This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer File: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer (raw, json) Hash identifier: bpcwcXT3ke3d/N/bNMxti2P3t/FYZbbHRyHkki6ot9A= Subject key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED0CBBB17DA67EEB4BC75590B3D5FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207788 IP: 195.43.159.0/24 IP: 195.47.210.0/24 IP: 195.47.212.0/24 IP: 195.47.216.0/24 IP: 2a0f:b6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0c:bb:b1:7d:a6:7e:eb:4b:c7:55:90:b3:d5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d248185956e443b55b062200f964537bc10bc130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:a3:4b:37:7b:0a:a5:e8:e4:d1:0b:a1:36: 66:92:51:60:fb:8e:7e:ad:46:98:fb:35:0d:2b:c6: 2f:c6:2a:e5:f1:3b:6e:83:e5:91:9b:1b:3a:b1:91: d0:b3:4d:1b:ab:6d:c0:ce:58:e2:b7:34:79:2e:35: d0:48:4d:af:d5:56:f4:56:d9:67:65:97:e1:c7:0d: a2:79:7e:c4:5d:6f:73:e0:91:64:99:5a:eb:db:15: e1:a3:e7:3a:9a:e6:8a:fc:07:93:da:65:9e:cf:f8: a7:ee:bd:55:f6:9a:38:6f:13:0a:56:c7:34:66:53: f6:5e:11:7a:49:d3:4a:06:1a:e9:18:de:e7:59:60: a0:09:7e:57:44:01:9f:e6:ea:72:21:98:63:73:9f: 1c:e1:8d:89:0d:76:57:b2:c1:d2:5a:91:54:ec:f0: 02:2c:4b:80:4d:eb:6a:3b:13:e5:b3:21:60:0a:3b: 9b:84:90:be:94:40:ed:29:ca:93:04:67:38:63:ca: 72:3a:b7:a7:70:a5:a2:e7:7e:80:0a:3f:2b:43:0b: 2a:9d:63:2e:51:6f:03:70:b0:bf:17:64:a2:fc:e3: a5:d7:ca:67:98:dc:3a:ef:de:66:eb:5e:13:e8:fd: 35:0a:46:00:22:fe:26:ec:d5:7d:fc:58:99:e8:c8: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.159.0/24 195.47.210.0/24 195.47.212.0/24 195.47.216.0/24 IPv6: 2a0f:b6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207788 Signature Algorithm: sha256WithRSAEncryption 89:fd:73:24:a0:d0:fc:78:b5:b8:bc:7c:56:a5:98:33:ab:10: 71:f1:f0:38:20:d8:6d:f3:f7:d0:e4:75:2c:af:c5:ff:47:b6: 0e:45:66:95:b1:13:33:de:f7:d3:25:f4:b7:c1:b6:32:fb:e0: 02:a4:c6:00:e5:d8:de:e8:2f:e2:92:65:0b:a8:0a:e9:13:5c: fa:36:1f:f8:9d:e7:d5:b4:a0:1a:fb:19:ce:4d:8c:5c:e8:bf: 93:0a:3f:c2:01:76:95:00:70:64:07:11:b3:ce:ec:55:12:29: 48:46:98:6f:18:d3:6b:14:88:7f:84:75:91:a5:c9:9c:cc:df: aa:fa:20:9e:db:93:a5:2d:8a:87:8e:f6:88:31:b7:fa:a1:f0: 06:3b:08:2a:a7:2a:82:2b:93:59:93:39:02:da:45:0a:e4:11: 89:c9:e1:b7:5f:70:03:d2:6b:db:dd:9d:7a:91:d3:9d:f5:60: 6b:5e:79:7a:9b:4f:d6:22:a5:63:e0:53:c1:e6:30:0c:6a:45: 1b:9d:e3:24:c5:e2:9c:d4:a2:61:97:73:92:de:30:58:71:c2: 54:e8:78:ab:c7:65:a6:1a:95:4d:83:02:bd:a0:b6:c7:0c:6a: 9a:cc:e1:5b:07:ad:34:74:f0:c8:f0:5e:05:d2:09:51:22:1e: d5:21:50:5e -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt87Qy7sX2mfutLx1WQs9X9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjQ4MTg1OTU2ZTQ0M2I1NWIwNjIyMDBmOTY0NTM3YmMxMGJjMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg+jSzd7CqXo5NELoTZmklFg+45+ rUaY+zUNK8Yvxirl8Ttug+WRmxs6sZHQs00bq23AzljitzR5LjXQSE2v1Vb0Vtln ZZfhxw2ieX7EXW9z4JFkmVrr2xXho+c6muaK/AeT2mWez/in7r1V9po4bxMKVsc0 ZlP2XhF6SdNKBhrpGN7nWWCgCX5XRAGf5upyIZhjc58c4Y2JDXZXssHSWpFU7PAC LEuATetqOxPlsyFgCjubhJC+lEDtKcqTBGc4Y8pyOrencKWi536ACj8rQwsqnWMu UW8DcLC/F2Si/OOl18pnmNw6795m614T6P01CkYAIv4m7NV9/FiZ6Mh/SQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFNJIGFlW5EO1WwYiAPlkU3vBC8EwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2RlODc1 YS0wNTc2LTRhMTUtYmUyMy1hZWEwNTRjZjQzYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvZGU4NzVh LTA1NzYtNGExNS1iZTIzLWFlYTA1NGNmNDNiYi8xLzBrZ1lXVmJrUTdWYkJpSUEt V1JUZThFTHdUQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAwyufAwQAwy/SAwQAwy/UAwQAwy/YMA0EAgAC MAcDBQMqD7bAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMrrDANBgkqhkiG9w0B AQsFAAOCAQEAif1zJKDQ/Hi1uLx8VqWYM6sQcfHwOCDYbfP30OR1LK/F/0e2DkVm lbETM9730yX0t8G2MvvgAqTGAOXY3ugv4pJlC6gK6RNc+jYf+J3n1bSgGvsZzk2M XOi/kwo/wgF2lQBwZAcRs87sVRIpSEaYbxjTaxSIf4R1kaXJnMzfqvogntuTpS2K h472iDG3+qHwBjsIKqcqgiuTWZM5AtpFCuQRicnht19wA9Jr292depHTnfVga155 eptP1iKlY+BTweYwDGpFG53jJMXinNSiYZdzkt4wWHHCVOh4q8dlphqVTYMCvaC2 xwxqmszhWwetNHTwyPBeBdIJUSIe1SFQXg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:26 2026 by rpki-client