This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer File: x-0gqk1F1WHiTZJvWbF1J42bAcg.cer (raw, json) Hash identifier: u4RHIV4API+A0HkfGK2JF3Y2EsYiVi9k1f1XmrFUKq0= Subject key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A29A73844DB591D4B206E3F07B1185 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212270 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9a:73:84:4d:b5:91:d4:b2:06:e3:f0:7b:11:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:19:5b:a5:d4:62:77:25:d3:aa:9b:64:fb: c2:35:37:c3:cb:25:5f:c4:4b:a8:a2:17:2b:c4:69: 65:1b:79:e8:13:22:54:03:12:aa:cc:9f:de:65:b5: b0:fb:e5:01:e8:9f:99:1f:28:db:92:24:7e:47:e1: 51:6c:4d:8f:bb:2c:e9:0c:41:22:a1:32:cd:c9:d9: ac:ac:74:c6:24:65:17:f6:0b:c8:af:ff:98:5d:6f: ec:69:7a:4c:29:2e:40:c3:14:f6:29:2b:9f:79:da: b4:0f:54:68:c2:39:67:c5:dc:16:e1:dd:00:6c:93: e9:ab:4e:65:c1:77:58:ee:2f:37:cc:17:4a:06:0c: eb:92:2c:6b:25:bb:e8:00:e1:3a:94:c5:ca:ef:c8: ca:9e:0f:25:09:24:fe:05:86:f3:86:d3:8f:ac:a3: 75:81:ee:f1:45:86:54:0a:a5:a1:4a:72:01:a0:e8: b8:32:30:35:16:db:b1:b3:a3:c3:09:92:4d:85:16: 70:91:db:de:04:46:16:14:b0:27:a3:88:1b:cb:5c: 01:65:f1:03:41:8f:8e:d0:7c:d7:e5:a5:f9:f5:c8: 13:9a:8f:1f:34:22:2b:e3:07:79:96:5b:ad:e3:77: cd:d4:75:36:8d:5e:7a:01:49:9f:df:82:f9:d5:5b: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212270 Signature Algorithm: sha256WithRSAEncryption 73:bc:08:8f:2c:67:68:0c:f8:7e:6b:2a:f4:34:b4:ed:ce:b6: 54:7e:78:76:4b:cf:8d:57:1a:0a:51:9c:cc:e5:ac:03:38:da: 8e:02:af:b8:53:59:3a:22:f6:33:a9:37:45:d4:d6:4d:cf:ad: db:6d:fe:47:95:b9:a0:46:e8:a7:6d:ac:f8:30:dd:0b:4a:fb: ac:63:c6:74:30:e2:c1:56:13:63:65:99:8c:ba:11:56:a6:75: ab:e0:e2:14:e2:28:7d:46:0f:88:14:e6:a4:1a:e7:59:ae:41: 80:62:49:1f:4a:60:78:b5:50:99:d5:db:c3:cb:a2:8c:7a:5d: 7c:bc:31:c7:a3:4b:3f:74:7c:66:6c:06:60:b7:d6:be:09:04: c6:55:c3:10:c9:5d:2b:54:80:38:a5:45:0d:63:29:a0:d9:d3: 17:0e:78:37:de:a4:81:b7:f6:3a:69:b4:59:11:29:5a:06:05: 79:75:15:f7:da:89:ac:38:29:7f:d3:17:6b:cc:98:51:90:4a: 93:e2:f7:48:e4:5e:ed:42:c8:2e:8f:2c:32:b7:19:27:b6:26: ac:0b:a0:a0:a1:9b:b6:a1:58:01:70:b8:3d:b0:b1:a5:63:02: c5:79:fa:2a:24:df:bd:a7:4a:6a:e3:7e:f3:91:2f:c6:dd:c8: ce:66:0a:2e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4oppzhE21kdSyBuPwexGFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2VkMjBhYTRkNDVkNTYxZTI0ZDkyNmY1OWIxNzUyNzhkOWIwMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYMZW6XUYncl06qbZPvCNTfDyyVf xEuoohcrxGllG3noEyJUAxKqzJ/eZbWw++UB6J+ZHyjbkiR+R+FRbE2PuyzpDEEi oTLNydmsrHTGJGUX9gvIr/+YXW/saXpMKS5AwxT2KSufedq0D1RowjlnxdwW4d0A bJPpq05lwXdY7i83zBdKBgzrkixrJbvoAOE6lMXK78jKng8lCST+BYbzhtOPrKN1 ge7xRYZUCqWhSnIBoOi4MjA1Ftuxs6PDCZJNhRZwkdveBEYWFLAno4gby1wBZfED QY+O0HzX5aX59cgTmo8fNCIr4wd5llut43fN1HU2jV56AUmf34L51VvdXQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMftIKpNRdVh4k2Sb1mxdSeNmwHIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzllZmUx My04Yjk0LTRiNjItODdhYy02YTVlOGViZGZkMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvOWVmZTEz LThiOTQtNGI2Mi04N2FjLTZhNWU4ZWJkZmQxMi8xL3gtMGdxazFGMVdIaVRaSnZX YkYxSjQyYkFjZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM9LjANBgkqhkiG9w0BAQsFAAOCAQEAc7wIjyxnaAz4 fmsq9DS07c62VH54dkvPjVcaClGczOWsAzjajgKvuFNZOiL2M6k3RdTWTc+t223+ R5W5oEbop22s+DDdC0r7rGPGdDDiwVYTY2WZjLoRVqZ1q+DiFOIofUYPiBTmpBrn Wa5BgGJJH0pgeLVQmdXbw8uijHpdfLwxx6NLP3R8ZmwGYLfWvgkExlXDEMldK1SA OKVFDWMpoNnTFw54N96kgbf2Omm0WREpWgYFeXUV99qJrDgpf9MXa8yYUZBKk+L3 SORe7ULILo8sMrcZJ7YmrAugoKGbtqFYAXC4PbCxpWMCxXn6KiTfvadKauN+85Ev xt3IzmYKLg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:02 2026 by rpki-client