This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer (raw, json) Hash identifier: n6JJyGXGqjMpeG6o9Ka/B+oll6muM2dx4PSCr087/lo= Subject key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED20B23F11F842F15892D776A287E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212767 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:20:b2:3f:11:f8:42:f1:58:92:d7:76:a2:87:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:93:8d:dc:ab:ad:c9:06:35:fc:ee:16:5c: 66:0d:57:67:fa:33:4d:a3:9b:c6:fe:ff:f0:fd:05: 6c:fd:c2:15:8f:0b:15:45:61:d4:81:f7:9a:8b:11: fa:91:2f:d9:49:8c:c1:ac:e9:ad:c6:5d:50:2e:94: ae:9a:b1:71:c2:23:53:43:70:a4:ec:1e:a3:5c:21: ff:7f:43:10:01:97:52:a0:88:98:2b:92:aa:44:8d: f4:c5:2c:ed:72:66:a9:8d:75:41:13:47:d9:d1:5f: 17:4e:b3:39:73:d1:17:15:b0:d0:79:b3:90:07:3b: 4b:cb:97:3a:3f:5f:f6:25:d4:1c:74:26:05:88:ee: 1b:13:33:d6:ee:fa:a6:ba:0b:c8:2e:d2:91:11:2d: 31:e2:e3:20:ca:63:47:39:1b:93:36:29:ee:a2:9d: 68:a9:04:57:53:be:48:0f:17:4b:61:7d:9c:38:b3: 49:5a:44:f6:b3:fc:04:fd:0c:fb:81:0d:d2:8b:92: 33:86:3a:10:ec:61:0d:d2:72:47:f3:12:6e:b5:fb: df:c6:3b:5e:99:76:bf:f5:9a:d9:e6:8c:db:21:77: 6b:cd:7c:76:00:bd:a5:54:db:25:a1:e4:ed:dd:0a: 9f:70:c0:5b:25:30:98:2d:03:47:bd:03:44:ef:9c: 62:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212767 Signature Algorithm: sha256WithRSAEncryption 2e:6c:2f:fe:f9:6b:d8:b4:56:be:39:d1:cd:f6:01:f3:46:15: 7d:67:da:9e:e9:36:4f:cd:ed:e3:9c:fa:1a:de:15:34:e4:ee: 7e:7c:42:02:8a:5a:3d:13:23:7b:78:54:aa:ed:e6:bf:ec:6c: ee:c7:d3:14:90:86:54:b0:55:6e:9f:b9:d5:ce:1a:6d:90:3b: ab:c7:a6:45:db:12:33:d2:f4:45:75:17:16:52:7c:c6:85:0f: 00:33:35:12:06:97:01:13:c7:7a:89:f9:4c:30:43:77:9e:23: 9c:e0:7e:86:4c:87:58:71:d3:14:fc:3a:06:a1:01:74:6e:68: 40:59:fa:d5:c6:12:3b:62:a9:4e:0c:3a:87:2c:ef:79:a7:90: 87:c7:5f:a8:bf:35:2e:57:da:fd:17:88:13:e8:32:85:cc:b9: 31:f2:fd:72:44:63:d8:29:58:07:b4:25:b3:44:c1:50:c4:64: f1:11:ed:80:6c:38:e9:98:96:f6:a3:10:49:39:aa:a0:f4:e7: f5:36:82:f6:24:45:c8:17:64:95:df:5e:1f:82:52:b8:01:a8: e1:ff:7c:d7:75:c5:ed:08:64:9a:7f:80:08:37:f1:75:d9:b3: a6:98:11:75:a8:7f:18:46:9e:af:a3:26:8e:d1:da:b9:38:29: 25:c5:06:86 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57SCyPxH4QvFYktd2oofhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGUzYTRmYjI2ODFkYjI4YjVjM2Y1ZjFkNDZhMmQzNTk5NjBmYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4CTjdyrrckGNfzuFlxmDVdn+jNN o5vG/v/w/QVs/cIVjwsVRWHUgfeaixH6kS/ZSYzBrOmtxl1QLpSumrFxwiNTQ3Ck 7B6jXCH/f0MQAZdSoIiYK5KqRI30xSztcmapjXVBE0fZ0V8XTrM5c9EXFbDQebOQ BztLy5c6P1/2JdQcdCYFiO4bEzPW7vqmugvILtKRES0x4uMgymNHORuTNinuop1o qQRXU75IDxdLYX2cOLNJWkT2s/wE/Qz7gQ3Si5IzhjoQ7GEN0nJH8xJutfvfxjte mXa/9ZrZ5ozbIXdrzXx2AL2lVNsloeTt3QqfcMBbJTCYLQNHvQNE75xiyQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFL3jpPsmgdsotcP18dRqLTWZYPqkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzIxZGU2 Ny00OTc1LTQ3YTgtODQ2Yy04MDhmZWFhZjk4N2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvMjFkZTY3 LTQ5NzUtNDdhOC04NDZjLTgwOGZlYWFmOTg3ZC8xL3ZlT2steWFCMnlpMXdfWHgx R290TlpsZy1xUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/HzANBgkqhkiG9w0BAQsFAAOCAQEALmwv/vlr2LRW vjnRzfYB80YVfWfanuk2T83t45z6Gt4VNOTufnxCAopaPRMje3hUqu3mv+xs7sfT FJCGVLBVbp+51c4abZA7q8emRdsSM9L0RXUXFlJ8xoUPADM1EgaXARPHeon5TDBD d54jnOB+hkyHWHHTFPw6BqEBdG5oQFn61cYSO2KpTgw6hyzveaeQh8dfqL81Llfa /ReIE+gyhcy5MfL9ckRj2ClYB7Qls0TBUMRk8RHtgGw46ZiW9qMQSTmqoPTn9TaC 9iRFyBdkld9eH4JSuAGo4f9813XF7Qhkmn+ACDfxddmzppgRdah/GEaer6MmjtHa uTgpJcUGhg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:16 2026 by rpki-client