This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/soehvthfaZtS-gaqGeUc8liPFLk.cer File: soehvthfaZtS-gaqGeUc8liPFLk.cer (raw, json) Hash identifier: nZlt2e2LjvpmwQAb4ha6vCoQaMOn5XAeWMo8CYWQsaQ= Subject key identifier: B2:87:A1:BE:D8:5F:69:9B:52:FA:06:AA:19:E5:1C:F2:58:8F:14:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C9D5E96F819ECCFDB8416E9E7E245 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209645 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9d:5e:96:f8:19:ec:cf:db:84:16:e9:e7:e2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b287a1bed85f699b52fa06aa19e51cf2588f14b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:4f:fd:c4:d9:6b:27:53:9c:b4:85:be:04: 93:47:d6:25:eb:91:08:b7:ce:5a:8b:8e:b4:ba:74: 9f:ec:bf:86:d2:c7:9b:f1:5e:66:93:f1:9b:a1:b4: 5d:ac:df:77:db:00:a5:a0:14:d1:b5:92:79:39:5c: 24:15:5f:b2:01:52:f9:3e:f7:a1:58:8f:ad:c5:11: a1:dc:8e:c7:99:48:cb:e0:dc:3a:28:db:4d:e1:85: 87:24:13:3f:41:81:9f:e0:bc:8a:36:5b:b2:1c:6b: 2a:41:10:33:cb:3e:50:de:9d:08:00:e7:53:ca:c8: 78:ae:98:89:04:43:e8:9c:bf:87:06:82:72:45:bc: e5:fc:b4:f5:4d:19:58:5a:6c:80:4d:f3:b9:13:75: 9e:4c:a9:0b:b3:28:9c:53:70:ee:0b:d7:c9:60:29: b6:ec:64:80:bb:36:34:2f:2c:f4:f0:46:a0:c8:b8: 3b:a7:30:7c:11:23:13:09:e0:87:57:67:0d:3b:01: b4:50:09:95:a1:8e:df:d3:96:7e:a4:b8:3f:71:1b: ec:23:b4:2d:68:17:e7:dd:9e:a8:6d:5c:67:27:8a: cc:3e:ca:23:83:55:9a:fa:0b:90:e6:3e:01:cc:ec: 4c:18:3d:26:74:4c:aa:77:b5:ae:95:e8:11:6e:f1: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:87:A1:BE:D8:5F:69:9B:52:FA:06:AA:19:E5:1C:F2:58:8F:14:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0a277e-0656-4cfe-a8a8-02e3d9e02eec/1/soehvthfaZtS-gaqGeUc8liPFLk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209645 Signature Algorithm: sha256WithRSAEncryption 3b:df:d6:28:9c:b7:64:7b:f2:c6:17:39:dc:79:bb:25:b5:10: 5b:e5:76:97:bf:f7:43:d4:49:25:9d:8c:c3:a0:a6:1a:56:45: 1a:f7:96:b3:b9:ad:0b:39:73:e4:27:22:38:7f:24:8c:f4:20: 02:9d:4b:b9:84:5c:ba:77:b8:72:46:e0:9b:88:db:e4:d1:d2: 09:f0:75:48:81:21:13:56:c3:a3:ed:f9:45:7c:e3:d5:e7:fc: 2a:3f:13:45:ed:8c:f8:02:14:96:8a:13:c9:4e:a9:ed:7d:f8: fd:a2:cb:fd:58:a8:8a:79:83:f0:6c:de:1a:17:d1:84:8b:df: 0d:6b:f5:2b:4c:4e:87:2f:13:7b:63:88:aa:c0:76:b1:cf:57: c3:03:8f:14:02:f7:70:76:5c:58:8f:f6:7e:87:1b:ba:26:42: b5:25:0d:a0:e2:75:2c:7c:b3:c9:b9:dd:97:0f:68:0d:69:24: 97:eb:6e:72:fa:3c:49:b7:00:10:47:cc:8a:04:17:ba:d0:bf: 8e:e2:7b:89:e1:06:df:09:aa:d0:91:49:4b:4a:b5:18:81:f4: 7a:36:4c:bc:76:cf:42:18:9d:cc:3f:42:95:36:50:fb:8c:97: 85:8f:f4:f6:6d:cd:04:4d:c3:b0:66:8c:8d:69:cc:ee:6c:1a: 14:83:63:cf -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9XJ1elvgZ7M/bhBbp5+JFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjg3YTFiZWQ4NWY2OTliNTJmYTA2YWExOWU1MWNmMjU4OGYxNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApipP/cTZaydTnLSFvgSTR9Yl65EI t85ai460unSf7L+G0seb8V5mk/GbobRdrN932wCloBTRtZJ5OVwkFV+yAVL5Pveh WI+txRGh3I7HmUjL4Nw6KNtN4YWHJBM/QYGf4LyKNluyHGsqQRAzyz5Q3p0IAOdT ysh4rpiJBEPonL+HBoJyRbzl/LT1TRlYWmyATfO5E3WeTKkLsyicU3DuC9fJYCm2 7GSAuzY0Lyz08EagyLg7pzB8ESMTCeCHV2cNOwG0UAmVoY7f05Z+pLg/cRvsI7Qt aBfn3Z6obVxnJ4rMPsojg1Wa+guQ5j4BzOxMGD0mdEyqd7WulegRbvFKQQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLKHob7YX2mbUvoGqhnlHPJYjxS5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzBhMjc3 ZS0wNjU2LTRjZmUtYThhOC0wMmUzZDllMDJlZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvMGEyNzdl LTA2NTYtNGNmZS1hOGE4LTAyZTNkOWUwMmVlYy8xL3NvZWh2dGhmYVp0Uy1nYXFH ZVVjOGxpUEZMay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMy7TANBgkqhkiG9w0BAQsFAAOCAQEAO9/WKJy3ZHvy xhc53Hm7JbUQW+V2l7/3Q9RJJZ2Mw6CmGlZFGveWs7mtCzlz5CciOH8kjPQgAp1L uYRcune4ckbgm4jb5NHSCfB1SIEhE1bDo+35RXzj1ef8Kj8TRe2M+AIUlooTyU6p 7X34/aLL/VioinmD8GzeGhfRhIvfDWv1K0xOhy8Te2OIqsB2sc9XwwOPFAL3cHZc WI/2focbuiZCtSUNoOJ1LHyzybndlw9oDWkkl+tucvo8SbcAEEfMigQXutC/juJ7 ieEG3wmq0JFJS0q1GIH0ejZMvHbPQhidzD9ClTZQ+4yXhY/09m3NBE3DsGaMjWnM 7mwaFINjzw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:48 2026 by rpki-client