This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer File: rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer (raw, json) Hash identifier: kBNb+FphJXYXa4BmX58q3pNCE5R6af6q8S9xRSBHhYk= Subject key identifier: AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910B1763A5B68765172B75663D47F92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202941 AS: 214801 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b1:76:3a:5b:68:76:51:72:b7:56:63:d4:7f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aec5c7ab5b72181e4e4211322215e9776b4900f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:d7:27:c1:c1:6c:16:c4:6c:18:31:0f:c3: f5:f9:3b:19:b6:ef:89:0d:7f:ea:4b:bb:1c:dc:94: 83:0d:c1:21:64:34:ab:51:8f:cb:a5:32:4b:40:5d: af:80:fb:a8:6f:bf:d8:00:7c:19:77:a3:6f:aa:99: 70:b9:e5:c1:3a:e1:ee:26:29:4c:94:48:77:e5:7d: e7:78:fe:64:dc:1b:c8:e1:50:c9:2a:d5:45:b4:0b: 6f:d8:bc:b6:52:75:27:c0:15:9d:f8:b4:e4:b3:9f: f2:09:be:58:97:9d:a6:dd:fc:2b:e7:35:03:13:5c: c2:1f:2f:97:ed:b8:ad:07:f6:d0:b1:f6:d6:09:63: 6d:86:26:e1:61:1f:4a:69:dc:b9:e8:fe:5e:43:1a: a3:f4:59:45:2c:b5:29:92:44:7c:8c:6a:af:31:cd: b4:23:7b:85:b1:47:6b:22:da:9b:02:08:50:e9:fa: 5e:8d:3a:84:24:f3:24:c7:42:b6:d8:8f:54:4e:66: 3c:64:f7:63:7b:22:23:2f:cc:2b:b5:3b:28:95:23: 9a:32:2b:13:50:22:1d:ba:b7:af:21:7a:d6:be:59: fc:07:c6:cb:7f:4e:88:e5:c9:db:ef:b1:26:3a:7e: 08:d5:1e:e6:b6:5a:80:dc:f1:ff:ae:b3:98:6b:4f: ff:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202941 214801 Signature Algorithm: sha256WithRSAEncryption 15:88:1e:fb:c1:ff:80:37:9c:27:0f:c3:b5:bb:de:1f:bf:00: bb:89:ff:fd:ee:3f:29:27:96:06:35:e8:e0:e9:ef:e9:f2:01: 8d:d3:da:8c:fe:47:93:42:af:22:32:cd:ec:00:ae:17:92:ce: e9:e2:ac:41:7d:39:79:5a:5a:3c:57:99:9a:9e:d8:f3:29:71: e4:ba:47:90:d8:60:16:39:a8:60:aa:8d:13:63:38:07:7b:19: 44:7b:2d:c8:89:c0:3b:8e:70:39:7f:74:4b:10:d7:31:49:2c: 8e:7d:d2:96:c5:d1:22:e2:09:5a:e0:a8:c3:6a:59:88:bf:17: 7e:9d:d4:e6:b6:56:59:0e:fb:aa:fa:de:1e:05:52:19:e9:2a: fc:40:33:37:07:6d:fa:ef:ce:72:8f:ea:0b:e5:ed:0d:6e:dc: 6a:b3:aa:9a:e4:fc:4c:19:1e:d6:3d:1a:64:cb:3a:47:09:d5: bd:c8:b3:90:fb:b2:62:55:03:e6:41:1e:2c:bc:3d:1d:bf:08: ca:ca:5e:bb:9d:a8:22:f7:c3:0b:57:a6:28:6b:f0:85:4b:6e: 62:29:a2:a4:8b:c6:07:32:d3:b0:4f:61:e0:3e:7a:d8:1f:fe: 9b:ff:6f:4f:3b:49:83:70:14:81:33:d3:86:fb:21:2e:6c:f2: e2:4a:36:ff -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ELF2OltodlFyt1Zj1H+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWM1YzdhYjViNzIxODFlNGU0MjExMzIyMjE1ZTk3NzZiNDkwMGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0azXJ8HBbBbEbBgxD8P1+TsZtu+J DX/qS7sc3JSDDcEhZDSrUY/LpTJLQF2vgPuob7/YAHwZd6NvqplwueXBOuHuJilM lEh35X3neP5k3BvI4VDJKtVFtAtv2Ly2UnUnwBWd+LTks5/yCb5Yl52m3fwr5zUD E1zCHy+X7bitB/bQsfbWCWNthibhYR9Kady56P5eQxqj9FlFLLUpkkR8jGqvMc20 I3uFsUdrItqbAghQ6fpejTqEJPMkx0K22I9UTmY8ZPdjeyIjL8wrtTsolSOaMisT UCIdurevIXrWvln8B8bLf06I5cnb77EmOn4I1R7mtlqA3PH/rrOYa0//eQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFK7Fx6tbchgeTkIRMiIV6XdrSQD5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0Lzk4ODE4 ZC1mOGIzLTQ2NDUtODZhOC0zMDJkOTIyMjRjYjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvOTg4MThk LWY4YjMtNDY0NS04NmE4LTMwMmQ5MjIyNGNiMi8xL3JzWEhxMXR5R0I1T1FoRXlJ aFhwZDJ0SkFQay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMYvQIDA0cRMA0GCSqGSIb3DQEBCwUAA4IBAQAViB77 wf+AN5wnD8O1u94fvwC7if/97j8pJ5YGNejg6e/p8gGN09qM/keTQq8iMs3sAK4X ks7p4qxBfTl5Wlo8V5mantjzKXHkukeQ2GAWOahgqo0TYzgHexlEey3IicA7jnA5 f3RLENcxSSyOfdKWxdEi4gla4KjDalmIvxd+ndTmtlZZDvuq+t4eBVIZ6Sr8QDM3 B236785yj+oL5e0Nbtxqs6qa5PxMGR7WPRpkyzpHCdW9yLOQ+7JiVQPmQR4svD0d vwjKyl67nagi98MLV6Yoa/CFS25iKaKki8YHMtOwT2HgPnrYH/6b/29PO0mDcBSB M9OG+yEubPLiSjb/ -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:11 2026 by rpki-client