This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer File: sTFfExaKIog9oEuECAZgc7Hz8Nw.cer (raw, json) Hash identifier: teqgaMZzJh2wzwkITLr3tb4jlxAG5VQHro1HiVpsKA4= Subject key identifier: B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDF012E75F465C3F702529521D3C37 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209650 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f0:12:e7:5f:46:5c:3f:70:25:29:52:1d:3c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1315f13168a22883da04b8408066073b1f3f0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:a0:f6:09:35:e9:84:a8:41:ba:e0:ca:e3: 0e:57:33:00:83:73:fb:29:ed:73:43:bd:99:93:2e: 09:5a:ec:c6:cf:32:38:6d:9c:cf:0e:a9:8d:fa:4f: d4:2a:74:0d:7e:1f:df:2d:eb:fb:fd:d5:76:08:eb: 68:80:63:cf:5a:90:bc:3d:1d:e1:c9:d4:ea:86:84: 13:05:46:3e:71:a4:bb:9a:5e:e0:87:af:5b:e8:55: f4:e4:18:31:57:b0:cb:a8:66:30:bf:53:a0:6e:80: 0b:b5:36:58:bb:b2:77:57:e8:04:ed:d1:c4:9b:a4: 3d:0e:c1:c4:71:f1:51:a0:40:bc:ea:91:05:2e:65: f2:ef:75:d9:8f:91:d9:c9:85:a9:c3:92:68:c4:26: c2:c2:ba:3c:4a:ff:e9:fb:8e:b0:25:1b:6c:0c:ea: 0e:0b:38:c9:fe:5e:9f:3a:05:16:00:41:22:ed:01: 15:85:84:61:5f:e6:da:fd:0d:72:7d:62:ec:2e:bc: 63:45:3e:3f:cf:1c:6c:04:53:ec:ee:ef:3f:ed:c5: 73:9a:c7:f4:eb:e4:bb:ca:75:a7:9c:0e:22:08:c7: 2c:ce:08:21:50:5a:a2:48:5d:4a:d4:86:2f:aa:be: 64:32:c1:5f:25:a0:98:d4:b8:42:6a:fa:31:27:d4: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209650 Signature Algorithm: sha256WithRSAEncryption aa:92:af:28:79:fb:87:d0:7c:8b:b1:8a:86:34:22:ae:49:a6: 6a:10:8e:9e:8d:bf:08:05:a9:c2:17:7e:f9:32:13:b3:92:be: 4e:23:77:bf:ab:99:50:cc:07:ce:04:4c:74:69:58:89:d3:b8: eb:30:f1:5a:e7:f7:01:fa:ee:9f:c2:f7:bf:f8:83:5f:30:b2: fc:c8:ef:9c:ae:1c:fc:70:f6:3f:9a:36:47:93:d7:4f:7c:66: 6a:64:92:ee:69:92:11:61:07:e7:6b:4b:ea:ba:92:42:ec:39: d5:46:b0:47:5d:1f:7d:31:88:cb:1a:39:aa:40:cd:b2:8f:44: 36:eb:cd:f0:1f:bb:9b:65:b0:78:38:c3:04:08:50:b2:36:ee: a0:32:8a:21:33:65:8d:fc:71:9d:0b:74:71:b7:ef:0d:c4:a2: 72:1a:ca:85:8e:a2:0a:dc:2d:d6:ff:80:9f:42:81:f9:9a:b7: ae:2f:31:07:17:5a:4c:4f:93:f7:47:66:cd:46:07:84:8a:51: 50:d7:66:e6:8f:86:22:3b:5a:6f:99:25:88:8b:d2:22:a0:58: 9b:fc:f8:ea:a5:44:50:6c:34:ab:36:70:f3:b0:26:52:bc:00: 26:79:db:63:34:84:74:ad:8e:f5:36:ce:d9:d3:f5:d2:28:1e: c6:11:49:d1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87fAS519GXD9wJSlSHTw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTMxNWYxMzE2OGEyMjg4M2RhMDRiODQwODA2NjA3M2IxZjNmMGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf+g9gk16YSoQbrgyuMOVzMAg3P7 Ke1zQ72Zky4JWuzGzzI4bZzPDqmN+k/UKnQNfh/fLev7/dV2COtogGPPWpC8PR3h ydTqhoQTBUY+caS7ml7gh69b6FX05BgxV7DLqGYwv1OgboALtTZYu7J3V+gE7dHE m6Q9DsHEcfFRoEC86pEFLmXy73XZj5HZyYWpw5JoxCbCwro8Sv/p+46wJRtsDOoO CzjJ/l6fOgUWAEEi7QEVhYRhX+ba/Q1yfWLsLrxjRT4/zxxsBFPs7u8/7cVzmsf0 6+S7ynWnnA4iCMcszgghUFqiSF1K1IYvqr5kMsFfJaCY1LhCavoxJ9QvGwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLExXxMWiiKIPaBLhAgGYHOx8/DcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2EzMmMy OS00MDg3LTRmODctODlkOS05ZTRkMTM3NmJhMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvYTMyYzI5 LTQwODctNGY4Ny04OWQ5LTllNGQxMzc2YmEzMS8xL3NURmZFeGFLSW9nOW9FdUVD QVpnYzdIejhOdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMy8jANBgkqhkiG9w0BAQsFAAOCAQEAqpKvKHn7h9B8 i7GKhjQirkmmahCOno2/CAWpwhd++TITs5K+TiN3v6uZUMwHzgRMdGlYidO46zDx Wuf3Afrun8L3v/iDXzCy/MjvnK4c/HD2P5o2R5PXT3xmamSS7mmSEWEH52tL6rqS Quw51UawR10ffTGIyxo5qkDNso9ENuvN8B+7m2WweDjDBAhQsjbuoDKKITNljfxx nQt0cbfvDcSichrKhY6iCtwt1v+An0KB+Zq3ri8xBxdaTE+T90dmzUYHhIpRUNdm 5o+GIjtab5kliIvSIqBYm/z46qVEUGw0qzZw87AmUrwAJnnbYzSEdK2O9TbO2dP1 0igexhFJ0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:51 2026 by rpki-client