This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer File: 70Ku0OkbI9DNy_skrIObDb5qoEs.cer (raw, json) Hash identifier: ByX/WQBvpYAqk4NWu3lRNlRGd6M6sex7hKG624iASG8= Subject key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9FC8348CDE6327F45C6DC2923D467 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197655 IP: 91.223.193.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fc:83:48:cd:e6:32:7f:45:c6:dc:29:23:d4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cf:eb:fb:b8:43:c9:d1:97:0a:3b:69:a1:d6: b9:30:ad:bc:35:4b:e2:a0:39:59:39:60:3e:95:f3: 4e:21:e6:f0:1a:98:15:a2:cc:b7:af:ed:f5:24:de: 12:96:5e:0c:d6:44:d3:99:64:d1:96:40:b8:52:55: df:99:a2:d5:2b:5f:6d:2e:2e:fc:41:91:73:e9:5e: 9d:b5:89:bc:d0:67:32:83:b7:e7:f2:07:ba:63:39: 0a:e8:49:5d:53:9b:c4:92:41:92:6d:4e:08:bd:87: 99:dd:16:e5:35:08:bd:96:09:bb:68:e2:d3:6f:df: c1:0d:2c:e0:60:c5:bb:9a:d7:8f:40:8c:a1:60:f2: e5:46:50:fe:70:70:2c:2c:5c:c7:80:d4:48:54:0b: bd:91:4f:4d:b3:74:93:81:d4:b2:e7:b9:3f:22:0b: 1d:39:6f:a9:8d:f7:b1:f1:44:96:5f:cd:37:50:46: 63:69:17:7a:0d:4f:1f:cb:78:1f:99:d3:b1:d8:c9: 28:c0:64:8a:da:7a:93:6e:0f:cd:97:0c:ec:4d:cd: 8a:ee:45:fc:91:ee:6d:76:26:0e:d0:b3:b9:35:ab: 9e:55:c6:77:35:ef:f7:56:b7:c6:b2:29:a5:aa:f1: 20:f8:ea:f0:46:d2:eb:10:47:1d:fb:81:d8:74:2b: c5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.193.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197655 Signature Algorithm: sha256WithRSAEncryption 25:15:8d:dc:eb:18:97:ef:91:84:93:73:c8:c0:12:6f:4a:1d: 6f:79:d1:48:88:f0:02:91:8d:8d:b8:f2:61:f0:cd:20:d5:7c: 22:f8:a0:99:a2:a2:f4:af:b7:af:26:1a:95:18:cd:b1:50:c4: f1:83:c6:79:6c:e1:19:72:7e:65:6c:8d:b5:90:f5:d8:b0:26: e0:60:a8:c6:b5:17:cf:87:a2:8a:61:99:47:4f:3d:e9:fe:6c: 7e:4a:82:00:be:28:14:53:49:31:10:7e:53:54:22:f4:8a:69: 96:a9:79:52:c9:ec:cc:16:99:67:f2:b0:e6:e4:18:89:c5:50: 41:e5:2b:ac:4d:a5:93:5c:7c:e1:28:43:db:64:48:63:e5:68: 30:77:f9:13:be:4b:ad:2f:92:05:b2:d8:7d:76:4a:3e:da:49: 61:b1:26:25:a1:89:6d:bf:0e:bc:8a:26:92:98:37:79:c6:63: 4f:9a:22:8f:75:8c:92:fa:1a:1d:cb:fa:18:27:93:4c:69:6f: 89:15:0e:b6:76:30:12:93:45:22:3a:f2:ed:a0:5b:39:c7:24: 58:64:ac:3b:82:7f:38:5d:e1:29:1f:29:e4:54:9d:7f:01:39: 64:f9:6b:2c:5b:11:cd:21:f5:a7:59:89:13:8a:be:d8:9f:1a: 6c:42:74:98 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yfyDSM3mMn9FxtwpI9RnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjQyYWVkMGU5MWIyM2QwY2RjYmZiMjRhYzgzOWIwZGJlNmFhMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48/r+7hDydGXCjtpoda5MK28NUvi oDlZOWA+lfNOIebwGpgVosy3r+31JN4Sll4M1kTTmWTRlkC4UlXfmaLVK19tLi78 QZFz6V6dtYm80Gcyg7fn8ge6YzkK6EldU5vEkkGSbU4IvYeZ3RblNQi9lgm7aOLT b9/BDSzgYMW7mtePQIyhYPLlRlD+cHAsLFzHgNRIVAu9kU9Ns3STgdSy57k/Igsd OW+pjfex8USWX803UEZjaRd6DU8fy3gfmdOx2MkowGSK2nqTbg/NlwzsTc2K7kX8 ke5tdiYO0LO5NaueVcZ3Ne/3VrfGsimlqvEg+OrwRtLrEEcd+4HYdCvFcQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFO9CrtDpGyPQzcv7JKyDmw2+aqBLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2JkNzVh Mi1mYzZlLTRhODYtOWVkZi02Njk5MDllMTFjZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvYmQ3NWEy LWZjNmUtNGE4Ni05ZWRmLTY2OTkwOWUxMWNlMy8xLzcwS3UwT2tiSTlETnlfc2ty SU9iRGI1cW9Fcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9/BMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMEFzANBgkqhkiG9w0BAQsFAAOCAQEAJRWN3OsYl++RhJNzyMASb0odb3nRSIjw ApGNjbjyYfDNINV8IvigmaKi9K+3ryYalRjNsVDE8YPGeWzhGXJ+ZWyNtZD12LAm 4GCoxrUXz4eiimGZR0896f5sfkqCAL4oFFNJMRB+U1Qi9Ipplql5UsnszBaZZ/Kw 5uQYicVQQeUrrE2lk1x84ShD22RIY+VoMHf5E75LrS+SBbLYfXZKPtpJYbEmJaGJ bb8OvIomkpg3ecZjT5oij3WMkvoaHcv6GCeTTGlviRUOtnYwEpNFIjry7aBbOcck WGSsO4J/OF3hKR8p5FSdfwE5ZPlrLFsRzSH1p1mJE4q+2J8abEJ0mA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:45 2026 by rpki-client