This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.cer (raw, json) Hash identifier: iWD9mOmuR4jpPAjgJAgO77BIRQWjICa2eaqMmnoZen0= Subject key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3538453478B46CD06DCCE048491F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.42.212.0/24 IP: 194.1.204.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:53:84:53:47:8b:46:cd:06:dc:ce:04:84:91:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:93:76:e6:83:70:3f:e6:6d:1b:49:02:9b:78: fc:fd:e3:24:ec:ec:55:e0:9d:9b:40:ea:49:68:4d: 85:5c:0f:a5:fa:28:9c:6e:d1:6c:e2:2d:40:38:78: 6a:ed:84:e9:e2:c9:39:f2:4f:50:46:60:13:d7:2b: 68:e6:81:4f:fc:5d:89:8a:50:e8:2c:69:2d:08:9f: bb:a2:35:c0:a7:e5:b4:b2:73:fa:56:d7:1f:ae:0a: 4e:7c:75:26:e1:b0:43:0a:53:0f:e6:40:6c:0d:a3: bb:0e:b7:60:ac:a4:84:0c:7e:01:62:72:9b:a5:4f: f2:8e:01:4c:fb:2d:bd:a1:49:77:6e:58:1f:ff:63: 64:7e:30:dc:01:c2:92:6b:a7:68:4f:52:c6:ac:c1: 26:37:e8:af:bf:72:c8:2c:5d:f5:9c:e4:7b:5d:bc: 73:cc:8d:1e:9f:f8:68:35:65:bd:a0:db:80:ac:32: 56:84:3b:29:08:31:1b:a5:c1:21:fd:a9:b4:aa:c1: c4:64:2c:15:b0:63:10:88:4c:ee:ac:e5:54:c1:8a: 72:d0:bd:df:12:8c:2d:c1:09:3e:5e:6f:f9:2e:ef: b2:d4:2f:40:9e:75:0f:24:bc:45:a8:73:d2:7c:78: 89:b3:2d:ac:eb:c5:5a:0a:5a:f6:b8:b9:9e:54:16: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.212.0/24 194.1.204.0/24 Signature Algorithm: sha256WithRSAEncryption 83:71:44:f4:a7:40:da:f8:aa:3e:5e:f2:29:ff:fb:f6:93:60: ba:b9:e9:58:d9:5a:b3:00:30:11:74:30:ee:63:d6:23:99:bb: 76:66:1e:1d:3b:31:d0:60:b0:33:26:f8:b8:a4:fa:9d:6e:82: a4:fc:c3:5a:57:2c:16:11:21:97:be:8e:eb:b1:9f:a6:99:07: 87:b9:17:ac:19:6d:92:a2:84:84:7a:b4:14:67:7a:c2:6b:50: df:84:20:33:93:63:a4:01:9b:4e:01:92:a7:6f:4e:fe:c7:a0: 3e:46:be:7c:37:82:50:7d:b4:cb:85:96:e8:c8:a9:9f:ef:d4: 17:94:9e:a0:ca:78:48:23:e4:57:d6:b6:09:ac:55:f9:c3:20: 3f:25:aa:9a:03:36:cf:c2:a2:97:62:f0:a5:86:57:05:53:cf: c7:6d:78:04:af:ef:61:71:6b:20:ef:b3:9c:de:ce:1b:63:7b: 3d:2f:56:c5:cb:36:17:3a:2b:63:8e:ab:a3:b6:e6:84:21:8a: de:7a:05:cc:d6:40:07:aa:5c:7f:86:23:b9:c1:60:80:ab:05: 67:ea:aa:f0:c2:41:32:24:e3:04:70:2b:4f:4c:b6:fa:8a:23: 7e:b8:dc:eb:11:22:11:09:3d:e3:6e:38:19:6b:63:fc:6f:27: 68:ba:c2:4b -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt7o1OEU0eLRs0G3M4EhJH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2RmMGE3NWM5ZWY2ODFiOGQyMzM2N2RiZThlZGFkMDUzZjNiZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pN25oNwP+ZtG0kCm3j8/eMk7OxV 4J2bQOpJaE2FXA+l+iicbtFs4i1AOHhq7YTp4sk58k9QRmAT1yto5oFP/F2JilDo LGktCJ+7ojXAp+W0snP6VtcfrgpOfHUm4bBDClMP5kBsDaO7DrdgrKSEDH4BYnKb pU/yjgFM+y29oUl3blgf/2NkfjDcAcKSa6doT1LGrMEmN+ivv3LILF31nOR7Xbxz zI0en/hoNWW9oNuArDJWhDspCDEbpcEh/am0qsHEZCwVsGMQiEzurOVUwYpy0L3f EowtwQk+Xm/5Lu+y1C9AnnUPJLxFqHPSfHiJsy2s68VaClr2uLmeVBYa+wIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFPPfCnXJ72gbjSM2fb6O2tBT872VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzRjYjcy Yi0zZjgyLTQ2ZDItYmYyNS1hYjhhYmNjNjkwMTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvNGNiNzJi LTNmODItNDZkMi1iZjI1LWFiOGFiY2M2OTAxNi8xLzg5OEtkY252YUJ1Tkl6Wjl2 bzdhMEZQenZaVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwSrUAwQAwgHMMA0GCSqGSIb3DQEBCwUAA4IB AQCDcUT0p0Da+Ko+XvIp//v2k2C6uelY2VqzADARdDDuY9Yjmbt2Zh4dOzHQYLAz Jvi4pPqdboKk/MNaVywWESGXvo7rsZ+mmQeHuResGW2SooSEerQUZ3rCa1DfhCAz k2OkAZtOAZKnb07+x6A+Rr58N4JQfbTLhZboyKmf79QXlJ6gynhII+RX1rYJrFX5 wyA/JaqaAzbPwqKXYvClhlcFU8/HbXgEr+9hcWsg77Oc3s4bY3s9L1bFyzYXOitj jqujtuaEIYreegXM1kAHqlx/hiO5wWCAqwVn6qrwwkEyJOMEcCtPTLb6iiN+uNzr ESIRCT3jbjgZa2P8bydousJL -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:55 2026 by rpki-client