This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer File: 65fOljUzDxRxFMZG72qTR9aJFjs.cer (raw, json) Hash identifier: UbpZ4j8xy0OJgnyTn4+4kZfbmp1Dk+5tTw4hY5YlpiQ= Subject key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F276735BD7E1C9F5820308A4C4C2C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 130.192.96.0 -- 130.192.159.255 IP: 130.192.168.0/21 IP: 130.192.192.0/19 IP: 130.192.240.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:27:67:35:bd:7e:1c:9f:58:20:30:8a:4c:4c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb97ce9635330f147114c646ef6a9347d689163b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:04:5d:6b:97:25:01:39:38:a0:4b:d3:f5: 66:70:60:57:4e:13:0c:43:21:5b:95:60:b9:9a:21: 38:8c:24:f2:7d:37:ef:b7:c5:d2:cf:f0:c0:40:7c: be:a7:d6:a9:4d:23:a7:f6:44:dd:91:1e:6d:45:66: a4:a3:14:9f:59:61:8b:61:56:3a:47:c5:be:50:d9: fb:e9:ff:d4:3c:ed:fd:db:c9:df:19:74:13:e8:00: 9d:bd:06:db:6f:41:b6:1a:36:13:04:27:c7:8d:25: 8b:9c:8a:23:f7:41:8c:b8:1e:da:f3:8a:bf:07:da: eb:58:2d:22:55:1c:a9:39:83:71:d3:ea:07:19:cd: c4:92:b0:a2:3d:27:71:b2:d6:82:56:cc:d5:b1:b4: 10:5f:25:7c:ad:c1:96:34:11:ce:b2:04:9f:95:26: 07:87:fe:e2:c1:3c:d1:f7:1b:ac:b3:37:b6:ac:64: b1:af:d4:70:55:b2:e9:ce:6d:b0:5e:9a:f3:6a:18: bf:19:eb:6a:90:47:94:9e:00:0f:4e:ba:15:7a:71: 34:74:27:be:30:f4:86:a1:f0:da:3d:31:52:3f:62: 7c:5d:7b:3f:9e:47:85:fa:d7:c6:e0:2a:b7:09:2a: d8:d7:39:40:78:81:9b:a8:bb:72:96:12:f7:cc:b9: 4b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.192.96.0-130.192.159.255 130.192.168.0/21 130.192.192.0/19 130.192.240.0/20 Signature Algorithm: sha256WithRSAEncryption 39:05:f8:17:a8:20:af:06:38:8f:18:56:a1:a8:95:a7:1e:3e: 7f:7d:43:4b:36:69:43:4b:03:8e:b7:f2:eb:2d:2b:af:7f:60: 93:70:1d:98:96:1e:c7:0b:ed:e3:05:bb:12:a5:43:79:79:e4: 13:00:18:2d:a9:0f:14:41:18:49:c0:ba:f6:28:06:4c:c5:46: 08:24:3f:a9:56:6a:d2:30:84:c4:15:d5:eb:2d:c8:21:f4:33: 32:c9:6e:ea:ae:8a:ac:a5:a3:91:69:83:7a:73:3e:db:73:38: a6:5e:4a:2b:18:54:a8:d4:f8:44:02:ee:45:0a:9f:a0:b3:4f: eb:15:d8:29:b0:24:84:52:cd:43:09:5d:56:aa:bf:7f:64:e6: c0:b9:08:4a:6b:d5:7f:84:81:bd:5e:84:d2:9f:93:f7:ca:76: 4f:6a:32:55:f5:ad:1e:57:bc:e3:eb:c1:9f:08:6e:e3:f5:fa: dd:93:83:26:a7:90:ed:75:af:ae:1f:be:6f:96:d0:0f:ed:5d: e7:40:d1:ca:24:0f:b2:f9:5b:36:8b:f3:70:69:d5:ba:6c:a4: a0:48:1d:e4:af:62:50:7e:e0:63:86:87:8f:cc:56:d5:b4:75: ea:cd:c8:ad:09:16:e8:c6:d7:e4:a8:7a:a0:0d:ad:59:da:2f: ca:c2:d3:1b -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt8fydnNb1+HJ9YIDCKTEwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjk3Y2U5NjM1MzMwZjE0NzExNGM2NDZlZjZhOTM0N2Q2ODkxNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgEEXWuXJQE5OKBL0/VmcGBXThMM QyFblWC5miE4jCTyfTfvt8XSz/DAQHy+p9apTSOn9kTdkR5tRWakoxSfWWGLYVY6 R8W+UNn76f/UPO3928nfGXQT6ACdvQbbb0G2GjYTBCfHjSWLnIoj90GMuB7a84q/ B9rrWC0iVRypOYNx0+oHGc3EkrCiPSdxstaCVszVsbQQXyV8rcGWNBHOsgSflSYH h/7iwTzR9xussze2rGSxr9RwVbLpzm2wXprzahi/GetqkEeUngAPTroVenE0dCe+ MPSGofDaPTFSP2J8XXs/nkeF+tfG4Cq3CSrY1zlAeIGbqLtylhL3zLlLtwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFOuXzpY1Mw8UcRTGRu9qk0fWiRY7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzI2NTA2 Mi1kNmFlLTQ1ODItYWFjZC1lYzc2OTAxYjZmMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvMjY1MDYy LWQ2YWUtNDU4Mi1hYWNkLWVjNzY5MDFiNmYzMS8xLzY1Zk9salV6RHhSeEZNWkc3 MnFUUjlhSkZqcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAmBAIAATAgMAwDBAWCwGADBAWCwIADBAOCwKgDBAWCwMADBASC wPAwDQYJKoZIhvcNAQELBQADggEBADkF+BeoIK8GOI8YVqGolacePn99Q0s2aUNL A4638ustK69/YJNwHZiWHscL7eMFuxKlQ3l55BMAGC2pDxRBGEnAuvYoBkzFRggk P6lWatIwhMQV1estyCH0MzLJbuquiqylo5Fpg3pzPttzOKZeSisYVKjU+EQC7kUK n6CzT+sV2CmwJIRSzUMJXVaqv39k5sC5CEpr1X+Egb1ehNKfk/fKdk9qMlX1rR5X vOPrwZ8IbuP1+t2TgyankO11r64fvm+W0A/tXedA0cokD7L5WzaL83Bp1bpspKBI HeSvYlB+4GOGh4/MVtW0derNyK0JFujG1+SoeqANrVnaL8rC0xs= -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:13 2026 by rpki-client