This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer File: 0tzocORzw1QnPonF5OLtPgwGk1Y.cer (raw, json) Hash identifier: +M+uQbqL1047rYlntO+6cqwNMjokwgHPAftRruHeLO8= Subject key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AE693CB150D0386521879F3BFCD33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57445 IP: 91.232.26.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e6:93:cb:15:0d:03:86:52:18:79:f3:bf:cd:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:18:c2:47:e8:a0:67:09:d6:f5:f0:bf:57: 6e:24:3e:49:7a:50:19:e4:32:79:3c:39:c0:1c:87: db:65:65:c9:b1:0e:62:7a:50:85:1e:cd:9c:16:fd: 6d:e0:87:b4:f4:ad:a8:e2:94:c5:3d:49:db:a2:00: 0e:1d:a5:e8:c7:cf:75:5b:d7:38:3a:46:d3:e2:bd: 00:60:5f:00:ce:6a:7a:10:cc:28:0a:a0:e5:e1:21: d9:df:23:cf:8e:b1:bf:08:23:1c:84:9c:eb:3a:e3: 69:61:3c:e3:e7:f0:30:ca:5a:41:4f:90:4c:7f:c7: d5:da:7c:e6:4b:1f:27:49:11:49:f8:57:c7:09:38: b7:c4:65:b1:b0:2f:df:a8:66:f0:92:d4:1b:df:d3: ab:4a:66:6d:27:7d:fc:c9:3c:ec:dc:dc:39:c1:16: 87:03:a1:54:8d:25:48:22:6d:e0:17:d5:4c:1d:06: a6:df:53:f0:91:32:18:4e:38:ee:57:84:08:b7:4e: 9e:26:b1:97:a2:85:b5:a0:5e:12:18:26:c9:0f:34: 58:f0:a2:9c:d9:de:fc:fc:58:b1:d2:93:9f:14:41: 53:6b:8a:16:c9:05:ba:46:ec:46:e9:1d:18:59:56: 60:76:ad:74:58:1e:c1:c4:e2:74:e1:87:23:3c:86: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.26.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57445 Signature Algorithm: sha256WithRSAEncryption 75:81:bf:f1:61:11:1b:fa:8d:2c:06:a3:9d:01:55:ad:44:3e: 0f:85:d4:0a:04:97:7b:08:48:f7:c5:e2:cf:70:cf:25:ba:c5: 51:e6:46:8f:0c:97:de:67:84:1a:81:49:e9:28:e0:33:51:60: 34:54:fb:a6:96:dd:cb:de:47:13:3b:52:e1:dd:e3:60:fd:17: 34:e2:8a:00:37:91:d9:cb:6f:fd:04:40:44:ae:c6:e9:9a:07: 71:62:db:f5:98:56:24:27:21:a1:43:00:0f:42:a2:5f:93:71: 30:9e:8f:7d:46:23:c4:6b:7a:3a:91:eb:bd:9c:7b:e7:3a:78: 60:be:60:3a:67:78:64:55:18:83:53:b8:72:6b:69:bd:93:b8: a5:80:e8:99:1b:44:91:7a:14:50:93:8e:75:71:5b:60:54:44: 5b:54:ef:9c:9d:f0:f2:63:ad:9b:eb:e8:47:44:98:1f:bb:81: ec:c5:9f:0d:ce:b8:26:98:4c:cd:1d:2b:98:77:58:cf:a6:c1: a6:68:4e:b1:95:32:d7:20:fb:38:9d:80:0a:88:a0:c8:a3:75: 60:cd:a7:63:8f:0b:aa:47:80:d0:6a:75:60:7b:28:20:c2:d2: 2e:e0:fb:c2:ec:37:f6:52:f8:cf:72:83:87:f8:ea:31:af:d5: e9:7a:9e:98 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WuaTyxUNA4ZSGHnzv80zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmRjZTg3MGU0NzNjMzU0MjczZTg5YzVlNGUyZWQzZTBjMDY5MzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohoYwkfooGcJ1vXwv1duJD5JelAZ 5DJ5PDnAHIfbZWXJsQ5ielCFHs2cFv1t4Ie09K2o4pTFPUnbogAOHaXox891W9c4 OkbT4r0AYF8Azmp6EMwoCqDl4SHZ3yPPjrG/CCMchJzrOuNpYTzj5/AwylpBT5BM f8fV2nzmSx8nSRFJ+FfHCTi3xGWxsC/fqGbwktQb39OrSmZtJ338yTzs3Nw5wRaH A6FUjSVIIm3gF9VMHQam31PwkTIYTjjuV4QIt06eJrGXooW1oF4SGCbJDzRY8KKc 2d78/Fix0pOfFEFTa4oWyQW6RuxG6R0YWVZgdq10WB7BxOJ04YcjPIYpXwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNLc6HDkc8NUJz6JxeTi7T4MBpNWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzExM2Y1 Zi1iZTU4LTQ3OGMtOTAzMC0zMmQ4MGQ4ZDE2MTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvMTEzZjVm LWJlNTgtNDc4Yy05MDMwLTMyZDgwZDhkMTYxNS8xLzB0em9jT1J6dzFRblBvbkY1 T0x0UGd3R2sxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+gaMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDgZTANBgkqhkiG9w0BAQsFAAOCAQEAdYG/8WERG/qNLAajnQFVrUQ+D4XUCgSX ewhI98Xiz3DPJbrFUeZGjwyX3meEGoFJ6SjgM1FgNFT7ppbdy95HEztS4d3jYP0X NOKKADeR2ctv/QRARK7G6ZoHcWLb9ZhWJCchoUMAD0KiX5NxMJ6PfUYjxGt6OpHr vZx75zp4YL5gOmd4ZFUYg1O4cmtpvZO4pYDomRtEkXoUUJOOdXFbYFREW1TvnJ3w 8mOtm+voR0SYH7uB7MWfDc64JphMzR0rmHdYz6bBpmhOsZUy1yD7OJ2ACoigyKN1 YM2nY48LqkeA0Gp1YHsoIMLSLuD7wuw39lL4z3KDh/jqMa/V6XqemA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:40 2026 by rpki-client