This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer File: 00J0yPw5e9vGx1haFcgyErBQIh8.cer (raw, json) Hash identifier: RxU70INTnNRSkDqYe5q/wVBfMmkGp21uic8zEsLEhQY= Subject key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3923F8A1D4532159B292303FCC90BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.189.168.0/23 IP: 195.189.174.0/23 IP: 2a0f:53c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:23:f8:a1:d4:53:21:59:b2:92:30:3f:cc:90:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d34274c8fc397bdbc6c7585a15c83212b050221f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:e8:cc:9b:92:eb:2b:3e:28:ad:30:0e:7a: 6e:b4:ec:81:87:97:5c:86:cf:3a:ca:a7:48:27:06: 68:3f:c5:e2:61:46:3d:be:98:e8:14:0a:47:77:e7: 1e:66:a6:3a:46:15:a4:6f:9b:05:65:ad:98:10:78: b0:53:21:a7:ff:00:8c:cd:44:c2:2c:07:62:20:b9: b6:67:02:a8:1e:a9:93:9d:46:64:c9:ae:90:1e:5d: df:79:70:5e:a1:47:96:90:b2:d7:ce:c3:20:cc:65: d1:16:3b:d0:74:0c:f3:1b:2b:d5:54:e6:e6:9e:33: 9b:85:c7:24:8c:43:9f:bf:3d:91:cc:6a:ce:8a:e2: 51:48:06:69:34:90:d8:85:de:84:99:43:33:09:64: 28:1f:22:02:a8:50:1e:61:52:a1:80:c6:84:95:f0: af:24:c5:76:8c:59:d9:13:d2:3a:50:8f:43:7a:71: a4:17:75:58:b2:3c:ed:0c:fe:af:a4:9c:fa:6b:55: 6a:4a:92:99:6f:0f:e8:12:02:67:68:80:d6:32:86: b1:3f:6c:f6:b5:31:97:be:ae:a7:f3:20:0a:6d:3b: 06:b2:14:80:71:a6:b8:ba:b9:64:1e:48:ac:11:15: e2:06:6a:30:d7:d8:68:04:e6:6e:0c:56:1e:38:3e: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.189.168.0/23 195.189.174.0/23 IPv6: 2a0f:53c0::/29 Signature Algorithm: sha256WithRSAEncryption 59:c4:aa:d2:39:d4:f3:94:ba:a6:26:7b:d7:34:11:9f:fc:59: 12:56:67:79:10:7f:17:c2:93:d1:44:95:f6:c2:55:8f:86:c8: 6c:26:30:79:f6:36:61:62:fa:9d:84:a8:31:f8:83:df:8f:5c: 2c:1a:d5:94:90:6a:ce:c5:18:a2:54:98:e9:e7:fc:a3:41:64: fa:f1:35:53:74:c5:90:d5:5e:da:7e:28:27:c8:56:cb:03:cb: cc:96:31:36:fa:75:0f:a8:64:bc:36:72:e6:e3:a1:1e:5c:c5: ec:04:8e:92:2c:03:74:a5:5a:f0:28:ff:c8:2b:a4:98:3e:60: 36:17:ad:54:64:3c:68:66:3d:41:30:4b:ca:89:9c:94:64:8c: 79:aa:0e:ad:d1:4c:80:0e:5b:f5:16:4c:1f:fd:c7:2a:10:ed: d2:09:45:83:fa:da:a3:f2:da:0d:70:1e:a2:0a:0e:58:b0:e7: c2:6f:ce:c3:e0:81:5e:2b:0f:47:8b:4e:51:3a:a1:a7:5c:96: d4:72:a1:c0:87:1c:4b:31:67:db:ac:10:3d:ec:8a:98:e0:89: 6c:a9:47:54:1d:80:08:b8:e2:7e:bd:88:53:01:7e:71:6a:91: 2d:3a:bf:56:7d:6f:7d:83:c8:af:2a:37:0d:f0:3f:08:5a:7a: f6:32:b9:a3 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt+OSP4odRTIVmykjA/zJC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzQyNzRjOGZjMzk3YmRiYzZjNzU4NWExNWM4MzIxMmIwNTAyMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaLozJuS6ys+KK0wDnputOyBh5dc hs86yqdIJwZoP8XiYUY9vpjoFApHd+ceZqY6RhWkb5sFZa2YEHiwUyGn/wCMzUTC LAdiILm2ZwKoHqmTnUZkya6QHl3feXBeoUeWkLLXzsMgzGXRFjvQdAzzGyvVVObm njObhcckjEOfvz2RzGrOiuJRSAZpNJDYhd6EmUMzCWQoHyICqFAeYVKhgMaElfCv JMV2jFnZE9I6UI9DenGkF3VYsjztDP6vpJz6a1VqSpKZbw/oEgJnaIDWMoaxP2z2 tTGXvq6n8yAKbTsGshSAcaa4urlkHkisERXiBmow19hoBOZuDFYeOD7aRwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFNNCdMj8OXvbxsdYWhXIMhKwUCIfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzFmZmZi Yi1mZjI0LTRmYWItYTc2My01MGFkYmVhYzhjYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvMWZmZmJi LWZmMjQtNGZhYi1hNzYzLTUwYWRiZWFjOGNiNC8xLzAwSjB5UHc1ZTl2R3gxaGFG Y2d5RXJCUUloOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBw72oAwQBw72uMA0EAgACMAcDBQMqD1PAMA0G CSqGSIb3DQEBCwUAA4IBAQBZxKrSOdTzlLqmJnvXNBGf/FkSVmd5EH8XwpPRRJX2 wlWPhshsJjB59jZhYvqdhKgx+IPfj1wsGtWUkGrOxRiiVJjp5/yjQWT68TVTdMWQ 1V7afignyFbLA8vMljE2+nUPqGS8NnLm46EeXMXsBI6SLAN0pVrwKP/IK6SYPmA2 F61UZDxoZj1BMEvKiZyUZIx5qg6t0UyADlv1Fkwf/ccqEO3SCUWD+tqj8toNcB6i Cg5YsOfCb87D4IFeKw9Hi05ROqGnXJbUcqHAhxxLMWfbrBA97IqY4IlsqUdUHYAI uOJ+vYhTAX5xapEtOr9WfW99g8ivKjcN8D8IWnr2Mrmj -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:53 2026 by rpki-client