This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer (raw, json) Hash identifier: /1o77eyX8+cWNLiblPBNHuaVxR6jQJuHjY42prePvDM= Subject key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38826B5779F875CB75ABCBF2EAFEA0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.89.84.0/22 IP: 2a05:d600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:82:6b:57:79:f8:75:cb:75:ab:cb:f2:ea:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:a6:22:ca:8e:88:aa:29:5c:4c:9c:c3:4f: ae:9d:e7:4e:39:66:75:df:57:cd:b8:3f:27:40:f5: ac:75:f1:5e:43:a0:b3:fd:f5:b9:0b:e1:63:0f:aa: a6:4e:6c:55:9f:db:15:5d:d9:54:52:69:c2:8d:36: 79:8d:34:46:1e:0f:92:3e:d4:eb:ff:5e:f7:0b:2e: 17:3c:0e:b6:ac:ca:e4:24:87:40:99:31:f6:43:70: 50:e6:8e:b4:04:10:29:0d:a7:81:98:10:fc:08:c9: 85:69:38:73:c3:a8:0d:c0:85:33:aa:ec:6d:df:cb: 3f:bb:f2:24:31:e2:ff:f7:87:0a:20:c6:34:07:4e: 15:e9:d0:23:ec:c8:36:fd:c7:7d:88:a8:2b:9a:23: 73:8b:f3:a9:f7:e2:2f:e2:3c:83:1a:e6:10:5d:ca: 6c:3d:d8:82:2d:20:60:91:f4:2a:02:b6:20:17:c9: 6d:b1:8b:37:3d:28:6f:5d:a2:7e:07:51:3b:ca:28: 22:72:bd:d3:72:56:84:bb:a3:87:92:c7:e8:13:98: ae:77:1d:ef:d8:01:82:6c:a7:cb:ba:6b:04:69:42: df:21:80:6a:3e:26:37:b7:64:9e:a1:c0:24:7a:53: 3a:5c:fd:09:54:22:44:17:c3:37:55:76:d5:18:7c: 1b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.84.0/22 IPv6: 2a05:d600::/29 Signature Algorithm: sha256WithRSAEncryption 8f:c5:16:4a:44:06:7a:03:59:bc:b6:7e:c2:d8:3a:c1:b5:40: dc:14:af:a7:2b:eb:b5:c6:ee:6e:34:c3:30:45:21:42:ee:01: f7:82:bf:58:ff:0c:b4:ad:1d:98:db:72:39:26:cd:31:47:38: ca:77:f3:dd:89:79:3c:a6:7a:86:a4:63:60:02:b2:39:96:13: ce:35:03:5c:9c:61:71:e8:f6:50:52:84:0f:0b:cb:65:43:a8: ad:70:1e:89:8e:08:8b:d5:10:29:2f:a6:6d:51:a6:3b:7e:dd: 9f:5b:41:3a:b3:2d:02:be:c9:64:fd:c9:41:e3:db:6d:db:71: bb:13:b3:80:15:cc:08:8a:58:66:98:fb:cf:be:30:26:14:50: c2:68:ce:1a:44:6b:78:07:5c:73:a5:a9:64:e1:38:36:8d:a9: a0:2e:56:c3:0c:9d:e6:96:73:c6:49:fc:2e:6c:82:3c:93:1c: c7:51:17:45:4f:93:ac:4d:7e:13:21:ef:83:a0:38:dd:c5:6b: 66:e7:b2:d7:d2:a0:c7:3d:16:f4:2e:6c:53:05:a2:77:06:4f: a3:f6:b2:df:0a:66:16:1b:ff:ba:a8:84:3a:9a:93:a2:78:37: 52:2e:79:cb:5f:01:3b:e1:ee:f5:c9:12:43:75:bb:de:96:45: 42:3c:24:31 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OIJrV3n4dct1q8vy6v6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGY2Yjg0MzZmNjYzNGNkMzFkNzA5N2NlMjQyYTU0OTkzNWIxOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqGmIsqOiKopXEycw0+unedOOWZ1 31fNuD8nQPWsdfFeQ6Cz/fW5C+FjD6qmTmxVn9sVXdlUUmnCjTZ5jTRGHg+SPtTr /173Cy4XPA62rMrkJIdAmTH2Q3BQ5o60BBApDaeBmBD8CMmFaThzw6gNwIUzquxt 38s/u/IkMeL/94cKIMY0B04V6dAj7Mg2/cd9iKgrmiNzi/Op9+Iv4jyDGuYQXcps PdiCLSBgkfQqArYgF8ltsYs3PShvXaJ+B1E7yigicr3TclaEu6OHksfoE5iudx3v 2AGCbKfLumsEaULfIYBqPiY3t2SeocAkelM6XP0JVCJEF8M3VXbVGHwbvwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFND2uENvZjTNMdcJfOJCpUmTWxjXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzUxNGE0 Mi0wYmU4LTQ1ZTgtYTdmMC01NWRhOGVjMzYwMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvNTE0YTQy LTBiZTgtNDVlOC1hN2YwLTU1ZGE4ZWMzNjAxNC8xLzBQYTRRMjltTk0weDF3bDg0 a0tsU1pOYkdOYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVlUMA0EAgACMAcDBQMqBdYAMA0GCSqGSIb3 DQEBCwUAA4IBAQCPxRZKRAZ6A1m8tn7C2DrBtUDcFK+nK+u1xu5uNMMwRSFC7gH3 gr9Y/wy0rR2Y23I5Js0xRzjKd/PdiXk8pnqGpGNgArI5lhPONQNcnGFx6PZQUoQP C8tlQ6itcB6JjgiL1RApL6ZtUaY7ft2fW0E6sy0Cvslk/clB49tt23G7E7OAFcwI ilhmmPvPvjAmFFDCaM4aRGt4B1xzpalk4Tg2jamgLlbDDJ3mlnPGSfwubII8kxzH URdFT5OsTX4TIe+DoDjdxWtm57LX0qDHPRb0LmxTBaJ3Bk+j9rLfCmYWG/+6qIQ6 mpOieDdSLnnLXwE74e71yRJDdbvelkVCPCQx -----END CERTIFICATE-----Generated at Tue Jan 27 11:51:16 2026 by rpki-client