This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer File: g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer (raw, json) Hash identifier: 9YSp6P4fY5yssScbnMHGOLXvppFJRiNAb9wv1m3S73E= Subject key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF20867D913F77C3C98E8EB80345A4A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210385 IP: 2a14:ee80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:08:67:d9:13:f7:7c:3c:98:e8:eb:80:34:5a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1b:cc:93:39:67:62:48:76:1b:80:1c:ea:7d: 87:68:fd:9c:4d:3e:ce:04:bb:43:0d:ee:93:84:f9: 3c:1a:d6:9f:9b:4f:76:8b:9d:96:ac:d8:7d:b6:d8: 97:8a:bc:b4:7a:93:7a:1d:8a:c6:57:33:bf:ec:05: 7a:f4:b2:fa:32:28:d1:aa:e7:35:30:cc:45:c7:2e: 06:d7:a3:06:af:f0:8f:c1:cb:0d:df:bd:43:e1:f4: c7:be:21:77:c5:e4:34:66:15:72:9b:49:e9:f2:7f: e2:76:55:38:e8:73:3b:26:af:e6:47:da:26:42:0f: 55:05:ec:47:f2:90:c4:58:92:05:9c:f1:fa:77:ca: 67:f5:d0:67:23:49:c1:0d:79:92:9f:a3:be:32:43: 4f:0c:fa:02:d5:ef:3c:27:38:78:18:2e:87:0e:47: 7e:22:3c:2e:e1:e1:89:ae:db:9a:53:d4:90:0a:9c: 6e:bc:c7:4b:2f:06:f8:69:63:b7:23:d3:4e:28:63: af:43:b0:47:25:4a:ab:a5:5b:c3:bc:ba:53:45:43: a2:d3:d6:a1:ba:79:4c:a3:09:5e:2b:43:c5:b6:60: 8d:63:23:e5:40:a9:4d:ea:48:4f:43:7f:34:e2:e3: 3c:a7:2e:09:0b:f6:0c:a1:5a:ed:55:a8:84:c9:77: 7b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ee80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210385 Signature Algorithm: sha256WithRSAEncryption 8c:53:b3:d1:4d:bf:68:52:c4:7e:c2:dd:21:49:9a:ee:d3:23: 53:3e:94:a1:a8:c4:93:42:0b:b1:56:8e:8d:ad:3e:3f:82:6b: 6b:66:16:81:de:23:ac:ec:10:ef:87:18:25:5a:e8:d3:32:ee: b3:99:59:08:8d:86:70:9b:34:0a:1a:1a:21:99:1b:81:c6:21: 3f:eb:69:96:f1:d5:0c:53:17:7f:69:52:a1:af:39:f3:7e:d8: 55:5b:b4:8a:75:bc:38:63:79:7b:15:3c:ce:dd:18:e2:da:69: cf:ca:b0:e1:2a:61:0a:81:87:ef:74:69:e6:aa:d1:47:39:b3: b7:60:58:c7:d7:7c:72:c3:4c:0a:5d:3c:b2:77:34:36:f3:8a: e6:2f:a0:a8:0a:94:58:d5:1e:f6:c5:2e:a6:af:ed:a7:0d:38: ae:db:4f:0d:5e:11:67:31:49:ac:63:d6:57:1d:da:0b:61:6f: 76:02:35:ee:1a:72:27:f6:7d:8d:3f:2b:e8:a6:7f:fd:5b:64: 88:c9:6b:ae:ce:85:55:d8:e8:a8:51:84:e9:62:39:53:18:46: 14:31:4d:00:83:b7:7d:11:b0:8c:41:8b:4f:13:66:d1:00:69: 54:d6:3f:29:bf:97:6f:ee:f0:df:cd:55:2c:2e:e3:95:22:16: 6f:51:2a:bd -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt/8ghn2RP3fDyY6OuANFpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2RmMGNhY2I5ZmQ1MGUxYmU3ZGZiZjNkMGFjODU0YmVlZDc4NmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRvMkzlnYkh2G4Ac6n2HaP2cTT7O BLtDDe6ThPk8Gtafm092i52WrNh9ttiXiry0epN6HYrGVzO/7AV69LL6MijRquc1 MMxFxy4G16MGr/CPwcsN371D4fTHviF3xeQ0ZhVym0np8n/idlU46HM7Jq/mR9om Qg9VBexH8pDEWJIFnPH6d8pn9dBnI0nBDXmSn6O+MkNPDPoC1e88Jzh4GC6HDkd+ Ijwu4eGJrtuaU9SQCpxuvMdLLwb4aWO3I9NOKGOvQ7BHJUqrpVvDvLpTRUOi09ah unlMowleK0PFtmCNYyPlQKlN6khPQ3804uM8py4JC/YMoVrtVaiEyXd7ywIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFIPfDKy5/VDhvn3789CshUvu14a+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2FhMWM1 MS05MjY0LTQwNmUtYjc5Ni00ZTAwYzNiNzA4NzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvYWExYzUx LTkyNjQtNDA2ZS1iNzk2LTRlMDBjM2I3MDg3OC8xL2c5OE1yTG45VU9HLWZmdnow S3lGUy03WGhyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhTugDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDNdEwDQYJKoZIhvcNAQELBQADggEBAIxTs9FNv2hSxH7C3SFJmu7TI1M+lKGo xJNCC7FWjo2tPj+Ca2tmFoHeI6zsEO+HGCVa6NMy7rOZWQiNhnCbNAoaGiGZG4HG IT/raZbx1QxTF39pUqGvOfN+2FVbtIp1vDhjeXsVPM7dGOLaac/KsOEqYQqBh+90 aeaq0Uc5s7dgWMfXfHLDTApdPLJ3NDbziuYvoKgKlFjVHvbFLqav7acNOK7bTw1e EWcxSaxj1lcd2gthb3YCNe4acif2fY0/K+imf/1bZIjJa67OhVXY6KhRhOliOVMY RhQxTQCDt30RsIxBi08TZtEAaVTWPym/l2/u8N/NVSwu45UiFm9RKr0= -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:18 2026 by rpki-client