This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer (raw, json) Hash identifier: 5VyHG4l0S55t8GMSr90h3NQDVfFWmPMcztUBcW98kDk= Subject key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB1854F2C51010FD7ACA5565CD8227 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43487 IP: 91.240.180.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:18:54:f2:c5:10:10:fd:7a:ca:55:65:cd:82:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:d3:6a:78:c7:e8:d2:ba:87:29:5a:8f:62: ae:34:d1:b3:5d:ae:0a:37:12:53:1f:8a:0b:29:f9: 1e:35:2d:e6:43:bd:97:8e:bc:80:1a:df:32:b2:7f: 73:9a:4e:40:f4:42:7e:ab:18:57:52:dd:2b:83:2d: 45:cb:32:ac:05:76:ca:9b:c0:ec:e3:fd:23:d1:71: af:56:73:95:01:56:47:e6:d9:8c:b5:4c:4d:bf:09: 26:71:ec:f3:11:1f:34:da:f1:be:94:2e:c6:bf:1a: 45:aa:30:f8:96:b0:3c:68:be:32:3c:cf:fe:f6:79: 55:bf:b8:73:7d:f8:0e:c4:22:4c:ee:8b:d1:64:73: 0a:20:24:39:af:b1:74:06:4c:b7:ed:51:aa:d4:d7: 64:81:1d:22:d5:51:5d:0f:66:ab:44:7f:47:f9:7f: eb:45:be:51:26:6a:8f:06:73:42:28:33:c5:8f:eb: dd:d3:e1:c0:5e:f3:2b:20:50:c9:ee:4d:95:0d:79: f3:68:d8:71:b2:6e:89:53:8d:2a:03:7e:0d:44:23: e8:c9:91:ef:68:62:ea:6a:6e:1c:a0:52:67:23:51: 4c:4d:51:b9:3e:55:3e:68:ee:44:e2:e1:96:e3:6d: 9b:3c:cb:f1:ff:9a:ee:5b:3e:38:aa:f4:b3:ab:17: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43487 Signature Algorithm: sha256WithRSAEncryption 4b:e0:94:e8:90:0b:cb:81:72:e1:3b:9e:ad:84:16:5a:11:77: d9:25:30:5a:c4:dc:6a:73:87:85:62:8b:10:00:46:5e:85:08: d9:47:f3:c7:f9:cb:ed:7b:d4:7c:34:38:85:c1:0e:eb:29:51: f8:e7:da:90:ee:53:3d:1b:50:6a:5c:3c:2f:e0:26:f6:5c:69: be:bd:7d:b2:8f:32:85:05:f7:9e:5e:41:21:cb:b6:ca:27:5b: 0f:fe:05:28:d6:43:b5:d9:99:87:5b:01:77:ec:ee:3b:b1:8c: ba:4a:d2:47:58:8f:63:6b:d5:3d:79:63:dc:0a:08:66:f6:c7: e4:1e:1e:ea:33:2d:59:0a:37:85:32:2a:20:1e:12:c4:e8:e2: 89:22:bb:1e:e0:3e:8b:aa:a2:f0:3f:86:d5:b2:9c:9b:29:f6: 0e:39:db:f0:30:b4:f7:13:7f:9b:73:c6:b6:de:db:92:c8:fb: 83:ba:a2:00:e4:5e:e5:c0:6c:ba:05:df:10:15:5a:91:64:08: 43:5c:2a:eb:2c:d3:90:25:09:58:ea:f3:00:42:88:83:15:9b: c4:fb:44:7f:ff:6f:3c:c3:7f:47:83:d7:b1:8d:bc:73:a3:8c: c6:77:2c:31:4e:e5:2f:32:f3:e2:8e:57:65:b4:75:cb:a2:0e: a5:2b:fc:b2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt26xhU8sUQEP16ylVlzYInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmIzNmFkMjhlNTIxZWRhYjRiNGRlYTM0OWEyNzc3MmQ0YjJhN2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthTTanjH6NK6hylaj2KuNNGzXa4K NxJTH4oLKfkeNS3mQ72XjryAGt8ysn9zmk5A9EJ+qxhXUt0rgy1FyzKsBXbKm8Ds 4/0j0XGvVnOVAVZH5tmMtUxNvwkmcezzER802vG+lC7GvxpFqjD4lrA8aL4yPM/+ 9nlVv7hzffgOxCJM7ovRZHMKICQ5r7F0Bky37VGq1NdkgR0i1VFdD2arRH9H+X/r Rb5RJmqPBnNCKDPFj+vd0+HAXvMrIFDJ7k2VDXnzaNhxsm6JU40qA34NRCPoyZHv aGLqam4coFJnI1FMTVG5PlU+aO5E4uGW422bPMvx/5ruWz44qvSzqxcbXwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNKzatKOUh7atLTeo0mid3LUsqe+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzNhOWEw Yi1kNDI0LTRlY2EtYTkzOC05MmE4NzdiYjE5ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvM2E5YTBi LWQ0MjQtNGVjYS1hOTM4LTkyYTg3N2JiMTlmNy8xLzByTnEwbzVTSHRxMHRONmpT YUozY3RTeXA3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW/C0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCp3zANBgkqhkiG9w0BAQsFAAOCAQEAS+CU6JALy4Fy4TuerYQWWhF32SUwWsTc anOHhWKLEABGXoUI2Ufzx/nL7XvUfDQ4hcEO6ylR+OfakO5TPRtQalw8L+Am9lxp vr19so8yhQX3nl5BIcu2yidbD/4FKNZDtdmZh1sBd+zuO7GMukrSR1iPY2vVPXlj 3AoIZvbH5B4e6jMtWQo3hTIqIB4SxOjiiSK7HuA+i6qi8D+G1bKcmyn2Djnb8DC0 9xN/m3PGtt7bksj7g7qiAORe5cBsugXfEBVakWQIQ1wq6yzTkCUJWOrzAEKIgxWb xPtEf/9vPMN/R4PXsY28c6OMxncsMU7lLzLz4o5XZbR1y6IOpSv8sg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:30 2026 by rpki-client