This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer (raw, json) Hash identifier: 39NGgxtrpFWsTnSWB1wGN+46GjB4/kGY+ZWZBCCJlh0= Subject key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13A0E515BF694745B67F9D05A71086 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.234.48.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a0:e5:15:bf:69:47:45:b6:7f:9d:05:a7:10:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2261dee6d54dd536ef700f2d9d8197c86093966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:66:fa:c4:c9:6b:11:d0:de:3d:d3:0d:85: ef:20:68:d0:e7:e8:c8:e6:0b:f5:7c:60:a6:59:37: c4:f4:13:68:d1:a0:c5:e8:b7:eb:8a:ec:ed:f2:03: 95:4b:34:c3:e9:c9:d3:5b:0a:62:24:1c:b1:5c:81: da:2a:f2:8e:e7:17:36:6c:da:db:41:7c:35:4f:20: a1:31:53:65:1d:6f:e9:b9:6f:6c:8c:ac:82:72:61: bd:9f:35:32:9f:1a:c0:f7:83:84:e4:02:1f:76:92: 64:78:17:cf:ba:cf:bb:85:f7:75:d6:2a:ce:69:b0: 06:f2:b0:43:6c:e9:df:fa:6f:b0:52:0e:f7:41:9d: ca:84:a4:ef:93:b5:14:b0:4f:e8:d6:64:1c:01:88: 13:3d:64:8a:4a:de:f4:c1:be:aa:45:de:e9:07:5b: ee:3b:4d:be:9f:08:6b:9d:09:48:97:27:a8:90:db: df:f6:b0:fa:d6:3b:76:fb:8e:56:0b:4a:fa:95:e9: 14:bd:ec:e0:49:4a:ee:02:23:a2:e8:e4:35:56:91: 65:6a:f2:b2:cf:59:7f:6d:a8:90:96:96:d3:47:86: 3d:6b:0c:94:46:22:ae:d6:b3:d6:84:63:c5:48:fa: 47:18:5d:2d:2a:68:ce:8d:f9:73:bf:cf:64:d5:37: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.48.0/24 Signature Algorithm: sha256WithRSAEncryption 74:19:08:b5:32:42:67:3e:6d:97:69:05:62:66:2e:48:66:a0: d6:96:ef:05:aa:ed:28:1e:5a:d8:83:13:8c:f7:1c:ee:82:f0: d1:2b:ee:2f:2e:bd:0a:a3:7e:9b:67:27:16:1b:8c:f4:52:8c: fd:2b:9e:a7:b5:24:bb:6a:43:6f:00:ba:55:5a:69:f9:d8:14: f3:e3:9c:a4:1a:40:b9:3d:ea:b1:4a:3e:73:ba:11:ab:c5:fd: 34:0e:8c:41:35:d0:95:35:bd:5d:d5:44:71:99:a5:f1:73:55: 96:f4:0a:70:b8:2a:2d:c7:ae:dc:76:2f:97:39:c7:1b:da:4a: f0:95:51:ba:69:1a:0b:7b:80:38:27:14:6c:23:60:0a:c3:06: 12:e6:bd:9d:d2:cb:36:81:a6:cc:e6:4f:7c:1a:2b:f6:a0:49: c3:92:a3:df:35:bc:c9:72:09:58:d9:b7:71:43:a5:d3:d2:fd: c8:3c:b9:30:c6:f6:76:d7:cf:f4:ef:13:3b:d6:74:bd:b6:bf: 7f:30:84:20:da:18:49:c1:6f:50:66:77:38:81:b4:78:d2:a7: c1:0f:72:78:b8:27:bf:21:8a:cd:5d:cc:bf:63:f6:66:59:f3: fa:3d:7a:34:ac:3a:dc:6a:da:03:38:7f:fd:e7:05:22:75:7e: 7e:2a:86:76 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/E6DlFb9pR0W2f50FpxCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjI2MWRlZTZkNTRkZDUzNmVmNzAwZjJkOWQ4MTk3Yzg2MDkzOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaxm+sTJaxHQ3j3TDYXvIGjQ5+jI 5gv1fGCmWTfE9BNo0aDF6Lfriuzt8gOVSzTD6cnTWwpiJByxXIHaKvKO5xc2bNrb QXw1TyChMVNlHW/puW9sjKyCcmG9nzUynxrA94OE5AIfdpJkeBfPus+7hfd11irO abAG8rBDbOnf+m+wUg73QZ3KhKTvk7UUsE/o1mQcAYgTPWSKSt70wb6qRd7pB1vu O02+nwhrnQlIlyeokNvf9rD61jt2+45WC0r6lekUvezgSUruAiOi6OQ1VpFlavKy z1l/baiQlpbTR4Y9awyURiKu1rPWhGPFSPpHGF0tKmjOjflzv89k1TfzuwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNImHe5tVN1TbvcA8tnYGXyGCTlmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2JhY2Vj My00OTFiLTQ0MGItOGI0OC02ZjBmNDZmNGQ0YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvYmFjZWMz LTQ5MWItNDQwYi04YjQ4LTZmMGY0NmY0ZDRiNC8xLzBpWWQ3bTFVM1ZOdTl3RHky ZGdaZklZSk9XWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw+owMA0GCSqGSIb3DQEBCwUAA4IBAQB0GQi1 MkJnPm2XaQViZi5IZqDWlu8Fqu0oHlrYgxOM9xzugvDRK+4vLr0Ko36bZycWG4z0 Uoz9K56ntSS7akNvALpVWmn52BTz45ykGkC5PeqxSj5zuhGrxf00DoxBNdCVNb1d 1URxmaXxc1WW9ApwuCotx67cdi+XOccb2krwlVG6aRoLe4A4JxRsI2AKwwYS5r2d 0ss2gabM5k98Giv2oEnDkqPfNbzJcglY2bdxQ6XT0v3IPLkwxvZ218/07xM71nS9 tr9/MIQg2hhJwW9QZnc4gbR40qfBD3J4uCe/IYrNXcy/Y/ZmWfP6PXo0rDrcatoD OH/95wUidX5+KoZ2 -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:27 2026 by rpki-client