This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer File: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer (raw, json) Hash identifier: VoELptOytba6KdjyJePNhTvdhdJPxGmgesMusKyVyeE= Subject key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37BD4CD0070E660AA2B4205558B21E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200742 IP: 185.97.124.0/22 IP: 2a06:600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:bd:4c:d0:07:0e:66:0a:a2:b4:20:55:58:b2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:d1:79:2b:d3:ed:55:7b:53:47:6b:ee:49: 35:9a:e3:20:3f:7f:a4:91:62:6f:d0:8e:f0:52:54: df:a8:5d:75:1a:20:28:8a:68:f2:ac:fd:eb:40:5e: 9c:bb:f0:05:cb:bc:d4:ff:ea:51:30:22:67:c4:b4: e6:c9:d2:09:42:ea:60:4d:95:59:31:2b:a9:f3:83: 5c:d2:4e:e3:54:c0:6c:88:9d:fe:d7:59:41:79:2d: 5e:63:cd:c3:da:d8:e6:a9:c8:2c:e4:fb:72:e4:ae: 3c:57:44:98:8c:45:5f:d0:d9:6c:1a:0b:dd:1d:ca: c0:89:26:34:9d:ba:0e:a1:cf:61:2e:9b:e2:ee:91: f7:6c:a4:49:2a:9e:72:b5:63:22:a1:85:22:f1:57: a7:4f:22:f0:ae:b6:28:9d:f5:1a:2e:1d:55:a5:c7: 37:12:22:5f:c6:1a:b3:3a:0c:a9:cf:80:3c:e4:09: 49:a6:d6:71:b0:5a:1d:d7:26:1a:4c:4b:1d:4f:6c: 14:dd:1c:12:dc:ce:30:fd:7e:b1:da:70:aa:56:ae: 63:01:3f:93:9f:08:30:db:d8:74:93:7f:25:44:ec: 0d:0f:c7:ad:f5:f7:4b:fc:16:82:f1:1d:86:c3:b9: 44:50:7f:04:a1:5f:ae:b7:6b:ca:25:f2:36:8e:2a: f4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.124.0/22 IPv6: 2a06:600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200742 Signature Algorithm: sha256WithRSAEncryption 50:b6:ad:ba:a8:ed:6e:61:d7:94:89:6c:1c:b0:1c:ab:9a:ef: 4c:84:e9:17:e0:bb:e7:18:f8:ca:77:9c:34:69:e3:44:37:19: 06:25:69:ae:d7:07:70:65:08:fa:68:7e:79:0d:73:b2:16:95: fb:9e:ba:63:1c:64:bb:42:f3:3f:b3:af:d6:a8:f4:46:df:db: 12:87:ca:ad:9c:2e:d6:92:51:2c:7b:7c:ed:22:c6:06:e4:6d: b1:02:19:97:06:a1:01:f8:7e:b8:dd:b9:5d:56:d5:6e:e2:23: ac:3a:58:42:77:d4:8a:11:99:9d:c2:3c:b0:27:27:a2:82:67: 94:5e:5e:75:2f:79:c3:68:f3:4a:b8:36:44:d6:f8:3f:73:47: c6:4d:d2:03:f4:ac:24:37:ce:c1:b4:3c:65:14:1f:27:e9:3a: 29:13:c2:d3:67:e3:6b:00:06:b9:4b:a9:fb:6d:29:ed:65:09: 27:01:19:ee:7e:09:9c:87:64:b8:b5:11:2d:cd:e8:c1:d7:7c: b0:ef:17:9f:29:c2:19:ee:bc:42:5e:6c:f3:e5:31:be:ed:82: 24:a4:d7:2c:ee:bb:f7:8d:4f:3b:0a:04:b9:a5:50:92:f8:96: ed:df:ec:56:54:7b:8b:e4:51:9b:52:1d:84:32:87:c7:8b:48: 9e:75:19:8b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N71M0AcOZgqitCBVWLIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTBjODhkODJkMmZhYzgyMjAzZDQyYTI0MmQ2ZWI3NjNkMTNiYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtovReSvT7VV7U0dr7kk1muMgP3+k kWJv0I7wUlTfqF11GiAoimjyrP3rQF6cu/AFy7zU/+pRMCJnxLTmydIJQupgTZVZ MSup84Nc0k7jVMBsiJ3+11lBeS1eY83D2tjmqcgs5Pty5K48V0SYjEVf0NlsGgvd HcrAiSY0nboOoc9hLpvi7pH3bKRJKp5ytWMioYUi8VenTyLwrrYonfUaLh1Vpcc3 EiJfxhqzOgypz4A85AlJptZxsFod1yYaTEsdT2wU3RwS3M4w/X6x2nCqVq5jAT+T nwgw29h0k38lROwND8et9fdL/BaC8R2Gw7lEUH8EoV+ut2vKJfI2jir0YwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNEMiNgtL6yCID1CokLW63Y9E7v4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzhlZDAx OC0wOGYzLTQ3NzctOWRkNC1kZTI0NWFmNGZhY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvOGVkMDE4 LTA4ZjMtNDc3Ny05ZGQ0LWRlMjQ1YWY0ZmFjYi8xLzBReUkyQzB2cklJZ1BVS2lR dGJyZGowVHVfZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWF8MA0EAgACMAcDBQMqBgYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMQJjANBgkqhkiG9w0BAQsFAAOCAQEAULatuqjtbmHX lIlsHLAcq5rvTITpF+C75xj4ynecNGnjRDcZBiVprtcHcGUI+mh+eQ1zshaV+566 Yxxku0LzP7Ov1qj0Rt/bEofKrZwu1pJRLHt87SLGBuRtsQIZlwahAfh+uN25XVbV buIjrDpYQnfUihGZncI8sCcnooJnlF5edS95w2jzSrg2RNb4P3NHxk3SA/SsJDfO wbQ8ZRQfJ+k6KRPC02fjawAGuUup+20p7WUJJwEZ7n4JnIdkuLURLc3owdd8sO8X nynCGe68Ql5s8+Uxvu2CJKTXLO67941POwoEuaVQkviW7d/sVlR7i+RRm1IdhDKH x4tInnUZiw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:07 2026 by rpki-client