This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer (raw, json) Hash identifier: lK5FCpzuolHAxPaBzpDRicP/XaPcXrpSR71qP3a1FgU= Subject key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA483B24CD6B567DDA28792DAB9A2DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58194 IP: 91.239.176.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:83:b2:4c:d6:b5:67:dd:a2:87:92:da:b9:a2:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:f3:a8:ab:24:35:37:3a:9b:5a:86:98:1d: 52:02:35:55:25:e9:6b:24:81:29:55:33:a6:44:9c: d2:65:b1:76:ad:c9:bf:da:7d:96:ad:ed:fb:a8:da: cc:27:6c:4b:c6:3b:0c:80:64:bf:22:90:ab:51:44: 23:d8:90:26:80:da:f1:7a:a3:03:47:78:7e:8a:19: 2c:e3:b7:69:d2:05:75:a7:d6:44:75:07:c4:32:66: 87:78:c8:be:c0:44:c2:48:58:da:3d:9f:85:18:04: 9f:62:a8:b3:3b:77:0d:43:f4:3f:c4:7e:86:76:fa: 63:1e:1a:f8:63:2c:5e:dc:80:10:d1:57:ee:0b:80: ad:b4:78:cb:8b:21:41:ef:f0:d1:b1:3f:f6:d4:04: 13:02:c2:6b:68:c8:f2:89:8c:c6:ef:c1:2c:98:44: 20:0e:e6:7b:19:b6:e6:94:04:31:e7:6e:ff:95:1b: 12:e1:22:28:0c:ec:dd:c3:f3:29:f0:10:7a:60:3e: 1b:2f:2f:3b:f4:16:03:e2:cc:bf:77:f0:09:05:85: 5a:d4:ea:30:d2:fa:54:dd:ca:06:0a:46:27:e4:5e: 45:97:d8:88:66:72:18:7d:e4:de:61:7f:ca:16:44: 3b:2d:47:50:ad:d2:33:1e:95:6e:d3:7e:e7:d0:10: f0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.176.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58194 Signature Algorithm: sha256WithRSAEncryption 0a:ce:92:ce:9b:e0:27:a6:bd:58:39:db:f3:55:b1:c3:1b:19: ae:31:02:46:ac:4d:e5:e4:e5:59:06:b1:28:68:9c:f4:cc:e6: f4:3a:e6:5f:e2:57:72:fa:3d:bd:de:eb:29:d0:a9:c8:58:f7: 0c:63:02:71:6a:58:73:82:c0:d3:46:26:c8:02:6a:2d:af:6f: 6f:12:6f:de:ff:cc:37:7a:51:9e:28:f9:6e:d0:5f:ed:9e:99: 33:eb:83:bb:72:d4:8d:bd:8a:9e:da:a5:cd:02:66:2b:3d:94: 5d:05:64:0b:99:49:55:b6:97:54:0f:49:6f:6c:96:f1:bc:b2: 20:4d:3a:fe:2c:8f:ee:ea:94:52:fc:03:83:b9:fd:38:bc:34: 96:ee:75:a6:bc:91:ed:05:8c:73:e9:e1:65:08:18:ed:ae:82: 35:ba:73:8e:81:02:2b:37:42:93:49:02:9a:cb:19:4a:40:c4: 97:c3:5d:0c:22:aa:09:7f:3b:1d:cc:d5:4f:a0:62:c5:0f:52: 4f:d9:f1:2b:81:92:8d:1f:92:99:67:e3:d2:6b:cb:47:d4:ed: 34:31:70:bb:74:78:a3:f2:83:33:cf:8f:92:3e:74:56:fa:0f: 2d:5c:78:a1:dc:a2:14:74:49:7d:41:fc:17:e2:62:26:f7:37: 18:06:65:7d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pIOyTNa1Z92ih5LauaLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWM4MWM2MmQzOTQyMDMzZDBhNzQwNDRiMGM1YTRmMTEzZTQzZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLDzqKskNTc6m1qGmB1SAjVVJelr JIEpVTOmRJzSZbF2rcm/2n2Wre37qNrMJ2xLxjsMgGS/IpCrUUQj2JAmgNrxeqMD R3h+ihks47dp0gV1p9ZEdQfEMmaHeMi+wETCSFjaPZ+FGASfYqizO3cNQ/Q/xH6G dvpjHhr4Yyxe3IAQ0VfuC4CttHjLiyFB7/DRsT/21AQTAsJraMjyiYzG78EsmEQg DuZ7GbbmlAQx527/lRsS4SIoDOzdw/Mp8BB6YD4bLy879BYD4sy/d/AJBYVa1Oow 0vpU3coGCkYn5F5Fl9iIZnIYfeTeYX/KFkQ7LUdQrdIzHpVu037n0BDw8QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNHIHGLTlCAz0KdARLDFpPET5D3zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzg3Zjk3 My1lYTZlLTQ3ZGYtYjFiMC1kZjMxMzhiNDM0YzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvODdmOTcz LWVhNmUtNDdkZi1iMWIwLWRmMzEzOGI0MzRjOC8xLzBjZ2NZdE9VSURQUXAwQkVz TVdrOFJQa1BmTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW++wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDjUjANBgkqhkiG9w0BAQsFAAOCAQEACs6SzpvgJ6a9WDnb81WxwxsZrjECRqxN 5eTlWQaxKGic9Mzm9DrmX+JXcvo9vd7rKdCpyFj3DGMCcWpYc4LA00YmyAJqLa9v bxJv3v/MN3pRnij5btBf7Z6ZM+uDu3LUjb2KntqlzQJmKz2UXQVkC5lJVbaXVA9J b2yW8byyIE06/iyP7uqUUvwDg7n9OLw0lu51pryR7QWMc+nhZQgY7a6CNbpzjoEC KzdCk0kCmssZSkDEl8NdDCKqCX87HczVT6BixQ9ST9nxK4GSjR+SmWfj0mvLR9Tt NDFwu3R4o/KDM8+Pkj50VvoPLVx4odyiFHRJfUH8F+JiJvc3GAZlfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:36 2026 by rpki-client