This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer File: 0tiRsOMo58hWrUt6B2TYLYVgltY.cer (raw, json) Hash identifier: O/k9MpA0Lwi8riu+J4Yu5OB/vurk4aJYGVoAGIl7PcA= Subject key identifier: D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F847E0B25EB53ED1F563631EE5E0FF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203280 IP: 185.140.32.0/22 IP: 2a07:1a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7e:0b:25:eb:53:ed:1f:56:36:31:ee:5e:0f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:c2:8f:d4:dc:4a:37:ce:e7:d1:93:f9:ab: 41:51:4e:18:60:f9:bd:5c:a5:75:65:c6:82:1a:94: 75:09:34:a0:d6:65:f6:ec:5b:2f:8d:80:98:46:54: a7:a8:d9:5f:90:fb:1e:fa:84:d0:ff:f0:b2:17:62: a6:2a:7e:08:95:2a:92:d8:49:b4:ff:24:16:c0:d7: 56:6d:2a:ee:ff:60:b6:08:ac:93:8c:d7:57:f6:e0: 4d:cb:54:0a:de:16:1e:b6:d8:ce:62:d3:8e:21:66: e8:64:cb:89:a6:c9:35:90:45:9e:a9:f4:8e:e9:76: 90:ec:a2:c8:89:0f:e4:4a:25:86:a7:b8:bf:fc:a1: 68:c5:59:6c:9d:0b:1a:00:dc:00:d1:46:82:3c:f7: 67:2e:ac:0f:e4:f5:ef:58:14:26:11:b4:07:c1:9a: eb:5d:8d:a8:26:17:54:8c:cd:ba:31:11:68:13:12: 48:2e:86:ae:db:9a:b3:06:a9:ec:2d:9b:6e:32:53: 30:2a:b3:12:7e:2d:a2:8d:c8:35:39:4c:3a:69:c9: b8:48:65:cf:e7:b0:16:c3:bd:b7:94:ba:94:ab:de: bd:3d:55:ec:fd:fb:9c:ca:73:03:50:61:9d:6d:9b: ba:be:78:68:3d:fe:aa:36:66:a0:4a:e5:b2:55:e6: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.32.0/22 IPv6: 2a07:1a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203280 Signature Algorithm: sha256WithRSAEncryption 17:7c:f0:ba:ee:4d:b6:96:b5:24:25:56:44:f2:5f:49:f2:91: 86:1a:a0:2d:da:00:44:c7:ed:1d:6d:b5:49:3e:20:f7:95:50: 52:bc:c9:65:0e:1d:0e:a5:b4:d2:20:72:49:31:e9:32:c5:bf: 13:db:da:89:dc:12:e1:58:be:20:4c:a5:5e:52:16:56:08:e8: 4c:78:2c:e6:aa:02:3f:b0:ec:40:0e:39:71:2b:0a:3b:98:4c: 3b:0a:d0:ee:38:5f:13:41:e0:49:a2:e7:5d:e0:54:e2:f1:b3: 29:c1:a5:e3:a1:ac:af:f0:85:c2:ee:b9:44:b8:d0:e4:86:2b: 23:e9:15:01:21:53:84:89:6d:6a:10:c3:0d:e5:c8:38:7b:6f: 86:8c:4f:f8:1a:24:4f:25:26:19:74:05:a9:a3:c4:99:a5:b5: 3f:eb:d3:a6:60:46:5f:d5:c4:73:df:31:37:4d:6d:b7:cf:79: 53:a2:28:9f:b4:94:73:f5:bf:5d:66:92:f3:1f:8b:6a:9b:0b: 90:1e:64:22:6b:99:1e:91:eb:96:e7:73:20:75:6c:68:fc:c0: 67:e8:fd:d9:f4:07:65:16:75:94:65:42:d2:60:5b:32:e0:5a: 93:18:19:3e:ba:be:2b:cd:13:e8:25:f3:97:24:e4:dd:a3:81: a5:39:ec:ea -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hH4LJetT7R9WNjHuXg/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmQ4OTFiMGUzMjhlN2M4NTZhZDRiN2EwNzY0ZDgyZDg1NjA5NmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lLCj9TcSjfO59GT+atBUU4YYPm9 XKV1ZcaCGpR1CTSg1mX27FsvjYCYRlSnqNlfkPse+oTQ//CyF2KmKn4IlSqS2Em0 /yQWwNdWbSru/2C2CKyTjNdX9uBNy1QK3hYettjOYtOOIWboZMuJpsk1kEWeqfSO 6XaQ7KLIiQ/kSiWGp7i//KFoxVlsnQsaANwA0UaCPPdnLqwP5PXvWBQmEbQHwZrr XY2oJhdUjM26MRFoExJILoau25qzBqnsLZtuMlMwKrMSfi2ijcg1OUw6acm4SGXP 57AWw723lLqUq969PVXs/fucynMDUGGdbZu6vnhoPf6qNmagSuWyVeZXAQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNLYkbDjKOfIVq1Legdk2C2FYJbWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzdmZDg1 ZC0wMTUyLTRlZjItOWViZi0xZTI0MGI5N2QyYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvN2ZkODVk LTAxNTItNGVmMi05ZWJmLTFlMjQwYjk3ZDJjNC8xLzB0aVJzT01vNThoV3JVdDZC MlRZTFlWZ2x0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYwgMA0EAgACMAcDBQMqBxoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMaEDANBgkqhkiG9w0BAQsFAAOCAQEAF3zwuu5Ntpa1 JCVWRPJfSfKRhhqgLdoARMftHW21ST4g95VQUrzJZQ4dDqW00iBySTHpMsW/E9va idwS4Vi+IEylXlIWVgjoTHgs5qoCP7DsQA45cSsKO5hMOwrQ7jhfE0HgSaLnXeBU 4vGzKcGl46Gsr/CFwu65RLjQ5IYrI+kVASFThIltahDDDeXIOHtvhoxP+BokTyUm GXQFqaPEmaW1P+vTpmBGX9XEc98xN01tt895U6Ion7SUc/W/XWaS8x+LapsLkB5k ImuZHpHrludzIHVsaPzAZ+j92fQHZRZ1lGVC0mBbMuBakxgZPrq+K80T6CXzlyTk 3aOBpTns6g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:34 2026 by rpki-client