f6:35:5d:e3:28:7f:65:ac:a6:1d:1f:83: 2a:ac:d0:bc:c7:fb:30:14:0e:26:aa:bb:de:4a:97:ea:af:dd: 00:40:0f:fb:02:e1:22:19:a7:06:3f:1a:06:b5:f9:7b:db:d1: 70:79:70:25:35:19:93:04:5a:df:de:e7:3f:7e:18:39:a8:fc: 20:45:c4:df:f4:73:0e:37:57:c6:38:6e:90:01:4e:0a:5a:60: 39:e5:9c:ed:00:bb:43:21:40:e9:6a:7a:d4:94:67:34:70:a6: c3:0c:eb:66:5d:55:7a:ee:c4:71:2c:2b:ed:18:70:2b:06:8f: 50:c2:35:09:c5:cd:cf:78:88:86:91:a9:b7:ff:ad:77:21:69: 0e:ae:5c:3f:aa:39:29:fd:54:24:3f:9a:bd:26:ab:a6:1e:fb: 35:26:40:a6:06:df:32:15:62:33:f2:25:24:00:3e:3f:13:90: b6:5b:00:4a:c3:c5:79:5c:a3:d9:ab:45:b6:08:e7:ce:30:ec: 4f:05:57:08 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6yAqzTKoDxDsym4WWmkMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzVjNWE2ZWE5MGY1ZjNkMDA3YzEwZTQ0NGUzYjk2M2I2ZDMwY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWhR87zmEv46ljiCJlvnoyQ4ChIK 1xwNW9FWbJVUoJUaVoHE1XZsrQ3Ldhq8cmpbSlJwqm6hydbe29jkjnalcAXLRXUr OiGU7L5YuMPinIdxhq6RVc51VteYnNNBzpbx6Ils2SU/QgMCsTXzFhcF3Fv16ijf lCT3ZPwYXlISloJp+RYzU30CggoXrdVqvY8cqotiASfR6ivBiL1EOBTcV1YQikrG hbJBsAYQN0GhpHY8yudx8+F13kCmeOtEC3WZQKkS6N0C6lzMKD1g/OeLT1N/2+k/ D0yo105x9Pr5Jgu25j2ENVSafH0tmx201MhWkZrmdvs/yReZE/YXe96GiwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHdcWm6pD189AHwQ5ETjuWO20wzFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzk2ODcz Mi02ZDc2LTQ2NGQtOTdjNC1lNDBhMzM0NjkxYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvOTY4NzMy LTZkNzYtNDY0ZC05N2M0LWU0MGEzMzQ2OTFjOS8xL2QxeGFicWtQWHowQWZCRGtS T081WTdiVERNVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNF7zANBgkqhkiG9w0BAQsFAAOCAQEAnnk9a7bQbcGt ZHWs4XHk1pESQgOG/puvV7Fk25I9TijQfjvT57du9QJe113C0Ne0L19IrqP7zPBS 7F7I9jVd4yh/ZaymHR+DKqzQvMf7MBQOJqq73kqX6q/dAEAP+wLhIhmnBj8aBrX5 e9vRcHlwJTUZkwRa397nP34YOaj8IEXE3/RzDjdXxjhukAFOClpgOeWc7QC7QyFA 6Wp61JRnNHCmwwzrZl1Veu7EcSwr7RhwKwaPUMI1CcXNz3iIhpGpt/+tdyFpDq5c P6o5Kf1UJD+avSarph77NSZApgbfMhViM/IlJAA+PxOQtlsASsPFeVyj2atFtgjn zjDsTwVXCA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:39 2026 by rpki-client