This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer File: 0nXXqLrAR39VCd_xG5GVymDfh9o.cer (raw, json) Hash identifier: t7CjstFm5jYRh7KzGQCJH1XneJn8POK/LMXrXM+ZUkQ= Subject key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA35F1298D1B71C6F9B417F65F7CD1A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43342 AS: 208468 AS: 209483 AS: 213466 IP: 91.135.176.0/20 IP: 171.22.156.0/22 IP: 2a01:2a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5f:12:98:d1:b7:1c:6f:9b:41:7f:65:f7:cd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d275d7a8bac0477f5509dff11b9195ca60df87da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:a2:d2:44:ea:68:18:d8:5a:07:f7:9f:c9: cc:51:d3:19:0e:0d:b4:37:4f:50:44:03:ec:29:f7: ac:06:0a:d0:9d:97:77:0f:fb:c3:57:b0:8c:e0:e5: 27:30:f7:e2:fd:88:5a:0d:f2:54:31:ad:6e:77:04: 11:8b:17:e8:02:30:ae:74:90:06:fe:e8:cc:cd:0a: 6b:aa:aa:5e:e5:4f:62:bc:62:3b:04:3f:81:1e:ac: 10:86:91:c1:7f:44:4f:35:61:fa:09:8f:1c:5c:f0: bb:fb:58:ce:66:8e:1f:db:15:82:91:3c:07:c7:d0: 7c:da:4d:ab:c8:a9:0e:13:0e:a2:e8:09:d3:e0:91: 27:0c:07:52:e8:dc:ec:a8:f6:36:1f:03:93:e7:a2: b9:72:d8:ae:aa:8f:27:98:4a:00:df:d2:c3:1f:24: e3:37:4f:17:b7:b4:d4:18:9e:78:46:3c:0b:c0:71: 08:0d:d8:fb:e0:91:c3:cc:74:b3:ed:e6:13:4b:09: ec:e6:6b:50:05:3e:39:6c:79:16:66:e4:57:0a:aa: 1d:da:d5:75:cb:52:4c:84:7f:67:b0:1c:01:67:13: 3b:57:45:3b:96:9a:c4:13:da:c8:13:f9:5c:3d:ae: 91:73:6f:38:f6:75:82:47:ad:4e:a1:bd:85:31:5e: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.135.176.0/20 171.22.156.0/22 IPv6: 2a01:2a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43342 208468 209483 213466 Signature Algorithm: sha256WithRSAEncryption 44:cc:a8:6f:1d:72:ee:64:0c:11:e1:cd:05:be:59:71:85:c6: fa:6f:b2:7e:29:0b:db:62:33:0d:95:65:d5:08:df:27:39:38: b5:3a:9f:5a:d7:14:b0:26:b1:80:6e:1e:4a:8c:9f:09:e1:89: cc:66:92:e8:de:39:53:e9:34:3d:3d:2f:ab:35:76:98:df:02: 02:e1:5b:ac:e7:ea:20:d5:a9:7a:2c:4f:42:21:e0:74:16:a8: da:c9:66:f5:97:cd:9d:72:50:4e:2c:55:46:26:02:41:c8:a7: 7f:90:f9:30:52:75:98:d2:98:53:d2:ed:9b:77:21:b2:5d:8a: 84:78:8e:ab:49:0d:34:40:8b:e8:60:6e:ec:8a:36:c3:37:83: 82:b6:45:e9:11:37:0b:48:ea:7d:05:a9:b3:13:e7:5e:16:a6: 71:7a:75:4c:37:f4:ce:a4:6a:94:c6:73:98:07:f7:fa:fa:94: 0e:a4:fe:b0:33:bd:b7:db:f1:99:89:dc:74:56:b9:7b:8c:4b: 8c:27:f2:3f:3a:bb:b7:56:20:c4:fd:7a:6b:64:22:11:f2:92: 99:d2:a9:0a:83:2e:15:97:28:54:0a:de:a9:5e:25:7f:a7:86: 8b:8a:e8:15:a9:26:bb:da:62:6b:86:56:f2:16:a0:fe:1d:16: 4a:30:84:41 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt7o18SmNG3HG+bQX9l980aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjc1ZDdhOGJhYzA0NzdmNTUwOWRmZjExYjkxOTVjYTYwZGY4N2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PKi0kTqaBjYWgf3n8nMUdMZDg20 N09QRAPsKfesBgrQnZd3D/vDV7CM4OUnMPfi/YhaDfJUMa1udwQRixfoAjCudJAG /ujMzQprqqpe5U9ivGI7BD+BHqwQhpHBf0RPNWH6CY8cXPC7+1jOZo4f2xWCkTwH x9B82k2ryKkOEw6i6AnT4JEnDAdS6NzsqPY2HwOT56K5ctiuqo8nmEoA39LDHyTj N08Xt7TUGJ54RjwLwHEIDdj74JHDzHSz7eYTSwns5mtQBT45bHkWZuRXCqod2tV1 y1JMhH9nsBwBZxM7V0U7lprEE9rIE/lcPa6Rc2849nWCR61Oob2FMV7tUQIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFNJ116i6wEd/VQnf8RuRlcpg34faMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzdiZWIw NC0zMTdiLTQ0OGEtODJlZC01NjViMTQ0NzAzN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvN2JlYjA0 LTMxN2ItNDQ4YS04MmVkLTU2NWIxNDQ3MDM3Yi8xLzBuWFhxTHJBUjM5VkNkX3hH NUdWeW1EZmg5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEW4ewAwQCqxacMA0EAgACMAcDBQAqAQKgMCkG CCsGAQUFBwEIAQH/BBowGKAWMBQCAwCpTgIDAy5UAgMDMksCAwNB2jANBgkqhkiG 9w0BAQsFAAOCAQEARMyobx1y7mQMEeHNBb5ZcYXG+m+yfikL22IzDZVl1QjfJzk4 tTqfWtcUsCaxgG4eSoyfCeGJzGaS6N45U+k0PT0vqzV2mN8CAuFbrOfqINWpeixP QiHgdBao2slm9ZfNnXJQTixVRiYCQcinf5D5MFJ1mNKYU9Ltm3chsl2KhHiOq0kN NECL6GBu7Io2wzeDgrZF6RE3C0jqfQWpsxPnXhamcXp1TDf0zqRqlMZzmAf3+vqU DqT+sDO9t9vxmYncdFa5e4xLjCfyPzq7t1YgxP16a2QiEfKSmdKpCoMuFZcoVAre qV4lf6eGi4roFakmu9pia4ZW8hag/h0WSjCEQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:54 2026 by rpki-client