This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer File: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer (raw, json) Hash identifier: dcscOq1p5xnTwE8sGXh/Kctp+XKSMbV/RqRxjXYM+UY= Subject key identifier: 99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8025C5A308601E0A4B4E04AE375BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15754 AS: 57503 AS: 60915 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:02:5c:5a:30:86:01:e0:a4:b4:e0:4a:e3:75:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:28:7a:b1:87:05:e1:40:95:4f:6a:cd:c5: d1:2e:4e:1b:75:b5:0d:dc:8c:58:b3:d3:1b:df:33: 1d:00:a1:7a:d3:3b:d4:57:1a:11:01:d5:0a:d8:eb: 72:9c:d5:a8:ec:5d:6c:ef:12:0a:40:05:c9:77:1f: 1a:c5:17:37:25:6c:6b:03:c2:20:96:a9:7a:d5:61: 2b:6d:4d:62:79:29:14:46:e1:07:30:90:1f:41:f4: 25:e2:2e:ea:0f:8b:d6:83:e6:13:ca:58:56:ff:9f: 83:9e:eb:30:ad:94:ec:ac:f1:c6:f0:3c:30:97:e9: 2e:18:4a:9e:52:f2:c8:ce:c1:2b:eb:74:c8:b2:ed: b1:48:6d:06:f6:58:27:53:4e:42:d2:8d:94:43:f9: c5:af:2a:f6:d4:ad:fc:c9:92:68:09:28:b3:f8:1f: f8:a7:6c:2d:f0:f4:ad:8e:1e:0b:e9:b9:cc:24:91: 65:a2:a1:67:6b:01:c0:1d:50:ee:3f:ac:fc:6d:eb: eb:ef:f5:ec:93:ac:b5:06:a3:e5:07:5d:c9:70:06: 74:83:df:b6:fa:da:bb:0c:46:4a:5f:1b:97:f6:2b: 65:3a:c7:ca:a2:73:bb:db:b3:23:bf:7d:35:fc:22: 91:bf:86:25:34:a9:54:dd:53:34:cb:02:1c:96:59: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 15754 57503 60915 Signature Algorithm: sha256WithRSAEncryption 9e:6c:5a:62:88:8b:51:9c:fb:b0:0b:a3:05:84:32:3e:7c:33: f1:0e:fc:35:e3:04:99:66:7d:69:61:9e:1b:9f:70:5f:41:c0: 5a:d2:70:83:b9:ca:f2:48:5b:25:12:b4:7d:cf:61:ce:99:65: 1c:1c:ca:18:c8:d0:90:90:2d:a1:38:ab:fa:d4:8b:af:86:44: 9b:f2:f5:cd:13:60:89:61:29:63:63:e6:e2:30:06:6c:d4:c7: 7c:ea:c3:47:20:16:81:09:ba:7a:ee:bf:9d:ac:e0:7a:24:08: de:98:56:51:73:6e:a4:16:64:ef:78:55:f1:ae:a4:6a:d3:36: af:61:a5:16:95:a2:e5:49:e2:6b:04:2c:72:02:83:9a:3a:bf: b7:1e:7e:00:cf:56:5e:a9:16:53:7b:fb:1a:d0:c7:7a:24:e0: 05:ac:4f:03:e0:d2:00:e2:22:67:cd:70:59:95:11:1e:f2:6a: 4f:cb:dd:c2:a7:1c:e9:8b:53:f9:83:0d:61:be:a0:e4:1c:3f: 23:2d:dd:ce:a3:12:bd:2a:65:39:2f:c2:87:f5:d5:c5:da:52: 19:26:4c:fd:8a:32:54:9f:e1:72:7b:d6:36:6f:8a:89:6b:2a: 27:0c:40:5e:28:bd:12:0f:4c:c3:35:6e:37:c1:58:b1:0d:41: 49:96:2b:a7 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt6yAJcWjCGAeCktOBK43W+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWE1ZTRjMWNkZThiY2IzYjg0MjA3NzBkNTlhODNhNzkxN2M4Y2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7ooerGHBeFAlU9qzcXRLk4bdbUN 3IxYs9Mb3zMdAKF60zvUVxoRAdUK2OtynNWo7F1s7xIKQAXJdx8axRc3JWxrA8Ig lql61WErbU1ieSkURuEHMJAfQfQl4i7qD4vWg+YTylhW/5+DnuswrZTsrPHG8Dww l+kuGEqeUvLIzsEr63TIsu2xSG0G9lgnU05C0o2UQ/nFryr21K38yZJoCSiz+B/4 p2wt8PStjh4L6bnMJJFloqFnawHAHVDuP6z8bevr7/Xsk6y1BqPlB13JcAZ0g9+2 +tq7DEZKXxuX9itlOsfKonO727Mjv301/CKRv4YlNKlU3VM0ywIclllugwIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFJml5MHN6LyzuEIHcNWag6eRfIzIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzU1Yjg0 OC0wZmMzLTQzYzMtOGFjZS0wZGMzYzIxYmQ2MjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvNTViODQ4 LTBmYzMtNDNjMy04YWNlLTBkYzNjMjFiZDYyOC8xL21hWGt3YzNvdkxPNFFnZHcx WnFEcDVGOGpNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUF BwEIAQH/BBQwEqAQMA4CAj2KAgMA4J8CAwDt8zANBgkqhkiG9w0BAQsFAAOCAQEA nmxaYoiLUZz7sAujBYQyPnwz8Q78NeMEmWZ9aWGeG59wX0HAWtJwg7nK8khbJRK0 fc9hzpllHBzKGMjQkJAtoTir+tSLr4ZEm/L1zRNgiWEpY2Pm4jAGbNTHfOrDRyAW gQm6eu6/nazgeiQI3phWUXNupBZk73hV8a6katM2r2GlFpWi5UniawQscgKDmjq/ tx5+AM9WXqkWU3v7GtDHeiTgBaxPA+DSAOIiZ81wWZURHvJqT8vdwqcc6YtT+YMN Yb6g5Bw/Iy3dzqMSvSplOS/Ch/XVxdpSGSZM/YoyVJ/hcnvWNm+KiWsqJwxAXii9 Eg9MwzVuN8FYsQ1BSZYrpw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:18 2026 by rpki-client