This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer File: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer (raw, json) Hash identifier: WWirx2Tho5VVlsfu+GY8XtNGHlPvOAPBRmW+reedBIk= Subject key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED8E2BD99DEC400AD080C25E738791 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31639 AS: 58003 IP: 31.217.192.0/21 IP: 37.233.88.0/21 IP: 79.171.232.0/21 IP: 84.234.64.0/20 IP: 91.223.27.0/24 IP: 94.199.56.0/21 IP: 109.106.8.0/22 IP: 185.28.244.0/22 IP: 185.163.152.0/22 IP: 185.168.204.0/22 IP: 185.179.116.0/22 IP: 2001:67c:14c0::/48 IP: 2a00:9560::/29 IP: 2a09:5600::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8e:2b:d9:9d:ec:40:0a:d0:80:c2:5e:73:87:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d03046d16cfc391b028b88743773ce005cf97b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:d6:d6:84:a2:ea:ec:6e:74:4c:8a:da:8e: 8c:26:37:29:71:b0:d5:20:fe:2b:ca:01:f4:6e:2f: f7:95:ce:8b:e6:3a:b2:b8:76:22:6a:19:7d:03:06: b9:0e:9a:33:9e:f5:22:0b:ed:0b:ee:88:b1:1c:98: 43:8b:8e:0d:09:f5:9e:bc:3b:ce:d9:0b:dc:bd:3a: 04:d3:ee:62:ac:22:8a:89:b9:c0:4d:4a:e6:73:cc: a8:c4:7e:a6:d8:69:3b:c7:3d:52:58:f7:c6:80:b4: 82:28:ca:72:72:92:84:72:8e:9d:8a:4c:fa:0f:c0: 55:fc:c1:f5:b4:6f:f5:5c:e1:b1:e4:4c:d9:a2:26: 67:4a:c4:17:e6:32:49:57:c3:dc:91:4e:56:a0:db: 15:1f:66:a1:a3:a9:17:b8:57:73:7b:23:47:9f:94: 3e:bc:23:53:31:03:d1:67:83:c4:77:71:ef:ab:e4: 6c:c3:0f:e4:cb:f3:29:19:5c:8b:5c:dc:ca:be:f2: b3:1d:8e:98:bc:1c:3f:e1:46:95:78:8a:9f:29:2e: 8f:48:59:52:84:df:7f:71:e8:06:fe:e9:da:29:de: 45:d0:06:7d:ce:8e:2d:82:35:7f:16:d6:81:74:d1: b8:57:49:50:a9:8c:02:37:ee:03:af:f1:83:f1:cf: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.217.192.0/21 37.233.88.0/21 79.171.232.0/21 84.234.64.0/20 91.223.27.0/24 94.199.56.0/21 109.106.8.0/22 185.28.244.0/22 185.163.152.0/22 185.168.204.0/22 185.179.116.0/22 IPv6: 2001:67c:14c0::/48 2a00:9560::/29 2a09:5600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31639 58003 Signature Algorithm: sha256WithRSAEncryption 3f:9e:d7:4a:ea:3c:5b:fe:4b:50:10:5a:ba:0b:7e:dc:a2:0f: c8:de:f2:55:bd:b9:c3:eb:13:1b:59:ee:2e:c0:04:58:8c:4e: aa:c0:9d:70:06:4b:b4:b8:4d:aa:2c:cb:51:fb:41:0d:0a:22: ac:d8:c3:38:0f:e2:bd:36:c9:75:1e:12:f6:1c:ed:d4:5c:a4: 9c:fe:ce:d6:2e:96:b2:ca:7b:46:79:ad:86:74:6f:14:44:fb: f1:d6:a1:8f:4b:9a:b6:fd:4e:ae:80:b4:eb:a4:68:66:76:d8: b1:76:f0:6c:6a:95:dc:13:36:80:48:26:2b:22:8c:19:8c:8a: 4b:73:a0:2a:68:ae:54:d8:0b:d3:32:e5:05:86:eb:fd:84:73: da:f6:cd:fc:4e:c0:41:01:ed:9a:cd:e5:a0:43:44:c9:6b:42: c6:9c:46:99:7f:3a:53:8e:29:9c:0f:71:9e:02:d0:b9:aa:19: 1a:75:ef:10:78:f9:1f:4e:9e:1e:a0:2c:96:f9:62:86:42:f7: 6f:25:3d:d2:cc:96:d9:99:39:45:df:27:c3:8d:54:a0:d9:63: fc:38:7e:9c:cc:76:1b:f8:75:19:4d:90:4d:a3:64:08:83:99: 6c:4c:6f:42:d5:82:5e:82:31:bb:d3:33:ce:06:cd:4a:6e:f4: 95:dd:58:49 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgISAZt87Y4r2Z3sQArQgMJec4eRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDMwNDZkMTZjZmMzOTFiMDI4Yjg4NzQzNzczY2UwMDVjZjk3YjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZjW1oSi6uxudEyK2o6MJjcpcbDV IP4rygH0bi/3lc6L5jqyuHYiahl9Awa5DpoznvUiC+0L7oixHJhDi44NCfWevDvO 2QvcvToE0+5irCKKibnATUrmc8yoxH6m2Gk7xz1SWPfGgLSCKMpycpKEco6dikz6 D8BV/MH1tG/1XOGx5EzZoiZnSsQX5jJJV8PckU5WoNsVH2aho6kXuFdzeyNHn5Q+ vCNTMQPRZ4PEd3Hvq+Rsww/ky/MpGVyLXNzKvvKzHY6YvBw/4UaVeIqfKS6PSFlS hN9/cegG/unaKd5F0AZ9zo4tgjV/FtaBdNG4V0lQqYwCN+4Dr/GD8c8eFwIDAQAB o4IC/zCCAvswHQYDVR0OBBYEFNAwRtFs/DkbAouIdDdzzgBc+XsdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzE4ZDEz Mi05OTUxLTQwNTUtYjVhNi1kYzBlMWE3MjUyMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvMThkMTMy LTk5NTEtNDA1NS1iNWE2LWRjMGUxYTcyNTIyMS8xLzBEQkcwV3o4T1JzQ2k0aDBO M1BPQUZ6NWV4MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHoGCCsGAQUF BwEHAQH/BGswaTBIBAIAATBCAwQDH9nAAwQDJelYAwQDT6voAwQEVOpAAwQAW98b AwQDXsc4AwQCbWoIAwQCuRz0AwQCuaOYAwQCuajMAwQCubN0MB0EAgACMBcDBwAg AQZ8FMADBQMqAJVgAwUAKglWADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJ7lwID AOKTMA0GCSqGSIb3DQEBCwUAA4IBAQA/ntdK6jxb/ktQEFq6C37cog/I3vJVvbnD 6xMbWe4uwARYjE6qwJ1wBku0uE2qLMtR+0ENCiKs2MM4D+K9Nsl1HhL2HO3UXKSc /s7WLpayyntGea2GdG8URPvx1qGPS5q2/U6ugLTrpGhmdtixdvBsapXcEzaASCYr IowZjIpLc6AqaK5U2AvTMuUFhuv9hHPa9s38TsBBAe2azeWgQ0TJa0LGnEaZfzpT jimcD3GeAtC5qhkade8QePkfTp4eoCyW+WKGQvdvJT3SzJbZmTlF3yfDjVSg2WP8 OH6czHYb+HUZTZBNo2QIg5lsTG9C1YJegjG70zPOBs1KbvSV3VhJ -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:11 2026 by rpki-client