This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.cer (raw, json) Hash identifier: Iu1AspcyVgdk/bKvNKJEEKXkJvH9g8rz9QSF+/Saylc= Subject key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA72AC5BB3287A59D72013BD2B34FB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8351 IP: 194.59.16.0/23 IP: 195.98.192.0/19 IP: 213.254.32.0/19 IP: 2a02:320::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2a:c5:bb:32:87:a5:9d:72:01:3b:d2:b3:4f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d130117ae1cdc2df1c58816e00e5451f87efb370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:61:a0:0f:19:3b:ef:7d:79:6a:b2:dc:90: 10:19:63:ee:aa:04:78:17:a8:fd:28:9c:c1:f7:09: 8b:5b:c5:36:f8:ce:9e:89:6d:bb:1f:f5:84:10:2e: 59:e2:3b:1e:23:9d:b7:3a:35:1b:d1:d2:78:ba:0c: e8:d9:ca:6e:25:b4:4f:79:99:fa:a3:29:1c:6c:88: 83:b0:16:68:54:c6:76:a9:7f:0c:42:20:d1:8f:ae: 36:4b:c3:32:18:bc:08:59:4d:ae:fd:76:e3:d8:92: ae:34:d6:87:ce:88:b4:80:4f:f2:26:06:ff:73:94: 82:aa:77:f0:7c:24:de:2e:1d:bd:93:3a:79:4f:78: ed:46:79:93:6b:6b:df:6c:82:9a:88:3c:15:17:cd: 35:c3:a7:4e:ac:b5:a4:9d:f4:e6:8c:61:d1:bd:bd: 5f:52:5b:53:07:37:75:78:ac:2c:f1:6d:68:7d:91: 66:17:a6:f5:b3:35:e6:bd:9b:b1:6c:e5:da:f9:35: 76:db:c5:ce:e8:69:b6:d0:3f:19:f3:00:4b:6f:d2: 05:17:a1:0e:38:4b:5e:55:30:eb:f1:7c:a5:45:14: dd:30:a2:5e:5b:d9:ec:bd:a3:a5:99:4c:d6:7d:ed: 6f:ed:0a:3b:b2:08:a9:3d:96:d0:08:87:e7:8f:4b: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.16.0/23 195.98.192.0/19 213.254.32.0/19 IPv6: 2a02:320::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8351 Signature Algorithm: sha256WithRSAEncryption 2b:bf:59:4f:d3:11:74:2a:58:0d:8b:53:76:ac:c7:b3:34:3e: 35:2b:7c:29:7b:1d:bb:27:3a:01:c2:3f:fa:54:5b:18:1f:e0: 56:fd:98:f7:d6:ef:3e:f1:df:3d:5e:0a:8f:7c:99:15:a9:70: 5a:6a:8a:4a:ce:fa:49:b0:f2:4f:a6:42:d9:5f:41:ba:11:3f: 2e:8d:1a:b4:2f:47:9f:99:06:1b:21:2a:bf:09:cc:be:74:56: 03:61:6b:94:3f:3f:2c:1b:bb:36:40:8a:35:82:cb:6d:86:e5: bc:db:ae:a7:46:1d:d5:6f:e8:29:64:0c:17:86:61:48:43:8f: 96:9d:2d:44:9c:a2:6b:11:50:39:0d:53:2a:87:1b:34:a1:31: 43:3e:cf:78:90:91:d8:2c:a4:e5:3b:c0:5f:b8:d7:6f:d5:90: 0f:3d:d4:38:a4:f7:bb:46:94:f2:ec:d5:97:13:ab:4b:d2:d3: 81:74:fd:e3:5d:4a:de:67:69:6e:25:4e:5a:18:76:32:88:71: 7f:7a:59:4d:fe:8b:2f:05:52:cb:ed:fa:39:b8:76:58:e9:8c: 8c:c3:c9:d6:e4:53:62:94:28:ec:38:2f:b9:48:6f:b3:cc:00: 38:75:b7:61:e2:c3:15:48:94:61:b7:4f:2a:54:c7:f5:02:7d: 20:fa:e5:43 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt+pyrFuzKHpZ1yATvSs0+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTMwMTE3YWUxY2RjMmRmMWM1ODgxNmUwMGU1NDUxZjg3ZWZiMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY5hoA8ZO+99eWqy3JAQGWPuqgR4 F6j9KJzB9wmLW8U2+M6eiW27H/WEEC5Z4jseI523OjUb0dJ4ugzo2cpuJbRPeZn6 oykcbIiDsBZoVMZ2qX8MQiDRj642S8MyGLwIWU2u/Xbj2JKuNNaHzoi0gE/yJgb/ c5SCqnfwfCTeLh29kzp5T3jtRnmTa2vfbIKaiDwVF801w6dOrLWknfTmjGHRvb1f UltTBzd1eKws8W1ofZFmF6b1szXmvZuxbOXa+TV228XO6Gm20D8Z8wBLb9IFF6EO OEteVTDr8XylRRTdMKJeW9nsvaOlmUzWfe1v7Qo7sgipPZbQCIfnj0uoFwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFNEwEXrhzcLfHFiBbgDlRR+H77NwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzEwY2U3 My0zZDRmLTQzZWYtYjY4NS0yNTBhNGQ3NzdiYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMTBjZTcz LTNkNGYtNDNlZi1iNjg1LTI1MGE0ZDc3N2JhNi8xLzBUQVJldUhOd3Q4Y1dJRnVB T1ZGSDRmdnMzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBwjsQAwQFw2LAAwQF1f4gMA0EAgACMAcDBQMq AgMgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiCfMA0GCSqGSIb3DQEBCwUAA4IB AQArv1lP0xF0KlgNi1N2rMezND41K3wpex27JzoBwj/6VFsYH+BW/Zj31u8+8d89 XgqPfJkVqXBaaopKzvpJsPJPpkLZX0G6ET8ujRq0L0efmQYbISq/Ccy+dFYDYWuU Pz8sG7s2QIo1gstthuW8266nRh3Vb+gpZAwXhmFIQ4+WnS1EnKJrEVA5DVMqhxs0 oTFDPs94kJHYLKTlO8BfuNdv1ZAPPdQ4pPe7RpTy7NWXE6tL0tOBdP3jXUreZ2lu JU5aGHYyiHF/ellN/osvBVLL7fo5uHZY6YyMw8nW5FNilCjsOC+5SG+zzAA4dbdh 4sMVSJRht08qVMf1An0g+uVD -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:47 2026 by rpki-client