This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer File: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer (raw, json) Hash identifier: EyJCkDzniE/qB3PXEoWpBm6o4E/UbeNwdcc1CoxJDrw= Subject key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C801625A081CCDA315A7A581EF1202C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210119 IP: 2a14:f480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:16:25:a0:81:cc:da:31:5a:7a:58:1e:f1:20:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=754c57866e97aadaad75decc69d0df072d506ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:f4:ea:d3:6a:0b:fa:93:0a:ae:a3:64:4f: d8:b1:d2:e9:95:a7:dd:f4:ae:70:ed:ca:82:64:4c: 87:e9:0e:02:12:6b:d7:68:d1:10:29:a1:0f:2c:83: 9f:f9:9c:16:1c:28:e3:3b:1b:ee:67:d6:78:6f:c1: 09:3b:d7:18:25:93:e2:0f:7f:dc:10:73:de:09:a0: 29:bf:fa:67:5a:c5:61:eb:a0:31:ef:29:22:60:52: ec:73:4b:c2:c1:d2:47:7f:8d:04:11:f3:00:d7:7f: 00:cb:41:1e:21:4f:b8:6a:f7:30:56:16:b8:19:03: 65:a8:80:03:e5:8e:55:1f:4b:1e:c7:c5:30:df:bf: 98:11:00:92:5b:43:15:a3:f9:8e:7c:54:b3:4d:09: c5:ba:b7:67:50:8b:07:a3:95:ec:5e:88:7a:b0:9b: 13:70:54:58:cb:46:2d:9f:84:65:0a:65:7f:6e:ee: 2b:98:45:2e:cf:59:e6:6a:a1:2c:2a:8f:44:8c:af: 56:85:3f:1c:1a:8d:80:b6:8c:22:ee:82:1e:bd:71: e9:49:d4:95:58:2e:33:d8:4f:43:a8:f4:36:1a:ac: d2:81:3b:1a:58:af:16:29:f2:d8:24:05:88:66:d6: 87:41:96:ce:40:8e:73:dd:1c:07:81:4c:41:3d:5a: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:f480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210119 Signature Algorithm: sha256WithRSAEncryption 27:fc:50:f3:1f:60:a5:eb:90:80:12:cc:47:37:54:b6:55:c5: fe:35:e5:a5:b0:12:40:8c:49:27:58:a5:34:04:46:f1:60:bb: 05:dd:d6:fc:f4:5e:86:49:41:fd:30:40:a4:48:8f:00:52:eb: c0:3d:d6:6d:63:c2:53:5d:ce:94:eb:32:a9:9a:7c:77:eb:a0: bd:8e:36:5a:a4:5b:d4:b8:7c:d8:d7:f3:2c:59:7a:68:26:52: e3:f6:9f:26:07:0a:f2:70:a8:25:e8:3b:06:8a:cc:80:69:6b: db:8a:09:52:4c:b4:25:1a:d4:12:d8:d1:c8:7c:de:22:91:f4: 7b:21:98:48:ab:2e:b5:c8:a7:60:83:d2:7f:7e:c1:9d:7d:4a: 87:9e:37:23:f9:82:87:fa:c0:77:94:95:37:84:8c:eb:88:57: ea:ae:94:dd:2e:3e:a2:a2:a7:4f:3a:5a:fd:0a:c3:41:f4:04: 57:bf:d2:7f:11:8d:0c:32:5f:97:11:f3:59:b4:20:ec:b1:d5: b0:c0:8a:a1:84:df:48:41:26:c3:b7:1d:22:b2:72:7d:cb:b7: ab:c0:70:76:33:29:57:c4:ba:83:56:3c:ec:d9:76:69:25:fb: 75:5e:e2:b9:cb:38:8c:0e:42:8d:25:24:11:db:79:19:fb:e4: 29:0a:e1:95 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt8gBYloIHM2jFaelge8SAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTRjNTc4NjZlOTdhYWRhYWQ3NWRlY2M2OWQwZGYwNzJkNTA2ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5T06tNqC/qTCq6jZE/YsdLplafd 9K5w7cqCZEyH6Q4CEmvXaNEQKaEPLIOf+ZwWHCjjOxvuZ9Z4b8EJO9cYJZPiD3/c EHPeCaApv/pnWsVh66Ax7ykiYFLsc0vCwdJHf40EEfMA138Ay0EeIU+4avcwVha4 GQNlqIAD5Y5VH0sex8Uw37+YEQCSW0MVo/mOfFSzTQnFurdnUIsHo5XsXoh6sJsT cFRYy0Ytn4RlCmV/bu4rmEUuz1nmaqEsKo9EjK9WhT8cGo2Atowi7oIevXHpSdSV WC4z2E9DqPQ2GqzSgTsaWK8WKfLYJAWIZtaHQZbOQI5z3RwHgUxBPVraGwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFHVMV4Zul6rarXXezGnQ3wctUG7nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwL2UzYmJk Zi05NTg1LTQ2ZTUtYjVjYy1mNjhhNTlkMmZlMGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvZTNiYmRm LTk1ODUtNDZlNS1iNWNjLWY2OGE1OWQyZmUwZC8xL2RVeFhobTZYcXRxdGRkN01h ZERmQnkxUWJ1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhT0gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDNMcwDQYJKoZIhvcNAQELBQADggEBACf8UPMfYKXrkIASzEc3VLZVxf415aWw EkCMSSdYpTQERvFguwXd1vz0XoZJQf0wQKRIjwBS68A91m1jwlNdzpTrMqmafHfr oL2ONlqkW9S4fNjX8yxZemgmUuP2nyYHCvJwqCXoOwaKzIBpa9uKCVJMtCUa1BLY 0ch83iKR9HshmEirLrXIp2CD0n9+wZ19SoeeNyP5gof6wHeUlTeEjOuIV+qulN0u PqKip086Wv0Kw0H0BFe/0n8RjQwyX5cR81m0IOyx1bDAiqGE30hBJsO3HSKycn3L t6vAcHYzKVfEuoNWPOzZdmkl+3Ve4rnLOIwOQo0lJBHbeRn75CkK4ZU= -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:57 2026 by rpki-client