This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer File: stNBgAdlZtcr7mHzoybFbgq7gEo.cer (raw, json) Hash identifier: qT+2p5AZ71EyBU/mWss+COSuqNQ9Pp7kD2mLYATBdsg= Subject key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA32F358BE43DA05CA169B71B5F34E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61248 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2f:35:8b:e4:3d:a0:5c:a1:69:b7:1b:5f:34:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2d34180076566d72bee61f3a326c56e0abb804a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:80:2d:ec:a1:54:67:7d:d1:24:a7:b9:97: 63:7c:4e:0e:e0:3f:8f:1f:2b:6c:6b:3c:8a:cf:e9: bc:95:3a:fa:08:b8:be:38:61:d3:f5:09:86:1b:dc: 6a:c5:2d:f1:f4:f8:aa:de:ee:b2:e4:e9:61:59:09: c3:85:cb:06:25:a1:3a:40:0d:6f:9c:a5:ef:b5:99: 0b:d1:be:80:57:03:2b:4c:e9:96:c5:f1:96:74:d5: 36:3f:ff:26:f5:89:11:51:67:40:40:6f:4a:65:fc: e5:41:45:cd:b3:43:3d:5e:15:0c:e5:d2:3c:e2:ff: 0d:bb:ac:06:b8:32:a1:30:f3:ac:ee:3b:17:f6:2c: 16:9f:da:45:78:44:c0:ce:5f:f5:9f:13:f2:b2:a4: 89:6f:56:bd:ff:c0:39:9f:3f:52:61:56:80:65:ac: 74:9a:ab:d7:9f:5a:53:d9:3f:48:04:de:b0:bf:f1: b4:bb:f5:74:16:92:af:53:8d:ad:17:6a:a5:0f:23: 2a:e1:db:76:2d:ed:c7:d3:0b:8f:19:c9:e9:0a:dc: 73:bc:48:f1:24:35:e8:48:50:0b:2f:1f:06:c6:a5: bf:84:05:9e:e2:0a:13:b8:ab:2e:9f:c3:e9:fc:c3: cf:a9:e6:85:2f:37:c1:40:c4:16:fa:7b:e3:92:9c: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 61248 Signature Algorithm: sha256WithRSAEncryption 78:c4:73:f0:c1:8b:d6:a5:54:ff:ba:03:02:54:18:98:6c:51: 27:fe:03:c1:84:27:ae:d1:ce:28:b7:0c:c2:37:4c:f3:4a:2f: 8e:33:9b:42:41:76:19:17:c4:32:45:4a:65:01:9a:69:9a:8f: ef:90:60:ad:8c:b9:67:ca:6e:b8:f3:8e:f9:14:95:ab:f1:42: 91:8a:57:e0:8a:2a:64:a6:16:e6:87:f4:ac:d1:58:c8:76:99: 6e:e3:02:8a:9e:9d:f4:d4:00:3a:b2:bd:29:4f:f9:ce:a0:44: 2a:68:1b:40:fe:5e:6f:e1:fa:ad:58:cd:f9:33:61:f3:c6:cc: b2:e9:da:c2:ea:ca:68:9f:8a:c5:d8:18:45:18:68:17:1c:23: a1:e6:4f:aa:56:16:0a:60:3b:29:fa:83:58:74:9b:56:04:ab: 70:71:49:5d:a1:c0:40:b0:ea:72:5c:ee:19:6d:67:2f:25:d0: f0:57:d5:8a:58:0f:b1:9f:b8:7f:34:c5:7a:0f:21:f9:eb:58: 77:68:5d:34:32:fe:e9:cc:f6:25:6d:60:55:b7:91:0c:3a:1a: 10:bf:3a:08:ac:a1:b6:81:41:27:83:f7:ad:d2:d5:2c:57:a2: a9:1e:32:eb:28:06:ed:8d:49:39:56:7d:34:44:e3:e1:0d:5d: 7f:bd:83:6e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7oy81i+Q9oFyhabcbXzTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmQzNDE4MDA3NjU2NmQ3MmJlZTYxZjNhMzI2YzU2ZTBhYmI4MDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzWALeyhVGd90SSnuZdjfE4O4D+P HytsazyKz+m8lTr6CLi+OGHT9QmGG9xqxS3x9Piq3u6y5OlhWQnDhcsGJaE6QA1v nKXvtZkL0b6AVwMrTOmWxfGWdNU2P/8m9YkRUWdAQG9KZfzlQUXNs0M9XhUM5dI8 4v8Nu6wGuDKhMPOs7jsX9iwWn9pFeETAzl/1nxPysqSJb1a9/8A5nz9SYVaAZax0 mqvXn1pT2T9IBN6wv/G0u/V0FpKvU42tF2qlDyMq4dt2Le3H0wuPGcnpCtxzvEjx JDXoSFALLx8GxqW/hAWe4goTuKsun8Pp/MPPqeaFLzfBQMQW+nvjkpyrIwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLLTQYAHZWbXK+5h86MmxW4Ku4BKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2JiZjc3 My02N2Y5LTRiZTUtOTVjYi03MGQ3ZjhmNDkyNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvYmJmNzcz LTY3ZjktNGJlNS05NWNiLTcwZDdmOGY0OTI1YS8xL3N0TkJnQWRsWnRjcjdtSHpv eWJGYmdxN2dFby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDvQDANBgkqhkiG9w0BAQsFAAOCAQEAeMRz8MGL1qVU /7oDAlQYmGxRJ/4DwYQnrtHOKLcMwjdM80ovjjObQkF2GRfEMkVKZQGaaZqP75Bg rYy5Z8puuPOO+RSVq/FCkYpX4IoqZKYW5of0rNFYyHaZbuMCip6d9NQAOrK9KU/5 zqBEKmgbQP5eb+H6rVjN+TNh88bMsunawurKaJ+KxdgYRRhoFxwjoeZPqlYWCmA7 KfqDWHSbVgSrcHFJXaHAQLDqclzuGW1nLyXQ8FfVilgPsZ+4fzTFeg8h+etYd2hd NDL+6cz2JW1gVbeRDDoaEL86CKyhtoFBJ4P3rdLVLFeiqR4y6ygG7Y1JOVZ9NETj 4Q1df72Dbg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:11 2026 by rpki-client