This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer File: 0d2oMnacMWgfglaFFHNorzoR9vg.cer (raw, json) Hash identifier: Mk1gGElAFbtfi+ZrE0FrxJUy2xye76AsXI+GrB8/rqs= Subject key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D14C0B8A770A30E5E9D2748E1BDBC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57300 IP: 91.109.168.0/21 IP: 95.87.120.0/21 IP: 185.73.164.0/22 IP: 2a05:3ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:14:c0:b8:a7:70:a3:0e:5e:9d:27:48:e1:bd:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1dda832769c31681f825685147368af3a11f6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ba:a2:7f:6e:f0:c9:5a:a2:26:48:7c:78:45: 8f:77:89:90:d3:b5:8f:b2:85:e3:02:d4:12:89:c7: 39:b7:ad:43:d0:ec:a8:aa:5d:1a:4c:70:f5:4b:26: 9d:08:1c:4a:55:72:b3:73:af:fd:29:c2:0b:2c:89: 7d:bf:de:06:20:5c:be:b9:42:2b:ac:36:7d:0b:76: 36:ba:7b:61:92:79:94:77:29:a1:cb:8f:f9:28:ef: ae:78:0d:4a:f0:f7:27:0c:1b:36:a7:79:90:19:fe: 1d:9b:a2:63:30:a5:fe:b0:01:a3:90:83:01:1b:7d: 55:b3:c9:c4:f4:30:8b:cf:76:2d:f1:4b:5e:44:28: a6:0e:8a:96:60:5f:79:37:59:10:dc:fd:8b:70:dc: 18:47:d2:c6:1e:37:ac:7b:f0:5f:3e:56:5d:8f:bb: da:24:02:ea:34:f2:c6:55:5a:b1:e1:00:2e:d9:80: a7:aa:07:f1:52:1e:70:74:17:d5:24:f4:98:af:4d: ea:94:77:78:e8:e1:8a:e9:e3:79:c6:d4:5d:5b:b1: 95:57:86:c6:45:c9:1d:71:65:41:ac:e4:dc:b8:f7: 7b:95:76:50:e6:48:a7:c4:65:22:46:2b:5b:c4:cc: 5c:a1:d8:d5:50:d5:29:ed:e4:99:bd:5b:08:7a:8d: 77:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.168.0/21 95.87.120.0/21 185.73.164.0/22 IPv6: 2a05:3ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57300 Signature Algorithm: sha256WithRSAEncryption 4c:b4:9a:20:78:eb:45:c4:2c:f8:78:96:bf:c3:36:33:f3:8e: 97:e8:e4:6d:b7:04:b7:15:69:ea:8c:20:22:4b:27:44:16:cd: 31:22:8b:0b:0d:f6:6b:91:d3:61:32:c7:27:5d:d4:f8:d8:e1: 3b:0b:21:30:d3:a3:0d:27:cf:34:36:32:ef:ae:74:3e:5c:dd: d2:de:52:e8:7c:97:2f:c5:4d:7a:81:a8:77:ca:a4:03:95:fd: 3c:1f:2c:e4:ef:f9:6d:89:e9:34:cd:74:a5:f1:2c:a9:7c:32: 9a:88:7e:b6:02:56:8d:f8:f6:57:20:4b:04:93:09:c0:1e:e0: 5f:f6:24:6e:39:a8:85:2b:4e:f2:53:c1:89:e8:72:eb:7f:13: 47:e7:d8:55:c4:75:da:2f:e4:b5:5a:f5:5b:19:03:45:77:43: 08:f7:12:f0:ac:55:a2:87:7b:f9:35:bf:4b:be:8b:61:77:87: 06:14:16:68:a7:5c:51:1b:60:4e:0f:cb:a6:0c:f1:9c:55:fd: bb:a7:64:6e:38:2f:4a:5c:27:3a:ba:42:92:ce:df:58:6b:1f: 4c:75:ff:bc:39:bf:5c:1e:60:ec:2f:6e:94:da:4d:36:3c:f2: 50:63:00:8d:db:15:e9:e0:72:5e:b8:1c:79:81:92:58:77:88: 89:4b:86:f8 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9XRTAuKdwow5enSdI4b28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWRkYTgzMjc2OWMzMTY4MWY4MjU2ODUxNDczNjhhZjNhMTFmNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrqif27wyVqiJkh8eEWPd4mQ07WP soXjAtQSicc5t61D0Oyoql0aTHD1SyadCBxKVXKzc6/9KcILLIl9v94GIFy+uUIr rDZ9C3Y2unthknmUdymhy4/5KO+ueA1K8PcnDBs2p3mQGf4dm6JjMKX+sAGjkIMB G31Vs8nE9DCLz3Yt8UteRCimDoqWYF95N1kQ3P2LcNwYR9LGHjese/BfPlZdj7va JALqNPLGVVqx4QAu2YCnqgfxUh5wdBfVJPSYr03qlHd46OGK6eN5xtRdW7GVV4bG RckdcWVBrOTcuPd7lXZQ5kinxGUiRitbxMxcodjVUNUp7eSZvVsIeo13ZQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNHdqDJ2nDFoH4JWhRRzaK86Efb4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzVhNmQz Yy0xN2RhLTQ0ZDMtYTQwMi04NjIzNmJhYzEzMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWE2ZDNj LTE3ZGEtNDRkMy1hNDAyLTg2MjM2YmFjMTMwOC8xLzBkMm9NbmFjTVdnZmdsYUZG SE5vcnpvUjl2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDW22oAwQDX1d4AwQCuUmkMA0EAgACMAcDBQMq BT7AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDf1DANBgkqhkiG9w0BAQsFAAOC AQEATLSaIHjrRcQs+HiWv8M2M/OOl+jkbbcEtxVp6owgIksnRBbNMSKLCw32a5HT YTLHJ13U+NjhOwshMNOjDSfPNDYy7650Plzd0t5S6HyXL8VNeoGod8qkA5X9PB8s 5O/5bYnpNM10pfEsqXwymoh+tgJWjfj2VyBLBJMJwB7gX/YkbjmohStO8lPBiehy 638TR+fYVcR12i/ktVr1WxkDRXdDCPcS8KxVood7+TW/S76LYXeHBhQWaKdcURtg Tg/LpgzxnFX9u6dkbjgvSlwnOrpCks7fWGsfTHX/vDm/XB5g7C9ulNpNNjzyUGMA jdsV6eByXrgceYGSWHeIiUuG+A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:43 2026 by rpki-client