This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer File: g76BmaF8rKps1S15QSNtpuVuG-o.cer (raw, json) Hash identifier: 4LyTyKrCRVl43eU+d55pdF3XWw1ywM1Ns8VHKdoisFU= Subject key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECF22FD9679B7AD39971AF2639FDBE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48453 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f2:2f:d9:67:9b:7a:d3:99:71:af:26:39:fd:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bc:3f:9b:b9:96:4d:6d:aa:23:b1:1a:9a:0c: 6b:a4:68:c6:18:55:33:37:c5:46:5a:fc:f3:1a:32: ae:0b:92:93:45:56:e9:84:f9:21:6a:ac:96:9d:c9: d1:ae:65:29:7d:0b:a7:4b:a7:dd:68:96:0d:30:95: 0d:d8:ca:31:18:c6:41:2f:8b:0f:d6:5e:0f:f3:10: a9:60:07:24:ee:d7:0d:b1:f8:0a:e7:17:32:e6:d7: d2:3f:02:b3:c8:be:83:7f:87:e8:94:8a:e1:88:7c: 89:1d:59:8a:93:a6:4f:c9:34:c5:f5:ee:a6:fc:d8: 0c:fa:1c:3a:28:2f:be:d6:06:c6:7b:40:de:40:96: 17:85:7f:d6:98:55:2d:d5:55:04:fb:95:22:f0:b5: e5:8f:cb:cd:f3:15:44:4e:dd:c6:5e:5b:72:ae:98: 62:63:b9:cf:61:9b:73:1b:00:f6:dc:d0:22:98:9b: f7:5c:2d:18:08:e3:f1:d0:8b:1e:a7:77:5a:d8:f9: f8:d5:54:49:1e:0c:01:a1:14:37:a3:c6:f3:dc:b3: 60:0f:4d:2c:9f:3b:b9:b7:55:f0:ee:69:b4:2f:e7: d0:b7:9a:4c:3c:d8:55:95:b0:af:67:b6:fd:bc:8b: 59:93:5d:f2:c2:37:f8:e6:7c:d5:8c:7e:b3:de:49: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48453 Signature Algorithm: sha256WithRSAEncryption 79:9e:35:e3:0a:21:b0:a6:88:ec:0c:69:62:b8:e1:b5:2c:ee: 94:52:60:17:24:e4:66:c2:b0:06:da:3a:09:1a:28:40:06:cf: c3:04:c2:4e:a1:39:6d:4f:5a:fc:88:ed:96:ef:91:83:7e:b4: 28:49:ef:32:8e:5c:f9:3c:93:36:9e:d8:8d:08:6e:5b:d7:c8: a6:73:42:72:1e:a6:02:f3:b4:0f:be:70:db:23:64:6e:07:84: b8:b6:92:dd:77:d1:5c:d7:4e:1f:c4:a4:71:58:b0:e3:fd:29: 1b:ea:21:cf:2a:1c:79:80:9a:b7:a9:d1:91:38:b7:6f:b6:99: a9:d6:1b:ff:55:b0:1d:8e:84:58:6f:bb:8f:7f:3d:c2:f9:7f: 6a:1b:53:90:cb:4e:ca:c8:11:6d:9f:06:83:95:23:a8:49:66: 1e:5f:ae:d8:89:e3:1e:99:c4:d0:38:cf:23:0a:84:a7:94:1b: af:65:7c:4d:0a:21:4d:ff:fc:62:8a:57:24:85:0a:63:f7:1b: d2:10:76:bf:99:53:a3:79:ef:c6:44:2f:fc:91:3d:ed:00:69: 30:0c:d6:b9:40:67:ed:d0:d3:b1:a1:2c:cf:fe:a3:5d:84:be: cf:b0:7a:0f:97:d1:69:de:cf:46:1a:01:04:8f:61:43:cf:7f: 7a:dc:66:0e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57PIv2WebetOZca8mOf2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2JlODE5OWExN2NhY2FhNmNkNTJkNzk0MTIzNmRhNmU1NmUxYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbw/m7mWTW2qI7EamgxrpGjGGFUz N8VGWvzzGjKuC5KTRVbphPkhaqyWncnRrmUpfQunS6fdaJYNMJUN2MoxGMZBL4sP 1l4P8xCpYAck7tcNsfgK5xcy5tfSPwKzyL6Df4folIrhiHyJHVmKk6ZPyTTF9e6m /NgM+hw6KC++1gbGe0DeQJYXhX/WmFUt1VUE+5Ui8LXlj8vN8xVETt3GXltyrphi Y7nPYZtzGwD23NAimJv3XC0YCOPx0Isep3da2Pn41VRJHgwBoRQ3o8bz3LNgD00s nzu5t1Xw7mm0L+fQt5pMPNhVlbCvZ7b9vItZk13ywjf45nzVjH6z3kkfFwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIO+gZmhfKyqbNUteUEjbablbhvqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViL2ZmNTBl Yy1iMTJkLTQ3OTgtODlmYS0yMmQxYmNmYTFlZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvZmY1MGVj LWIxMmQtNDc5OC04OWZhLTIyZDFiY2ZhMWVkYS8xL2c3NkJtYUY4cktwczFTMTVR U050cHVWdUctby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC9RTANBgkqhkiG9w0BAQsFAAOCAQEAeZ414wohsKaI 7AxpYrjhtSzulFJgFyTkZsKwBto6CRooQAbPwwTCTqE5bU9a/Ijtlu+Rg360KEnv Mo5c+TyTNp7YjQhuW9fIpnNCch6mAvO0D75w2yNkbgeEuLaS3XfRXNdOH8SkcViw 4/0pG+ohzyoceYCat6nRkTi3b7aZqdYb/1WwHY6EWG+7j389wvl/ahtTkMtOysgR bZ8Gg5UjqElmHl+u2InjHpnE0DjPIwqEp5Qbr2V8TQohTf/8YopXJIUKY/cb0hB2 v5lTo3nvxkQv/JE97QBpMAzWuUBn7dDTsaEsz/6jXYS+z7B6D5fRad7PRhoBBI9h Q89/etxmDg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:07 2026 by rpki-client