This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer File: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer (raw, json) Hash identifier: Z+xPCOtwv9nl91NPPfOZIC5R8v5vQJAkrzL/YeLb8xw= Subject key identifier: BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758784257D57C934FB70D38224A7102 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60706 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:78:42:57:d5:7c:93:4f:b7:0d:38:22:4a:71:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:f7:54:72:ce:45:38:c6:4d:53:ad:cb:09: dc:af:4f:5f:30:d6:b1:04:6b:22:d7:5f:fa:d8:8d: 8b:b8:c9:c2:3f:3b:93:56:30:41:a8:18:15:ba:1c: 0f:44:1c:39:77:45:65:bd:7d:1f:67:51:29:18:3e: e9:5e:9c:b2:78:06:2f:03:8d:5e:03:ef:84:d9:0b: 1d:26:72:70:d1:27:95:3a:d7:90:72:c6:ec:d5:dd: fd:4b:ea:f9:b2:eb:7e:62:d1:f2:83:b6:7d:3a:96: 8d:af:4c:99:a4:b4:23:6c:1e:22:4c:a2:d4:f0:e2: b8:82:9d:4b:45:18:1e:e3:04:8e:79:2d:d7:ab:c9: 04:64:1d:c6:16:e9:65:65:8c:9d:df:91:c0:db:98: 74:ec:e9:4f:7d:d9:c1:ee:a7:08:82:c9:5d:c5:74: 94:b7:ab:78:bb:7a:d9:d2:ac:be:de:14:f9:97:62: 94:71:80:78:98:74:69:2f:0f:d8:8c:87:13:ae:70: d8:bb:03:aa:4a:0c:52:a0:3f:7c:45:a2:be:d3:09: eb:29:fc:4b:e0:ea:0c:f2:cc:b8:8d:ae:83:9d:00: 5f:9d:e2:d3:6b:e2:13:8a:cc:84:83:a9:7c:81:71: 2a:1e:fe:4e:06:1c:8f:f2:ba:38:44:29:da:5c:91: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 60706 Signature Algorithm: sha256WithRSAEncryption 32:a7:c7:23:40:bf:52:b8:7e:5b:2a:03:29:f9:36:bd:4d:b1: 0f:fd:43:ae:b6:96:9d:02:c1:f3:b4:cd:28:59:45:23:e9:d9: 60:b2:ec:08:23:cb:f9:a4:f8:4e:09:73:c3:88:15:6d:0a:42: f5:fb:59:89:57:b6:03:64:f1:a3:02:3d:2a:8f:92:59:23:b6: e0:ef:81:45:97:e4:53:4d:8c:29:b9:0e:ad:71:90:6b:f9:59: 46:40:bc:a8:45:7b:39:d2:94:d2:90:0a:69:19:46:60:8e:2a: 6c:d2:bf:e8:f0:a3:61:1d:f3:4b:6a:95:39:ec:3c:cb:0c:f8: 0a:c3:c2:e6:ba:33:cf:dc:c5:fd:46:aa:3c:1d:75:0d:d8:af: 32:76:d2:b4:f1:f0:04:1f:78:67:85:09:f1:ef:4e:f4:a5:e1: ca:03:f3:c9:f2:cc:df:bd:4b:48:f9:64:d0:94:3b:44:d7:8b: 39:42:9e:66:21:95:20:5e:d9:15:68:95:29:17:8c:66:4b:dc: 87:61:a7:81:97:7e:72:0e:73:4d:43:e7:9c:2a:7f:72:9a:1a: 30:cb:79:5e:01:34:b5:73:2a:5e:35:d1:f6:f2:fd:58:f9:1d: c0:f8:a1:da:61:9e:c1:dc:05:f8:84:98:b8:d9:dc:b6:dd:b7: f6:92:c9:a8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WHhCV9V8k0+3DTgiSnECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjQyNDA5YTFmOGMxY2VlNTk3NGRiOGE0MmUxZWI2NzJlZTgzNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3v3VHLORTjGTVOtywncr09fMNax BGsi11/62I2LuMnCPzuTVjBBqBgVuhwPRBw5d0VlvX0fZ1EpGD7pXpyyeAYvA41e A++E2QsdJnJw0SeVOteQcsbs1d39S+r5sut+YtHyg7Z9OpaNr0yZpLQjbB4iTKLU 8OK4gp1LRRge4wSOeS3Xq8kEZB3GFullZYyd35HA25h07OlPfdnB7qcIgsldxXSU t6t4u3rZ0qy+3hT5l2KUcYB4mHRpLw/YjIcTrnDYuwOqSgxSoD98RaK+0wnrKfxL 4OoM8sy4ja6DnQBfneLTa+ITisyEg6l8gXEqHv5OBhyP8ro4RCnaXJHmLQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFL9CQJofjBzuWXTbikLh62cu6DQ2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzU3MmI0 YS1kMjMwLTQ2MDMtOGE0Mi1hNTFmNDZiYjc0NjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvNTcyYjRh LWQyMzAtNDYwMy04YTQyLWE1MWY0NmJiNzQ2NC8xL3YwSkFtaC1NSE81WmROdUtR dUhyWnk3b05EWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDtIjANBgkqhkiG9w0BAQsFAAOCAQEAMqfHI0C/Urh+ WyoDKfk2vU2xD/1DrraWnQLB87TNKFlFI+nZYLLsCCPL+aT4Tglzw4gVbQpC9ftZ iVe2A2TxowI9Ko+SWSO24O+BRZfkU02MKbkOrXGQa/lZRkC8qEV7OdKU0pAKaRlG YI4qbNK/6PCjYR3zS2qVOew8ywz4CsPC5rozz9zF/UaqPB11DdivMnbStPHwBB94 Z4UJ8e9O9KXhygPzyfLM371LSPlk0JQ7RNeLOUKeZiGVIF7ZFWiVKReMZkvch2Gn gZd+cg5zTUPnnCp/cpoaMMt5XgE0tXMqXjXR9vL9WPkdwPih2mGewdwF+ISYuNnc tt239pLJqA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:20 2026 by rpki-client