This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer File: 0RE68_NruSoPL72v47Zx9rn876g.cer (raw, json) Hash identifier: 57qPfovRDpIkhWqNSgEdryBOPR+6LmX6Vdn7QpSkUF4= Subject key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA57F977AE4524DCE493E7A6DDF9B79 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42333 AS: 43334 IP: 185.202.228.0/22 IP: 193.25.205.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7f:97:7a:e4:52:4d:ce:49:3e:7a:6d:df:9b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:8f:06:78:b2:a2:ef:74:e0:e1:45:7f:a5: 01:af:3e:7b:71:ad:2c:6b:9e:c6:ee:6b:bb:8f:38: fd:22:83:00:39:40:86:b8:4d:85:0a:84:ea:90:b9: 4d:05:6f:08:c1:10:66:e8:34:83:a6:a1:ab:ca:df: 37:66:4d:65:77:5d:f1:25:17:9b:fa:4f:5e:b7:e0: 4a:7a:ae:ce:23:9c:ba:c2:e7:e8:7d:7b:0c:2a:a7: 2e:0e:63:c5:10:41:01:9c:c4:28:34:30:c9:9e:19: d4:d7:18:a8:5a:2f:5e:b0:73:52:64:14:81:77:a3: e4:c6:fe:4f:6c:06:15:74:b3:1c:9e:47:3c:b9:eb: 11:9b:f7:83:2d:e3:2a:f1:65:2a:2f:b4:47:b0:fe: 23:2a:f1:eb:65:17:35:00:19:f4:5d:05:f0:60:66: 1e:57:fc:61:c0:05:74:8c:17:f6:9a:e1:b1:e9:76: 11:5d:4f:c7:6b:13:dc:d0:41:75:b8:fe:e0:5e:23: 7a:c0:57:cc:30:1c:ae:cb:dc:89:4b:c6:f4:4d:9a: 69:1e:43:b8:df:9f:5a:89:25:33:5f:f3:03:da:7d: fc:a0:a2:f3:61:a1:85:88:13:ed:7f:f2:48:5a:08: f4:5f:3e:c6:e7:c8:8a:0b:65:6d:18:11:b8:22:97: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.228.0/22 193.25.205.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42333 43334 Signature Algorithm: sha256WithRSAEncryption 93:68:06:67:1b:c2:85:4d:a3:d1:4e:3f:b6:26:fa:11:02:01: 7a:84:9a:51:ab:e1:e1:3f:63:c0:59:be:55:d5:8c:17:90:44: d1:81:06:ec:56:e3:58:4d:7f:ed:5b:31:50:17:4e:32:43:f7: 88:41:9f:a3:12:80:72:3a:f4:21:66:4e:ed:e2:1d:d4:ec:1a: 85:d4:73:1c:1e:a3:4d:44:33:bf:ac:40:d0:cd:27:5a:35:69: 08:62:c5:7b:cf:87:d9:68:38:02:60:ba:b2:e8:52:f1:bc:b7: 79:98:cc:c4:83:70:fe:86:bc:93:74:40:4f:4a:1c:e2:c5:72: ac:6b:54:6a:d4:05:02:d7:eb:fd:38:10:f7:95:6d:46:54:3d: 14:7e:39:91:31:41:c7:ae:e8:02:17:3f:f9:a4:69:da:47:2b: 5c:49:fa:91:c9:90:3e:f4:51:28:fc:80:cb:9e:a6:ba:a6:70: e1:c8:fd:57:21:4d:4d:f8:ba:5c:7c:db:ef:87:13:d2:a6:b6: f2:5f:cc:ae:08:2b:34:e2:34:4d:fc:84:3d:de:c7:7f:10:86: 6d:87:e8:d3:b0:d4:c8:2f:77:6c:3d:c1:74:73:e4:b6:00:7a: 77:dc:c6:81:68:b2:c3:44:a0:3d:f2:f4:03:34:53:b3:78:88: b1:34:6d:a6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt+pX+XeuRSTc5JPnpt35t5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTExM2FmM2YzNmJiOTJhMGYyZmJkYWZlM2I2NzFmNmI5ZmNlZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS+PBniyou904OFFf6UBrz57ca0s a57G7mu7jzj9IoMAOUCGuE2FCoTqkLlNBW8IwRBm6DSDpqGryt83Zk1ld13xJReb +k9et+BKeq7OI5y6wufofXsMKqcuDmPFEEEBnMQoNDDJnhnU1xioWi9esHNSZBSB d6Pkxv5PbAYVdLMcnkc8uesRm/eDLeMq8WUqL7RHsP4jKvHrZRc1ABn0XQXwYGYe V/xhwAV0jBf2muGx6XYRXU/HaxPc0EF1uP7gXiN6wFfMMByuy9yJS8b0TZppHkO4 359aiSUzX/MD2n38oKLzYaGFiBPtf/JIWgj0Xz7G58iKC2VtGBG4IpeReQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFNEROvPza7kqDy+9r+O2cfa5/O+oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzg4Zjky Ni04OTVjLTQ2Y2UtOWU2Yi0wMGNlOWYwOGFkODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvODhmOTI2 LTg5NWMtNDZjZS05ZTZiLTAwY2U5ZjA4YWQ4My8xLzBSRTY4X05ydVNvUEw3MnY0 N1p4OXJuODc2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCucrkAwQAwRnNMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwClXQIDAKlGMA0GCSqGSIb3DQEBCwUAA4IBAQCTaAZnG8KFTaPRTj+2 JvoRAgF6hJpRq+HhP2PAWb5V1YwXkETRgQbsVuNYTX/tWzFQF04yQ/eIQZ+jEoBy OvQhZk7t4h3U7BqF1HMcHqNNRDO/rEDQzSdaNWkIYsV7z4fZaDgCYLqy6FLxvLd5 mMzEg3D+hryTdEBPShzixXKsa1Rq1AUC1+v9OBD3lW1GVD0UfjmRMUHHrugCFz/5 pGnaRytcSfqRyZA+9FEo/IDLnqa6pnDhyP1XIU1N+LpcfNvvhxPSprbyX8yuCCs0 4jRN/IQ93sd/EIZth+jTsNTIL3dsPcF0c+S2AHp33MaBaLLDRKA98vQDNFOzeIix NG2m -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:55 2026 by rpki-client