This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer File: 42Op1wI7PLADKRLcqsnFY8kKl3I.cer (raw, json) Hash identifier: B+5zTrHv7L0k5SQQP/+Hff1f/9H/irsU/1WVir6LXrQ= Subject key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113C91037C1C26FF06AE9BC662A81B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.31.68.0/23 IP: 2a00:89e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3c:91:03:7c:1c:26:ff:06:ae:9b:c6:62:a8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dd:d8:99:f4:3a:ac:a1:92:01:95:23:14:9d: f2:f5:23:2a:61:ef:85:8c:a0:d6:0e:07:4b:c3:02: 07:a7:4f:a9:e5:bb:c9:56:4c:c2:62:7d:ef:9c:aa: 89:79:92:c2:eb:b3:bf:41:b1:24:fe:66:a2:47:40: 59:4c:94:f8:bc:77:6c:e4:7c:9f:94:25:ed:a7:cf: 24:32:db:15:23:b8:92:e3:37:58:83:0e:49:b7:e7: de:9b:30:48:41:a3:5c:4c:b5:3e:68:2d:7b:5b:64: 59:85:e9:e8:1e:b3:28:57:4a:58:f2:a8:17:e6:d0: ec:5f:9d:92:e1:57:22:2e:da:ce:71:00:c9:1c:fa: 49:3b:9a:88:bb:c0:6f:b6:c3:23:9b:52:2f:0e:6a: 78:ae:7c:ec:2f:94:c4:41:02:9a:03:b5:c1:f3:3e: b6:d0:8f:42:13:60:70:28:62:bc:1d:98:66:aa:32: 37:0a:06:72:0a:74:16:ce:a5:48:d4:9a:75:96:2b: 5a:a4:75:37:ec:9c:bf:ed:ef:59:53:f7:f2:e3:04: fc:3b:9c:e3:60:36:c9:4d:2b:a7:21:29:75:b5:31: 06:6a:32:0c:ca:4b:37:9a:c6:cd:fc:40:46:89:6d: 19:a7:14:25:0e:d5:39:62:6e:aa:f6:6a:df:a2:34: 37:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.68.0/23 IPv6: 2a00:89e0::/32 Signature Algorithm: sha256WithRSAEncryption a7:be:33:74:09:89:9a:05:72:f6:32:51:ce:7d:f8:82:50:d9: 33:80:60:64:05:d2:fc:60:4f:86:bc:3d:c0:7a:bf:72:d0:4b: 88:0b:61:bf:82:f8:c4:75:bc:0f:20:77:81:ec:86:b8:0b:9b: a5:73:88:5d:ce:1f:d0:f6:c8:b9:b4:c1:8b:c7:16:09:f1:10: 64:cb:c0:09:e8:96:ba:69:0f:f8:20:85:5b:8b:ba:1d:60:60: aa:20:dc:7d:de:1a:d1:bf:3d:d5:e3:cb:aa:84:0c:50:8f:0d: 5f:a7:73:a9:55:54:84:a1:3b:ae:51:a1:0d:5b:3f:ff:ba:42: c4:92:8c:1a:9d:04:9e:6c:0f:bb:08:e8:cb:75:ed:b7:47:24: fe:4f:be:35:f9:54:ca:22:ff:6f:c5:e6:2e:5b:03:cf:3c:01: 84:31:37:9f:30:eb:d3:1e:4a:4e:08:2b:8f:f0:d2:ef:75:d1: 7a:e8:ee:d0:6e:4b:b1:4f:00:da:5f:38:ab:db:52:63:75:43: fc:65:ec:45:a3:c4:4c:d3:88:8c:82:8c:db:8e:18:70:51:6a: e8:62:e7:86:72:13:7b:ac:24:5b:d6:fe:a7:65:ca:ba:e1:da: 19:c6:32:59:c5:88:96:9d:77:58:1e:32:df:8c:ff:27:58:65: e6:f0:81:75 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5ETyRA3wcJv8GrpvGYqgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzYzYTlkNzAyM2IzY2IwMDMyOTEyZGNhYWM5YzU2M2M5MGE5NzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN3YmfQ6rKGSAZUjFJ3y9SMqYe+F jKDWDgdLwwIHp0+p5bvJVkzCYn3vnKqJeZLC67O/QbEk/maiR0BZTJT4vHds5Hyf lCXtp88kMtsVI7iS4zdYgw5Jt+femzBIQaNcTLU+aC17W2RZhenoHrMoV0pY8qgX 5tDsX52S4VciLtrOcQDJHPpJO5qIu8BvtsMjm1IvDmp4rnzsL5TEQQKaA7XB8z62 0I9CE2BwKGK8HZhmqjI3CgZyCnQWzqVI1Jp1litapHU37Jy/7e9ZU/fy4wT8O5zj YDbJTSunISl1tTEGajIMyks3msbN/EBGiW0ZpxQlDtU5Ym6q9mrfojQ3PQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFONjqdcCOzywAykS3KrJxWPJCpdyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzJkNTMz Ny1kYTI0LTRjZTgtYTNiNy1jMzAyYzEwZWM1YzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvMmQ1MzM3 LWRhMjQtNGNlOC1hM2I3LWMzMDJjMTBlYzVjMC8xLzQyT3Axd0k3UExBREtSTGNx c25GWThrS2wzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBuR9EMA0EAgACMAcDBQAqAIngMA0GCSqGSIb3 DQEBCwUAA4IBAQCnvjN0CYmaBXL2MlHOffiCUNkzgGBkBdL8YE+GvD3Aer9y0EuI C2G/gvjEdbwPIHeB7Ia4C5ulc4hdzh/Q9si5tMGLxxYJ8RBky8AJ6Ja6aQ/4IIVb i7odYGCqINx93hrRvz3V48uqhAxQjw1fp3OpVVSEoTuuUaENWz//ukLEkowanQSe bA+7COjLde23RyT+T741+VTKIv9vxeYuWwPPPAGEMTefMOvTHkpOCCuP8NLvddF6 6O7QbkuxTwDaXzir21JjdUP8ZexFo8RM04iMgozbjhhwUWroYueGchN7rCRb1v6n Zcq64doZxjJZxYiWnXdYHjLfjP8nWGXm8IF1 -----END CERTIFICATE-----Generated at Tue Jan 27 00:35:08 2026 by rpki-client