This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.cer (raw, json) Hash identifier: ATdFgKZUhShVzRp8CNGDw8TUzAv3mNI18MPLa5uqY8M= Subject key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758DCA876C0EE944C7B37F60CA160B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.206.110.0/23 IP: 91.214.160.0/22 IP: 91.236.118.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dc:a8:76:c0:ee:94:4c:7b:37:f6:0c:a1:60:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7a80068bd7328ef41120f4788c28d3a92047067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:eb:30:bb:09:f1:f5:5b:03:03:f7:11:de:2a: 42:6d:72:0a:cb:1d:40:38:b7:d7:15:18:1e:e9:2d: a3:57:83:66:cd:2f:97:3e:a6:89:92:2a:f2:ac:9f: 39:83:0f:d5:51:82:9f:6c:3e:ac:ff:34:be:0b:36: 36:d8:84:4c:9f:29:8c:16:be:44:9d:0e:d1:9c:1f: 72:6a:3f:e7:0a:d0:e2:f9:91:62:21:2d:e8:e1:54: ee:17:d2:a7:ee:11:af:92:7f:68:f2:a3:b3:d3:42: 4f:ca:cf:cb:cb:fe:b8:b1:2d:af:e2:98:5f:f6:38: 5e:41:98:80:b7:69:8f:68:86:54:2c:49:3b:ad:f1: 06:c3:1b:d1:fd:17:2c:d7:67:09:f3:7a:9b:00:f4: 50:5b:db:78:82:d7:5e:1c:05:97:d3:cc:da:a1:78: bd:e3:be:9f:4d:de:63:5d:7b:af:8a:6c:b2:2a:d5: e8:08:67:8c:2c:f2:a2:c5:26:0e:75:6d:3e:4a:fa: 04:c9:64:11:b5:1b:35:ff:86:14:bf:4f:32:03:9b: 6b:fa:f6:d7:50:ca:92:67:3f:bc:0e:5a:a1:db:31: 29:52:56:32:7c:f8:71:5d:4f:2e:e6:4e:4e:67:cd: 61:59:c9:44:17:fc:7d:02:3a:c4:50:71:41:6a:bd: cc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.110.0/23 91.214.160.0/22 91.236.118.0/23 Signature Algorithm: sha256WithRSAEncryption 48:e9:78:6f:d9:1d:a3:e1:05:ca:a8:7a:1e:36:b0:27:5a:d5: 7f:89:21:20:ee:8b:70:8e:e6:7b:07:76:4a:e1:f0:a7:9d:d9: f3:8f:3e:7f:d3:9d:9a:37:fa:5e:a6:ba:5f:e4:b9:f7:36:c5: 0d:78:bf:03:f1:9e:1e:5f:64:79:55:45:e2:8c:a5:38:01:84: 21:3b:73:66:e5:32:e0:5e:b2:6e:97:53:32:9f:fd:51:e7:b4: 12:27:94:f9:7e:e5:9a:83:f1:99:6f:e6:af:70:f7:3a:00:c4: 19:76:7b:30:57:f8:ac:eb:0d:d6:30:8f:32:a0:fa:a9:a2:3a: b7:81:aa:72:32:9c:e9:23:c7:2a:19:7a:ac:34:48:0d:ae:16: 15:47:d4:4f:af:3d:42:50:50:14:e2:34:c4:57:cc:07:3a:58: eb:ac:19:d1:8c:ec:24:b4:87:75:74:e9:a2:33:c4:7c:cd:9b: 0b:d0:6a:48:2a:7c:7e:18:29:12:5f:91:33:29:61:10:85:26: b0:94:b8:16:e1:f9:14:df:f7:c1:2b:e2:e5:6e:6e:ee:31:6c: e6:64:b2:59:9b:f3:84:37:d3:9b:99:91:4e:6b:98:dd:cc:da: 76:9d:d2:b1:75:79:ac:ed:b3:4b:b5:1c:c4:a2:e7:72:d4:d6: 32:a6:04:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt3WNyodsDulEx7N/YMoWC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2E4MDA2OGJkNzMyOGVmNDExMjBmNDc4OGMyOGQzYTkyMDQ3MDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Oswuwnx9VsDA/cR3ipCbXIKyx1A OLfXFRge6S2jV4NmzS+XPqaJkiryrJ85gw/VUYKfbD6s/zS+CzY22IRMnymMFr5E nQ7RnB9yaj/nCtDi+ZFiIS3o4VTuF9Kn7hGvkn9o8qOz00JPys/Ly/64sS2v4phf 9jheQZiAt2mPaIZULEk7rfEGwxvR/Rcs12cJ83qbAPRQW9t4gtdeHAWX08zaoXi9 476fTd5jXXuvimyyKtXoCGeMLPKixSYOdW0+SvoEyWQRtRs1/4YUv08yA5tr+vbX UMqSZz+8Dlqh2zEpUlYyfPhxXU8u5k5OZ81hWclEF/x9AjrEUHFBar3MFwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFNeoAGi9cyjvQRIPR4jCjTqSBHBnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2E0NWQx Yy1lM2I2LTRmMjMtYThjNi1lZjMzMmEwMjU2ZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvYTQ1ZDFj LWUzYjYtNGYyMy1hOGM2LWVmMzMyYTAyNTZkNi8xLzE2Z0FhTDF6S085QkVnOUhp TUtOT3BJRWNHYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQBW85uAwQCW9agAwQBW+x2MA0GCSqGSIb3DQEB CwUAA4IBAQBI6Xhv2R2j4QXKqHoeNrAnWtV/iSEg7otwjuZ7B3ZK4fCnndnzjz5/ 052aN/peprpf5Ln3NsUNeL8D8Z4eX2R5VUXijKU4AYQhO3Nm5TLgXrJul1Myn/1R 57QSJ5T5fuWag/GZb+avcPc6AMQZdnswV/is6w3WMI8yoPqpojq3gapyMpzpI8cq GXqsNEgNrhYVR9RPrz1CUFAU4jTEV8wHOljrrBnRjOwktId1dOmiM8R8zZsL0GpI Knx+GCkSX5EzKWEQhSawlLgW4fkU3/fBK+Llbm7uMWzmZLJZm/OEN9ObmZFOa5jd zNp2ndKxdXms7bNLtRzEoudy1NYypgSa -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:42 2026 by rpki-client