This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer (raw, json) Hash identifier: FK+rMTsqTlrt7Em/FgeUkyP5rFAsI9iLLsn/6O8q6zI= Subject key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C123983816B60BA9AD823FB6158FA1A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29680 IP: 151.252.112.0/21 IP: 176.28.88.0/21 IP: 178.23.208.0/21 IP: 193.22.119.0/24 IP: 193.238.52.0/22 IP: 217.18.224.0/20 IP: 2a00:d60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:39:83:81:6b:60:ba:9a:d8:23:fb:61:58:fa:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7880ed1021d0ecac71205673b004813b39dfc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9d:95:7b:ba:26:73:3a:a7:c2:96:c9:9f:89: 38:39:78:d9:74:a3:6c:9c:09:e9:3e:d7:b0:65:e3: fb:bf:8c:c4:28:53:be:52:f4:51:3e:0a:bb:4c:b2: 58:ac:4e:0b:79:3e:2b:38:b9:d2:e2:e9:e5:6b:e2: 56:13:27:68:66:60:fb:48:9b:3a:7f:38:d4:d7:df: 38:8d:bf:3b:bf:16:3e:84:e7:27:e2:11:7d:85:60: df:9b:8d:f3:52:ad:9c:bd:f5:10:ac:b1:b8:ba:54: 02:df:df:c1:02:c3:24:4a:27:6c:90:7a:18:f5:61: 28:5b:cc:94:49:74:cd:5e:bf:6c:ab:97:5c:4f:e9: cb:d3:b6:cd:21:1c:ef:00:49:9e:d8:76:30:49:46: f6:7c:c1:f2:76:4e:ff:b1:ad:16:dc:67:32:d3:02: 0c:2d:a1:54:42:06:a3:bd:cd:17:50:df:81:a6:a2: d2:cb:d0:46:57:34:03:e8:a2:0d:ba:25:69:1a:46: aa:cd:28:44:f9:cc:23:e5:84:2d:9c:66:9a:8e:94: 4e:ff:0e:83:51:c2:7b:30:1b:65:22:dd:28:2d:f3: 2f:f7:41:66:88:d1:2b:f2:5e:73:4d:22:3e:b8:d9: 3f:34:0c:5d:b7:37:80:d5:60:8e:66:8a:27:1d:45: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.252.112.0/21 176.28.88.0/21 178.23.208.0/21 193.22.119.0/24 193.238.52.0/22 217.18.224.0/20 IPv6: 2a00:d60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29680 Signature Algorithm: sha256WithRSAEncryption 12:86:ce:2d:e1:dd:13:0b:11:f7:38:87:84:82:1b:fc:51:9b: 1c:6a:63:04:4a:25:e2:68:54:c1:5f:ef:96:ed:37:c5:59:44: 1e:0e:c1:9c:e3:6b:79:85:c8:b9:1f:2a:16:a8:da:20:06:ab: 67:87:e5:b0:af:a4:90:aa:88:cb:76:b0:61:5f:cf:4c:4c:f3: a0:78:b6:35:ba:50:52:9a:c5:85:5d:1d:e9:be:de:8c:dc:be: 8f:b7:c6:6d:81:7f:3b:5f:9a:13:e8:4a:30:2f:d4:73:31:b5: f4:67:4f:d9:88:70:b8:2a:37:40:f0:a6:7b:21:f1:15:a7:5d: 23:39:6f:d9:c5:a5:00:b0:84:ef:b6:f8:b7:47:be:76:98:64: b2:40:11:e4:0c:ea:81:bd:68:28:4f:e8:ff:bd:df:37:8c:db: b8:06:db:83:27:5f:75:4f:e3:c3:bd:86:5d:6d:95:cf:5f:a8: 9f:b4:9b:4b:27:0f:1d:4b:a6:d2:a8:6b:25:d0:44:99:91:09: 42:fb:09:a4:c8:16:b4:d4:3c:2c:bf:3f:a0:e2:35:83:90:ce: c4:5f:ca:e9:ff:31:29:bb:c0:7f:27:a2:55:44:3d:63:7e:6b: 64:e4:a6:c8:d5:f2:59:a6:f6:60:d4:e1:6a:89:8e:0c:a0:cf: 54:c1:74:fe -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt8EjmDgWtguprYI/thWPoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzg4MGVkMTAyMWQwZWNhYzcxMjA1NjczYjAwNDgxM2IzOWRmYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ2Ve7omczqnwpbJn4k4OXjZdKNs nAnpPtewZeP7v4zEKFO+UvRRPgq7TLJYrE4LeT4rOLnS4unla+JWEydoZmD7SJs6 fzjU1984jb87vxY+hOcn4hF9hWDfm43zUq2cvfUQrLG4ulQC39/BAsMkSidskHoY 9WEoW8yUSXTNXr9sq5dcT+nL07bNIRzvAEme2HYwSUb2fMHydk7/sa0W3Gcy0wIM LaFUQgajvc0XUN+BpqLSy9BGVzQD6KINuiVpGkaqzShE+cwj5YQtnGaajpRO/w6D UcJ7MBtlIt0oLfMv90FmiNEr8l5zTSI+uNk/NAxdtzeA1WCOZoonHUUaIwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFNeIDtECHQ7KxxIFZzsASBOznfyZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzc1NjUw NS0yMDYyLTQ5ZTctOTRmZS0wNDc3N2MxOThlZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvNzU2NTA1 LTIwNjItNDllNy05NGZlLTA0Nzc3YzE5OGVmMS8xLzE0Z08wUUlkRHNySEVnVm5P d0JJRTdPZF9Kay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDl/xwAwQDsBxYAwQDshfQAwQAwRZ3AwQCwe40 AwQE2RLgMA0EAgACMAcDBQAqAA1gMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnPw MA0GCSqGSIb3DQEBCwUAA4IBAQAShs4t4d0TCxH3OIeEghv8UZscamMESiXiaFTB X++W7TfFWUQeDsGc42t5hci5HyoWqNogBqtnh+Wwr6SQqojLdrBhX89MTPOgeLY1 ulBSmsWFXR3pvt6M3L6Pt8ZtgX87X5oT6EowL9RzMbX0Z0/ZiHC4KjdA8KZ7IfEV p10jOW/ZxaUAsITvtvi3R752mGSyQBHkDOqBvWgoT+j/vd83jNu4BtuDJ191T+PD vYZdbZXPX6iftJtLJw8dS6bSqGsl0ESZkQlC+wmkyBa01Dwsvz+g4jWDkM7EX8rp /zEpu8B/J6JVRD1jfmtk5KbI1fJZpvZg1OFqiY4MoM9UwXT+ -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:05 2026 by rpki-client