This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer File: rh967y8S0HaqitWli8uNyvPwvUw.cer (raw, json) Hash identifier: 1j+416uVVirUitFb+0ZVkhdYAnpA/TcKrpsmKUXUAIU= Subject key identifier: AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED30005ED8CBAF863C352658079492 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43644 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:30:00:5e:d8:cb:af:86:3c:35:26:58:07:94:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:18:6d:fd:df:59:95:3e:d9:05:cf:fe:45:bf: ea:ac:bb:0e:01:b8:83:ec:d7:9a:26:8c:7d:37:81: 3d:b8:75:38:29:b1:32:77:df:24:e3:93:9e:19:41: 73:d4:bf:7e:40:87:9f:00:c6:16:ec:1b:bc:5d:0e: f6:75:66:5d:e4:cf:0e:68:a0:e1:8f:1a:d2:aa:32: 24:cb:31:37:5e:50:62:0a:0f:a3:4d:af:2d:8a:90: 74:88:f1:67:de:ef:24:c8:e1:91:0f:2e:49:09:f0: 7e:4c:36:4b:9a:bb:f4:10:7e:5d:b3:0f:7f:39:3b: bf:0f:c4:a8:66:e8:5d:3d:01:c9:75:13:b9:06:b4: e3:d3:e2:8f:a4:b3:52:f0:67:2f:24:01:ab:f8:97: 24:50:e4:0d:79:ff:9a:4a:be:e2:8f:a1:3c:f6:b1: 3b:51:59:18:05:b1:44:a0:f4:f1:0e:77:c8:87:2e: 1f:27:fc:57:a5:2a:e8:57:cc:c1:94:7e:ea:18:22: cb:74:e2:3a:b7:c8:fc:b8:b4:cb:1c:95:22:79:b1: 4f:ad:a4:52:92:77:74:eb:3a:94:9e:9a:04:c4:a2: 47:84:4f:4a:e5:ed:5b:ab:49:92:93:31:48:0f:4e: d6:22:cc:6d:4c:46:07:92:71:ad:ec:94:15:fe:8a: a7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 43644 Signature Algorithm: sha256WithRSAEncryption 1a:3b:76:a8:90:22:11:68:38:43:af:cb:31:42:bf:b7:87:5a: 2f:8c:cc:f6:61:b3:2e:94:3a:ce:58:1b:6a:f9:55:81:07:47: a6:24:19:1f:7f:f4:c6:a2:5c:dc:76:df:7d:db:89:7f:5b:c9: ac:3b:3f:39:51:fb:c2:9f:5e:bb:bd:21:3a:45:75:43:93:52: 9a:3b:75:c9:1e:65:15:9c:3c:29:8b:c1:0b:5e:00:1c:bc:ce: dc:91:39:22:d7:9e:46:47:ba:6e:52:ec:95:75:2e:92:4e:95: 96:5c:11:0a:ba:ca:42:28:63:7b:70:9d:44:24:cb:5e:ff:b4: f9:fa:f3:45:59:02:70:d3:b3:88:2c:e6:d1:4b:8b:49:62:80: 54:77:61:ef:17:ac:f2:de:c4:67:e1:7b:a1:2a:ea:d9:b3:91: 37:fc:7a:99:e1:29:25:78:ed:c8:ac:52:b8:bb:db:1c:b6:de: 7c:01:5d:6a:04:60:97:f8:e6:84:95:70:c7:61:60:3d:79:f8: ec:c3:51:d4:40:8a:bc:96:67:ba:a5:49:db:bb:e4:98:ac:71: b2:58:79:44:4f:6d:eb:ac:e6:d1:4f:fa:99:d5:8b:d7:72:6c: 17:25:5a:6c:ae:67:d8:e3:da:61:03:87:cf:00:f7:ff:c0:b4: eb:56:76:eb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87TAAXtjLr4Y8NSZYB5SSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTFmN2FlZjJmMTJkMDc2YWE4YWQ1YTU4YmNiOGRjYWYzZjBiZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rht/d9ZlT7ZBc/+Rb/qrLsOAbiD 7NeaJox9N4E9uHU4KbEyd98k45OeGUFz1L9+QIefAMYW7Bu8XQ72dWZd5M8OaKDh jxrSqjIkyzE3XlBiCg+jTa8tipB0iPFn3u8kyOGRDy5JCfB+TDZLmrv0EH5dsw9/ OTu/D8SoZuhdPQHJdRO5BrTj0+KPpLNS8GcvJAGr+JckUOQNef+aSr7ij6E89rE7 UVkYBbFEoPTxDnfIhy4fJ/xXpSroV8zBlH7qGCLLdOI6t8j8uLTLHJUiebFPraRS knd06zqUnpoExKJHhE9K5e1bq0mSkzFID07WIsxtTEYHknGt7JQV/oqn/wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFK4feu8vEtB2qorVpYvLjcrz8L1MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2Y2MGQz MS1jNzQ4LTRlYjctYjc4MS0wOThkM2JkMGI5NTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvZjYwZDMx LWM3NDgtNGViNy1iNzgxLTA5OGQzYmQwYjk1MS8xL3JoOTY3eThTMEhhcWl0V2xp OHVOeXZQd3ZVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCqfDANBgkqhkiG9w0BAQsFAAOCAQEAGjt2qJAiEWg4 Q6/LMUK/t4daL4zM9mGzLpQ6zlgbavlVgQdHpiQZH3/0xqJc3HbffduJf1vJrDs/ OVH7wp9eu70hOkV1Q5NSmjt1yR5lFZw8KYvBC14AHLzO3JE5IteeRke6blLslXUu kk6VllwRCrrKQihje3CdRCTLXv+0+frzRVkCcNOziCzm0UuLSWKAVHdh7xes8t7E Z+F7oSrq2bORN/x6meEpJXjtyKxSuLvbHLbefAFdagRgl/jmhJVwx2FgPXn47MNR 1ECKvJZnuqVJ27vkmKxxslh5RE9t66zm0U/6mdWL13JsFyVabK5n2OPaYQOHzwD3 /8C061Z26w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:40 2026 by rpki-client