This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.cer (raw, json) Hash identifier: tfaHW7eiSj0VXMazCBV/vMwAtNor4kJzapvt6wMkSlU= Subject key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3744CAFB07097A06B8FD00B8CBB22E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211152 IP: 185.255.138.0/24 IP: 2a10:bf40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:44:ca:fb:07:09:7a:06:b8:fd:00:b8:cb:b2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0f4fa80758753b243a2165eddea75dbeee826c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:19:6a:07:fe:86:95:ca:21:34:33:62:4b:e5: 6a:d8:0b:7c:27:92:ee:d1:58:4e:98:6f:80:6e:6b: 29:0d:df:38:ff:b6:8d:2b:da:a3:55:4e:a3:4c:69: 0b:82:e6:f4:d5:6e:dc:c3:eb:bc:52:d4:44:51:0e: 4b:3b:13:d4:1b:b4:34:cd:5f:0b:20:b9:91:68:ae: 9c:f6:8a:03:90:8b:d2:92:af:b5:9c:aa:20:80:3e: a7:8d:f0:b2:03:12:a6:8f:23:de:c1:69:d2:32:e4: 29:65:26:09:bf:e1:c2:ce:27:7c:16:27:fd:ef:a5: b2:2f:4e:e3:00:de:b4:4b:fc:f9:a5:b9:cd:f9:bc: 7b:50:30:f5:51:3a:bf:9f:e3:2e:15:8c:eb:9d:ed: 5d:f0:90:1f:97:cb:7d:61:ee:67:fd:95:c2:39:2b: da:db:50:71:a5:0a:90:c7:35:74:dc:3b:9a:af:c9: ee:e9:5f:8f:30:ab:6a:20:44:eb:03:3c:7c:12:fc: cf:67:e2:7c:fc:67:db:b3:e3:43:84:53:97:ac:54: c0:cd:7a:32:61:fa:cf:0d:31:48:e3:5d:e6:49:6f: 14:3d:8c:45:d3:e9:8c:6b:75:f6:01:0b:68:10:b6: 11:cc:3c:5c:dd:ca:44:30:78:58:03:dd:79:b3:89: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.138.0/24 IPv6: 2a10:bf40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211152 Signature Algorithm: sha256WithRSAEncryption 36:76:28:f8:d6:29:9b:67:13:eb:e2:dd:6d:77:21:59:7d:6d: 39:4b:bb:6d:40:ed:16:3e:01:63:32:87:13:c2:75:58:66:5d: b7:7f:6b:75:73:55:46:0d:41:d9:86:a2:0a:b7:6b:bc:d5:5b: 4d:11:3f:d0:9a:17:77:ee:40:56:36:97:91:2e:a5:49:49:ba: d6:4a:28:c3:0f:0e:cf:59:67:be:5a:e4:3e:0f:b1:59:99:aa: 08:d3:66:bf:a2:92:3d:b6:66:e4:7c:ec:8a:07:0a:67:37:30: fb:a4:17:69:56:03:6b:19:a4:d8:90:45:77:7d:95:94:65:ea: 3f:30:10:f6:de:0b:58:b4:fe:30:24:66:8d:b2:ff:25:88:00: 11:28:93:98:39:a6:34:c1:ae:2d:00:2b:0e:af:6f:81:3a:b7: 10:f6:db:19:83:c4:63:f5:c6:3a:fa:70:3c:51:ac:7d:24:bc: 98:9a:3c:17:82:85:36:ec:b8:98:56:2a:d5:cf:17:bf:23:16: 2d:b3:e8:cf:b5:06:cb:00:fb:6a:b6:55:1a:5d:0b:da:87:e5: 94:9b:63:19:3c:38:66:43:ab:51:6c:e9:fb:4a:74:e7:ec:c5: 11:06:92:f6:49:3e:68:4f:ce:f8:df:75:7b:98:7b:bc:fb:95: ec:fc:71:54 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N0TK+wcJega4/QC4y7IuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGY0ZmE4MDc1ODc1M2IyNDNhMjE2NWVkZGVhNzVkYmVlZTgyNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hlqB/6GlcohNDNiS+Vq2At8J5Lu 0VhOmG+AbmspDd84/7aNK9qjVU6jTGkLgub01W7cw+u8UtREUQ5LOxPUG7Q0zV8L ILmRaK6c9ooDkIvSkq+1nKoggD6njfCyAxKmjyPewWnSMuQpZSYJv+HCzid8Fif9 76WyL07jAN60S/z5pbnN+bx7UDD1UTq/n+MuFYzrne1d8JAfl8t9Ye5n/ZXCOSva 21BxpQqQxzV03Duar8nu6V+PMKtqIETrAzx8EvzPZ+J8/Gfbs+NDhFOXrFTAzXoy YfrPDTFI413mSW8UPYxF0+mMa3X2AQtoELYRzDxc3cpEMHhYA915s4kA9wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFND0+oB1h1OyQ6IWXt3qddvu6CbEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2NhNWMx OS1lNDk2LTQ5ZTgtOGI5My03MmExZjM3NzE5YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvY2E1YzE5 LWU0OTYtNDllOC04YjkzLTcyYTFmMzc3MTliYi8xLzBQVDZnSFdIVTdKRG9oWmUz ZXAxMi03b0pzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuf+KMA0EAgACMAcDBQMqEL9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM40DANBgkqhkiG9w0BAQsFAAOCAQEANnYo+NYpm2cT 6+LdbXchWX1tOUu7bUDtFj4BYzKHE8J1WGZdt39rdXNVRg1B2YaiCrdrvNVbTRE/ 0JoXd+5AVjaXkS6lSUm61kooww8Oz1lnvlrkPg+xWZmqCNNmv6KSPbZm5HzsigcK Zzcw+6QXaVYDaxmk2JBFd32VlGXqPzAQ9t4LWLT+MCRmjbL/JYgAESiTmDmmNMGu LQArDq9vgTq3EPbbGYPEY/XGOvpwPFGsfSS8mJo8F4KFNuy4mFYq1c8XvyMWLbPo z7UGywD7arZVGl0L2ofllJtjGTw4ZkOrUWzp+0p05+zFEQaS9kk+aE/O+N91e5h7 vPuV7PxxVA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:16 2026 by rpki-client