This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer File: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer (raw, json) Hash identifier: DAi6dCIXHuccdD+DB7Rtbr2zxbzdVnZ/9Kx4MFYhrb8= Subject key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910C6F09C4C61EEC70D5F28CC9A0A47 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57024 IP: 146.0.24.0/21 IP: 2a01:9680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c6:f0:9c:4c:61:ee:c7:0d:5f:28:cc:9a:0a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f77390fc61608c01785d1a80685ae9e56a5b2583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:8d:55:c1:e3:75:b8:a5:1b:71:73:9c:a9: 27:e8:6a:34:ce:e2:7f:76:df:be:e8:e0:73:93:df: 04:21:f3:d8:76:35:bd:d1:36:1a:7b:8f:a5:38:6d: 07:9e:97:9a:f6:0c:80:a5:1d:57:70:36:9d:7d:16: 5c:35:a1:45:c9:c5:64:00:57:a7:65:7b:81:b2:36: f7:cb:61:87:d1:8e:9b:66:b3:4f:03:bb:92:af:b0: f6:d1:22:01:1e:8c:44:6b:54:18:9b:fd:c2:0b:fc: 05:bd:82:37:81:67:f9:d1:d7:42:4c:0a:ce:2a:44: cf:16:3e:a4:30:2d:f2:58:35:59:de:d4:b9:ea:5e: ff:37:53:5a:0c:d2:62:bb:26:20:a5:2c:82:eb:2c: 35:e0:45:3e:b4:f0:9c:ed:bf:fb:df:ce:3d:a2:f8: e2:3c:0f:0d:20:26:ec:c0:ff:04:86:01:8a:1c:df: 64:dd:c7:8b:bc:70:7e:7f:c1:e0:df:2c:b9:79:3a: f8:0a:79:85:1f:7f:28:cd:ee:7a:dc:f5:fb:b3:2e: 3f:65:ea:29:db:ac:30:18:1c:db:04:4d:60:8b:de: d0:a0:81:e9:51:3a:e4:10:eb:77:cc:27:91:ba:1c: 97:5d:0e:66:98:cd:e2:01:6c:b5:9a:bd:5d:83:52: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.0.24.0/21 IPv6: 2a01:9680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57024 Signature Algorithm: sha256WithRSAEncryption 33:b1:3a:1c:81:a1:04:4d:aa:f3:8c:62:5d:d0:db:06:66:4e: 7a:79:81:b3:e8:37:9c:ca:65:a0:87:68:14:8d:09:53:fe:c0: 26:ba:40:ea:9a:05:ee:06:c8:91:b6:2a:92:a6:92:db:5d:25: d1:dc:4c:1f:46:91:3d:7b:2c:60:1c:d3:bb:d9:60:f0:91:6c: 96:60:d4:0d:65:e3:fc:bc:d6:2e:bd:08:e8:0f:5c:fd:cf:d3: f7:5c:a3:9e:b3:ff:03:a5:90:23:5d:78:a9:ec:57:ca:b6:c6: bf:84:c3:ae:78:ec:3e:55:e2:82:66:49:e7:dc:62:b1:a4:0a: 02:b3:c5:4d:57:c7:af:7e:01:b2:11:14:f5:26:da:8c:f7:cd: e8:20:3e:e4:f9:56:cf:06:52:70:f0:7b:c2:51:3c:6d:5d:59: c1:92:90:42:94:cc:44:6f:29:20:c8:63:38:eb:23:3b:d6:85: 84:3f:fc:02:51:c7:41:4b:47:96:e1:f8:0f:58:6b:06:ab:9c: 14:1f:a0:46:44:60:a1:2e:e3:db:e9:de:64:79:a5:1c:84:aa: 81:d1:49:0e:0c:a4:ad:f7:9b:57:06:37:dc:cc:08:dc:5f:cb: a2:1e:09:ec:7c:46:c5:f5:2e:bb:9a:c8:50:06:1e:26:cc:da: 40:c5:83:3d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EMbwnExh7scNXyjMmgpHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzczOTBmYzYxNjA4YzAxNzg1ZDFhODA2ODVhZTllNTZhNWIyNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupONVcHjdbilG3FznKkn6Go0zuJ/ dt++6OBzk98EIfPYdjW90TYae4+lOG0Hnpea9gyApR1XcDadfRZcNaFFycVkAFen ZXuBsjb3y2GH0Y6bZrNPA7uSr7D20SIBHoxEa1QYm/3CC/wFvYI3gWf50ddCTArO KkTPFj6kMC3yWDVZ3tS56l7/N1NaDNJiuyYgpSyC6yw14EU+tPCc7b/73849ovji PA8NICbswP8EhgGKHN9k3ceLvHB+f8Hg3yy5eTr4CnmFH38oze563PX7sy4/Zeop 26wwGBzbBE1gi97QoIHpUTrkEOt3zCeRuhyXXQ5mmM3iAWy1mr1dg1JzoQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPdzkPxhYIwBeF0agGha6eVqWyWDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzY1Njhj Ni03ZGQ4LTQ0MWEtODAyZi02M2FiZjYxOThmNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvNjU2OGM2 LTdkZDgtNDQxYS04MDJmLTYzYWJmNjE5OGY1OC8xLzkzT1FfR0ZnakFGNFhScUFh RnJwNVdwYkpZTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDkgAYMA0EAgACMAcDBQMqAZaAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDewDANBgkqhkiG9w0BAQsFAAOCAQEAM7E6HIGhBE2q 84xiXdDbBmZOenmBs+g3nMploIdoFI0JU/7AJrpA6poF7gbIkbYqkqaS210l0dxM H0aRPXssYBzTu9lg8JFslmDUDWXj/LzWLr0I6A9c/c/T91yjnrP/A6WQI114qexX yrbGv4TDrnjsPlXigmZJ59xisaQKArPFTVfHr34BshEU9SbajPfN6CA+5PlWzwZS cPB7wlE8bV1ZwZKQQpTMRG8pIMhjOOsjO9aFhD/8AlHHQUtHluH4D1hrBqucFB+g RkRgoS7j2+neZHmlHISqgdFJDgykrfebVwY33MwI3F/Loh4J7HxGxfUuu5rIUAYe JszaQMWDPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:39 2026 by rpki-client