This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer File: psF-fTY_GPc6Ko40wUJdLUZWIDs.cer (raw, json) Hash identifier: lyEmhQViIpv6j15IHa5wdL/tq8MNDbN6usdq6JeDPUY= Subject key identifier: A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78350D5A889000A41FAD657C1FB9F023 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205463 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0d:5a:88:90:00:a4:1f:ad:65:7c:1f:b9:f0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:ce:df:94:1b:26:c7:95:98:e1:db:8b:2d: 79:0d:6c:4b:ce:cf:98:a0:a6:3d:e4:6c:64:f2:92: 3f:57:22:3a:cf:15:0e:b7:56:46:f5:34:b2:fa:11: e0:d1:8a:bd:4e:aa:78:96:2c:61:61:57:a5:7d:28: fb:ce:b7:f7:5c:b0:1a:66:1b:2c:0d:71:23:72:d2: 56:2b:86:cf:ee:d3:8c:05:f0:90:c7:c7:90:84:54: f6:5a:f8:2c:41:87:b2:0a:17:0b:6b:79:5a:26:3f: dd:30:2a:0c:3a:1e:f3:ea:57:67:2a:0c:43:74:22: 23:ec:78:47:64:ae:bf:f4:c1:29:6c:ce:da:aa:94: cd:a7:48:2a:89:c5:56:44:56:a8:63:d6:0c:41:84: 22:80:89:72:d9:00:19:ae:a1:ed:cd:aa:5a:f4:84: c2:3b:ec:2c:db:21:a0:8b:78:3d:e8:ec:be:d2:06: cb:c3:10:d1:31:fa:8e:3d:bd:33:ee:16:f9:81:41: f3:41:54:ed:e5:d4:cb:fe:96:74:6d:0b:e2:1d:fa: 4b:dc:f8:b3:52:42:72:2b:0a:6b:11:88:00:f1:86: 8a:a0:36:f5:e1:10:1b:6c:c7:d1:7d:0d:a7:4d:74: ae:a2:1e:76:8b:25:61:a9:25:28:78:76:75:3b:07: 68:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205463 Signature Algorithm: sha256WithRSAEncryption a8:33:1e:d7:b8:5c:fa:7a:dc:6d:40:6a:6a:e9:a1:4d:7f:f1: c9:34:fd:6b:5c:90:af:00:40:32:8d:56:94:7c:23:24:1f:6e: 39:33:a2:00:42:17:89:19:1a:10:e6:94:35:60:e8:43:6f:b4: 4a:71:de:a2:8b:59:65:5d:a7:11:5b:73:25:8f:d0:dd:32:d0: ec:64:5b:f2:4e:e7:c1:24:b5:23:fa:02:93:4b:cf:0a:16:77: 86:86:7f:da:3b:8e:f6:3a:0f:b9:3f:f2:fc:59:d2:b2:8f:ca: 97:92:3f:78:1f:c8:c5:bc:dc:e8:50:90:67:b1:e7:ae:f9:0d: 76:ed:44:82:bf:76:4f:9e:7f:bf:20:2a:52:9a:ab:00:49:2f: 62:98:2b:ce:f3:76:9d:e1:5e:99:e5:39:38:b3:56:2f:d9:30: be:13:aa:c8:be:7a:d1:e8:73:56:6c:d8:a9:a6:ce:3a:54:db: d4:1e:d4:a7:e2:8e:a4:6e:96:87:63:1c:8c:28:bc:c2:cd:a9: 4a:86:15:39:2a:a4:bb:4b:57:ec:1a:f7:6c:d4:3f:30:8c:ff: 33:36:8f:8f:4b:1f:98:7f:29:30:86:cc:4f:0a:66:ef:51:2c: 64:10:f9:ae:bc:83:73:7c:b7:f4:7c:53:60:96:b2:d1:a9:53: dc:a6:0a:c3 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt4NQ1aiJAApB+tZXwfufAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmMxN2U3ZDM2M2YxOGY3M2EyYThlMzRjMTQyNWQyZDQ2NTYyMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE/O35QbJseVmOHbiy15DWxLzs+Y oKY95Gxk8pI/VyI6zxUOt1ZG9TSy+hHg0Yq9Tqp4lixhYVelfSj7zrf3XLAaZhss DXEjctJWK4bP7tOMBfCQx8eQhFT2WvgsQYeyChcLa3laJj/dMCoMOh7z6ldnKgxD dCIj7HhHZK6/9MEpbM7aqpTNp0gqicVWRFaoY9YMQYQigIly2QAZrqHtzapa9ITC O+ws2yGgi3g96Oy+0gbLwxDRMfqOPb0z7hb5gUHzQVTt5dTL/pZ0bQviHfpL3Piz UkJyKwprEYgA8YaKoDb14RAbbMfRfQ2nTXSuoh52iyVhqSUoeHZ1OwdoBwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFKbBfn02Pxj3OiqONMFCXS1GViA7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2QwNjMz M2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS80LzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDA2 MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0MmUxLzQvQTZDMTdFN0QzNjNG MThGNzNBMkE4RTM0QzE0MjVEMkQ0NjU2MjAzQi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDIpcw DQYJKoZIhvcNAQELBQADggEBAKgzHte4XPp63G1AamrpoU1/8ck0/WtckK8AQDKN VpR8IyQfbjkzogBCF4kZGhDmlDVg6ENvtEpx3qKLWWVdpxFbcyWP0N0y0OxkW/JO 58EktSP6ApNLzwoWd4aGf9o7jvY6D7k/8vxZ0rKPypeSP3gfyMW83OhQkGex5675 DXbtRIK/dk+ef78gKlKaqwBJL2KYK87zdp3hXpnlOTizVi/ZML4Tqsi+etHoc1Zs 2KmmzjpU29Qe1KfijqRulodjHIwovMLNqUqGFTkqpLtLV+wa92zUPzCM/zM2j49L H5h/KTCGzE8KZu9RLGQQ+a68g3N8t/R8U2CWstGpU9ymCsM= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:59 2026 by rpki-client