This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer File: b69IsCuX3C0xIlCqI0CDuMG7noE.cer (raw, json) Hash identifier: M72FLfDlBnC6WGzIilzjWK0YlO8t2+zp5XLstO3XIsA= Subject key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C809313686ABBC832B21032D25DD648 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214088 IP: 2001:30c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:93:13:68:6a:bb:c8:32:b2:10:32:d2:5d:d6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d0:1d:d5:cc:c5:cb:db:64:d4:49:d4:00:5a: 29:e1:6c:29:a9:e5:eb:f1:f8:83:f1:03:5f:3b:73: f8:47:98:20:8f:10:cf:ef:d5:1e:95:7e:6c:59:43: b8:d7:94:e1:b0:58:db:f7:e1:87:db:00:6d:5b:13: 6e:fe:d4:cf:7e:38:50:6f:59:5d:fd:b2:c7:72:3b: 21:71:d0:35:9c:13:07:f3:6e:74:54:14:2c:e8:38: 90:39:f7:5f:ac:ba:e1:80:21:50:86:30:b4:d7:c5: 52:dd:69:06:52:85:f0:3a:6b:21:05:b4:dd:51:9d: 33:9c:48:82:c2:cf:16:53:4d:89:c4:74:2f:0e:e2: 80:45:e2:c8:49:86:fb:5c:df:95:83:c5:1d:f1:91: a4:6f:57:13:e4:db:c0:9f:0d:a1:f9:7b:34:02:4a: c2:a3:26:5f:32:c0:61:77:c1:71:fe:ea:38:03:58: 18:0f:80:72:bd:15:66:87:06:b8:b5:22:01:ba:c6: 67:31:96:a9:cb:28:2c:8c:76:01:33:ab:50:7d:55: 36:4f:cc:89:e0:1e:17:fa:ac:52:86:5f:90:8d:61: 06:1f:ff:ce:3b:ad:35:d8:f2:eb:b2:f9:b4:31:b0: 0f:42:c9:a1:1a:b1:25:8a:c3:d4:07:55:63:df:e0: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:30c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214088 Signature Algorithm: sha256WithRSAEncryption b0:2f:5d:3f:09:1a:71:e5:0a:12:0f:7c:1e:cf:f2:b2:a0:f5: ee:c8:62:81:dc:b9:17:42:81:73:f0:66:37:7b:35:ba:18:d7: ce:62:ed:4a:29:2b:33:0d:98:75:5a:37:1a:1d:92:58:52:97: 9b:d0:c8:7f:2e:b4:4b:a0:1f:ad:07:39:c1:d9:e3:06:41:28: 1b:b9:d2:6e:90:3e:8e:90:92:84:5c:74:4b:64:38:86:2c:76: 0f:1a:6c:7d:65:a6:32:41:60:fe:87:ed:46:a0:b0:d9:8e:ef: ae:4b:08:ff:2b:57:fc:bf:70:01:fb:28:3a:02:c1:23:5b:f9: 96:35:e7:25:e9:24:f2:1b:d7:a6:62:d1:7e:65:b0:4e:88:1e: a9:0c:a9:b5:19:27:6e:ed:28:24:1c:86:dd:c1:f1:50:b2:13: 6e:51:4d:66:09:98:60:6f:1b:e2:1d:31:94:92:cd:82:aa:ad: f4:da:10:a4:19:92:63:b2:e1:27:f0:91:70:a3:ad:38:2c:ac: ad:68:3f:b8:0b:99:25:71:04:b2:9b:49:17:bd:16:6d:51:a2: 2c:e3:01:65:42:5e:2b:77:02:ec:78:cc:e1:2c:48:01:bc:9d: 00:4e:06:33:f3:82:24:d7:cc:65:99:24:80:53:d3:69:49:53: 46:56:9a:d3 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt8gJMTaGq7yDKyEDLSXdZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmFmNDhiMDJiOTdkYzJkMzEyMjUwYWEyMzQwODNiOGMxYmI5ZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Ad1czFy9tk1EnUAFop4WwpqeXr 8fiD8QNfO3P4R5ggjxDP79UelX5sWUO415ThsFjb9+GH2wBtWxNu/tTPfjhQb1ld /bLHcjshcdA1nBMH8250VBQs6DiQOfdfrLrhgCFQhjC018VS3WkGUoXwOmshBbTd UZ0znEiCws8WU02JxHQvDuKAReLISYb7XN+Vg8Ud8ZGkb1cT5NvAnw2h+Xs0AkrC oyZfMsBhd8Fx/uo4A1gYD4ByvRVmhwa4tSIBusZnMZapyygsjHYBM6tQfVU2T8yJ 4B4X+qxShl+QjWEGH//OO6012PLrsvm0MbAPQsmhGrElisPUB1Vj3+CIMQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFG+vSLArl9wtMSJQqiNAg7jBu56BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2MyMzBi NS00NzkxLTQ4ZDAtYjg4Ny1iMzRkNjQ5Y2ZiN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYzIzMGI1 LTQ3OTEtNDhkMC1iODg3LWIzNGQ2NDljZmI3Yi8xL2I2OUlzQ3VYM0MweElsQ3FJ MENEdU1HN25vRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDIAEwwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDREgwDQYJKoZIhvcNAQELBQADggEBALAvXT8JGnHlChIPfB7P8rKg9e7IYoHc uRdCgXPwZjd7NboY185i7UopKzMNmHVaNxodklhSl5vQyH8utEugH60HOcHZ4wZB KBu50m6QPo6QkoRcdEtkOIYsdg8abH1lpjJBYP6H7UagsNmO765LCP8rV/y/cAH7 KDoCwSNb+ZY15yXpJPIb16Zi0X5lsE6IHqkMqbUZJ27tKCQcht3B8VCyE25RTWYJ mGBvG+IdMZSSzYKqrfTaEKQZkmOy4SfwkXCjrTgsrK1oP7gLmSVxBLKbSRe9Fm1R oizjAWVCXit3Aux4zOEsSAG8nQBOBjPzgiTXzGWZJIBT02lJU0ZWmtM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:07 2026 by rpki-client