This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer File: 0PMTtkDG3nU1uB7GjEDubsmf_00.cer (raw, json) Hash identifier: FRf7kY0zOeU013ho2YaQ7//4fYuPdOdfWEjn5rImGGE= Subject key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B369B86722BD6A11F9633C7344DA2B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50600 IP: 109.197.72.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9b:86:72:2b:d6:a1:1f:96:33:c7:34:4d:a2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:d4:2f:88:9d:9a:8a:3a:07:a7:f1:a9:89: cf:d5:0f:d8:f1:38:4b:7a:b7:c0:7f:41:71:77:5f: 02:fa:e2:40:5d:16:91:0a:da:a3:ef:72:0a:5e:f5: 94:47:e4:74:aa:01:59:59:fc:e5:53:dc:83:e3:9d: 43:b9:47:0f:5e:0b:25:88:bc:2c:e8:bd:c0:96:b7: 74:c9:e5:da:27:43:b9:bc:01:ea:db:24:4a:51:8e: 38:00:8b:4c:4b:af:c1:0a:83:da:e6:ca:f4:1e:d8: 02:8e:4a:ab:bb:10:07:0e:b5:62:c4:36:c9:fe:c2: 60:05:46:bc:22:11:4c:69:d7:14:03:05:2d:69:74: 63:32:a2:58:3e:70:ce:68:0e:74:fb:6b:24:64:0e: dc:b3:95:74:28:a8:62:72:08:38:05:27:c9:df:e5: 38:c5:70:91:65:90:9f:cf:36:63:15:92:9a:9b:f4: c7:ec:1e:1e:86:4e:99:fe:9c:e3:a5:f3:5f:ee:c1: 55:59:6c:58:c2:ea:41:a1:19:a9:e6:a2:ba:dc:89: 52:91:a1:77:13:25:ff:57:6f:f7:0a:6b:f2:5c:b9: 20:fd:61:ca:e6:8c:78:be:02:33:01:5b:c7:bd:cc: b8:d8:29:74:01:9d:aa:60:7a:34:d7:c6:4c:3d:2f: bd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.197.72.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50600 Signature Algorithm: sha256WithRSAEncryption 7a:9b:d8:df:6e:c5:7d:ca:5f:15:bb:9d:3b:c4:32:5d:bd:52: 17:5c:59:5f:7f:f4:f2:fa:3e:62:ba:ca:9d:af:1e:0a:90:80: 43:4a:04:af:a3:ab:6f:74:48:e9:3f:6f:66:75:d1:03:31:ce: 1d:ca:5f:d6:c8:e6:be:5b:ac:f2:4a:da:a1:c0:7e:67:91:5e: 40:59:eb:7a:b5:d1:b1:13:b1:16:7d:46:08:2c:eb:d3:71:93: 87:ee:9a:08:d0:7c:cd:e3:96:b2:ec:1b:2f:2f:5c:7b:17:9d: 24:fe:10:23:9d:ed:52:ca:93:52:a8:fc:19:47:74:87:91:eb: b7:46:9a:01:43:ed:8c:91:f6:6c:a0:1a:99:5b:99:cc:2c:34: 6e:d1:57:1f:5f:05:55:f0:50:1f:97:c2:6f:f0:b4:00:4a:a2: 55:de:af:9d:46:96:cc:b1:99:ee:78:5b:f0:13:e4:7d:22:02: f0:2e:eb:f8:6b:0a:5c:1f:b3:40:71:3a:e2:22:4f:72:e2:e9: 6a:61:7a:9d:03:f9:31:17:13:76:94:cf:4d:e4:76:76:0b:d4: b7:27:5d:f9:c9:65:b1:50:1d:e9:23:f0:1f:57:57:4c:9d:60: af:c5:4a:05:3d:49:a0:17:7b:5b:c6:4e:7e:28:39:d3:09:84: e0:d0:57:09 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NpuGcivWoR+WM8c0TaKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGYzMTNiNjQwYzZkZTc1MzViODFlYzY4YzQwZWU2ZWM5OWZmZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJfUL4idmoo6B6fxqYnP1Q/Y8ThL erfAf0Fxd18C+uJAXRaRCtqj73IKXvWUR+R0qgFZWfzlU9yD451DuUcPXgsliLws 6L3Alrd0yeXaJ0O5vAHq2yRKUY44AItMS6/BCoPa5sr0HtgCjkqruxAHDrVixDbJ /sJgBUa8IhFMadcUAwUtaXRjMqJYPnDOaA50+2skZA7cs5V0KKhicgg4BSfJ3+U4 xXCRZZCfzzZjFZKam/TH7B4ehk6Z/pzjpfNf7sFVWWxYwupBoRmp5qK63IlSkaF3 EyX/V2/3CmvyXLkg/WHK5ox4vgIzAVvHvcy42Cl0AZ2qYHo018ZMPS+9NQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNDzE7ZAxt51NbgexoxA7m7Jn/9NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzlhOTlm OS0yZDZjLTRhNGEtYTA5Ni0wYzczYmVjNTEwN2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvOWE5OWY5 LTJkNmMtNGE0YS1hMDk2LTBjNzNiZWM1MTA3Yy8xLzBQTVR0a0RHM25VMXVCN0dq RUR1YnNtZl8wMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDbcVIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDFqDANBgkqhkiG9w0BAQsFAAOCAQEAepvY327FfcpfFbudO8QyXb1SF1xZX3/0 8vo+YrrKna8eCpCAQ0oEr6Orb3RI6T9vZnXRAzHOHcpf1sjmvlus8kraocB+Z5Fe QFnrerXRsROxFn1GCCzr03GTh+6aCNB8zeOWsuwbLy9cexedJP4QI53tUsqTUqj8 GUd0h5Hrt0aaAUPtjJH2bKAamVuZzCw0btFXH18FVfBQH5fCb/C0AEqiVd6vnUaW zLGZ7nhb8BPkfSIC8C7r+GsKXB+zQHE64iJPcuLpamF6nQP5MRcTdpTPTeR2dgvU tydd+cllsVAd6SPwH1dXTJ1gr8VKBT1JoBd7W8ZOfig50wmE4NBXCQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:19 2026 by rpki-client