This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v88kiR7ioP_7jgeqJzq058-IDuI.cer File: v88kiR7ioP_7jgeqJzq058-IDuI.cer (raw, json) Hash identifier: 7o+IGVCn7FA2EiwuP7RYCIZQAbjQf+WMzd/CGbj0ObE= Subject key identifier: BF:CF:24:89:1E:E2:A0:FF:FB:8E:07:AA:27:3A:B4:E7:CF:88:0E:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD28D0D446666D302A21E664546DD453E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca230-3b9f-445b-aa10-240d22f2f895/1/v88kiR7ioP_7jgeqJzq058-IDuI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca230-3b9f-445b-aa10-240d22f2f895/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 18 Jan 2026 19:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214929 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:8d:0d:44:66:66:d3:02:a2:1e:66:45:46:dd:45:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 18 19:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfcf24891ee2a0fffb8e07aa273ab4e7cf880ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7e:73:69:2b:a0:19:6b:46:ed:1e:7a:28:b6: 0e:08:99:ff:82:fe:8b:11:3a:5f:e5:d8:31:17:c2: 0b:ee:5a:ae:6f:1b:a0:f3:c1:1e:1c:db:20:21:a3: 23:71:da:c5:ab:df:01:7a:00:89:c6:11:58:3c:55: 24:e5:ae:db:3e:e1:a3:ee:07:57:01:7f:9f:11:83: c9:ef:ee:16:b1:be:4d:ff:ef:46:55:1d:21:8b:2a: 12:b5:e6:57:d9:0a:b7:99:10:dd:ea:4e:e9:85:29: aa:fd:e9:0c:ce:29:96:b5:15:2b:a9:a8:a5:b6:4a: e3:88:16:68:83:09:63:5a:a8:d3:85:3c:ef:97:0f: 5e:b9:42:be:06:37:85:a5:42:fd:2b:ce:28:eb:f0: 94:44:f7:10:3f:79:b0:07:2a:57:f7:28:77:01:ac: a7:04:8b:64:e4:23:70:93:98:f4:f7:f6:a5:52:95: fa:ed:d9:a9:70:dd:50:d3:fc:82:f3:02:a9:ce:b5: e5:1c:a9:09:23:6c:56:68:52:aa:26:33:2d:84:dc: e3:03:d2:3f:8c:b0:c0:41:28:a0:97:a7:40:ae:cc: 91:57:df:3f:50:8b:d1:5c:bf:c9:a3:12:16:88:42: cd:28:ab:68:64:31:ad:27:27:2e:5a:4c:81:c0:20: c8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CF:24:89:1E:E2:A0:FF:FB:8E:07:AA:27:3A:B4:E7:CF:88:0E:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca230-3b9f-445b-aa10-240d22f2f895/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca230-3b9f-445b-aa10-240d22f2f895/1/v88kiR7ioP_7jgeqJzq058-IDuI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214929 Signature Algorithm: sha256WithRSAEncryption a9:3e:85:30:9f:2f:8b:0d:4b:f8:29:50:2d:bb:cf:62:54:57: 76:cf:99:8b:1d:f4:17:39:11:84:80:a1:4a:80:9b:60:87:91: a0:a0:29:d8:73:58:5b:e8:7c:17:a8:ca:df:b5:9b:c5:78:00: 65:af:eb:10:00:da:a2:e7:77:4e:43:24:76:f5:c4:76:31:b4: 16:93:e3:5a:df:bb:40:f0:3a:a3:92:a0:52:73:e3:73:fc:c1: 50:f1:51:e0:79:d5:42:1d:ba:ae:5b:79:ce:1d:f8:be:d5:3d: f7:f5:d6:6d:09:8f:bf:e8:88:a9:66:f6:a4:ec:d1:c5:a4:88: de:c9:1f:08:b4:8c:35:82:ec:5f:da:cd:97:38:b4:f1:e0:5d: fa:f0:bb:d3:8a:63:07:68:fd:bc:21:3e:25:89:a6:5c:67:9f: a5:68:bc:88:3e:f7:00:67:b7:30:ad:32:ed:ee:d8:4d:33:f6: 5f:5a:e8:25:7e:f0:2d:cc:ca:bc:5f:9e:38:5d:44:f5:81:80: e6:6e:a9:bf:e1:5f:af:b6:7e:7a:73:c0:8f:b8:c3:11:15:93: 92:df:88:68:ff:13:99:59:19:16:ac:bc:8f:2b:c2:ad:0f:00: 42:36:13:25:59:e8:d3:28:17:0c:ac:98:e6:e9:ea:2c:3b:d0: f8:65:6f:ef -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZvSjQ1EZmbTAqIeZkVG3UU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE4MTkyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmNmMjQ4OTFlZTJhMGZmZmI4ZTA3YWEyNzNhYjRlN2NmODgwZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX5zaSugGWtG7R56KLYOCJn/gv6L ETpf5dgxF8IL7lqubxug88EeHNsgIaMjcdrFq98BegCJxhFYPFUk5a7bPuGj7gdX AX+fEYPJ7+4Wsb5N/+9GVR0hiyoSteZX2Qq3mRDd6k7phSmq/ekMzimWtRUrqail tkrjiBZogwljWqjThTzvlw9euUK+BjeFpUL9K84o6/CURPcQP3mwBypX9yh3Aayn BItk5CNwk5j09/alUpX67dmpcN1Q0/yC8wKpzrXlHKkJI2xWaFKqJjMthNzjA9I/ jLDAQSigl6dArsyRV98/UIvRXL/JoxIWiELNKKtoZDGtJycuWkyBwCDIlQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFL/PJIke4qD/+44Hqic6tOfPiA7iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzFjYTIz MC0zYjlmLTQ0NWItYWExMC0yNDBkMjJmMmY4OTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvMWNhMjMw LTNiOWYtNDQ1Yi1hYTEwLTI0MGQyMmYyZjg5NS8xL3Y4OGtpUjdpb1BfN2pnZXFK enEwNTgtSUR1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNHkTANBgkqhkiG9w0BAQsFAAOCAQEAqT6FMJ8viw1L +ClQLbvPYlRXds+Zix30FzkRhIChSoCbYIeRoKAp2HNYW+h8F6jK37WbxXgAZa/r EADaoud3TkMkdvXEdjG0FpPjWt+7QPA6o5KgUnPjc/zBUPFR4HnVQh26rlt5zh34 vtU99/XWbQmPv+iIqWb2pOzRxaSI3skfCLSMNYLsX9rNlzi08eBd+vC704pjB2j9 vCE+JYmmXGefpWi8iD73AGe3MK0y7e7YTTP2X1roJX7wLczKvF+eOF1E9YGA5m6p v+Ffr7Z+enPAj7jDERWTkt+IaP8TmVkZFqy8jyvCrQ8AQjYTJVno0ygXDKyY5unq LDvQ+GVv7w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:25 2026 by rpki-client