This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer File: A15Shd7cNatjUnBIs2buVTgGzgQ.cer (raw, json) Hash identifier: 2ygb/z8qrEUDvBekOfa0PHg1tOvRQVAtQ+eVr1iVZRM= Subject key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36B0BFA0EA85D40F56B8571B1F183F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.213.208.0/24 IP: 91.213.215.0/24 IP: 91.213.217.0/24 IP: 91.213.220.0/24 IP: 2a0f:64c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b0:bf:a0:ea:85:d4:0f:56:b8:57:1b:1f:18:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=035e5285dedc35ab63527048b366ee553806ce04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:8d:a7:02:a7:0e:7c:a3:b7:6b:5d:71:8f: 03:88:e5:a0:e8:29:4a:01:27:a3:c2:07:b4:bf:28: 91:f2:13:9f:da:cf:9f:fc:a8:dc:59:37:b9:70:2f: 67:63:77:b0:54:00:9a:64:a5:05:5e:29:db:48:f3: 1c:1a:45:fe:ca:a3:f4:6b:a3:f0:b8:da:63:b6:2f: 3b:da:b5:43:ac:11:68:cc:3f:47:ea:00:36:9b:93: 9b:b6:14:68:d1:0a:4f:e2:c7:3b:0b:98:cc:f5:99: 12:2b:2c:fe:c7:64:fc:c1:d6:13:80:40:68:73:1b: 4f:bc:f7:e4:a6:24:89:3e:fc:31:a1:b3:11:4f:df: 33:17:73:da:b6:cd:06:dd:4b:c7:8e:4d:fb:a6:6e: ae:de:17:0c:b3:f9:ed:78:ec:80:65:a4:1a:22:b9: 8c:2a:27:72:34:b0:31:cf:9a:62:b2:a4:36:5f:26: dc:14:b9:be:45:2b:2a:58:b4:a7:b7:d0:b4:17:fe: 94:7d:cf:41:00:80:80:85:38:96:01:5d:04:3d:d1: 7d:b7:54:eb:0b:2b:0f:59:36:de:17:ed:55:da:85: c3:bd:b4:2a:df:30:ce:28:98:a9:ca:b3:ff:6f:fc: 89:ba:d3:3b:27:10:ad:1a:28:8c:07:eb:03:fc:8e: 79:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.208.0/24 91.213.215.0/24 91.213.217.0/24 91.213.220.0/24 IPv6: 2a0f:64c0::/29 Signature Algorithm: sha256WithRSAEncryption 7d:e6:0c:67:fa:7d:67:28:d2:c0:cb:32:dc:6d:b6:ef:ec:4e: c7:65:57:0f:b1:99:22:83:40:1e:84:dc:e8:9f:c3:d9:78:79: 7a:9b:50:dc:a7:e1:be:45:1f:56:3f:8d:b3:15:01:33:6c:cb: ca:c1:b1:80:5f:b4:dd:76:b2:1d:6b:9a:ce:c6:8e:64:41:7a: f1:45:06:b2:f4:4e:3d:5c:5b:c0:fb:79:68:82:09:93:a2:6e: b6:83:ea:30:fb:1b:ef:f3:51:87:a7:e0:be:0e:57:27:65:42: ea:95:ff:ab:79:8c:7b:3f:f2:b0:58:9c:54:02:9e:03:e8:f1: ec:b9:13:94:e1:95:6b:00:a2:f1:a4:09:c8:a1:d0:c6:31:7b: 88:3b:17:bc:a3:2f:ab:5d:0c:1a:2a:62:11:28:93:69:cb:65: 9d:9d:de:df:21:a8:e8:66:be:55:cf:29:31:e6:48:34:39:64: 60:12:8c:fd:f4:db:47:8e:59:45:8f:e6:11:6e:01:74:99:d2: a6:52:cf:bc:35:de:0c:85:b0:2d:38:f4:51:60:5e:ac:30:65: ad:c3:f8:b5:e2:43:b6:53:1d:df:27:97:5c:d2:c9:d4:26:4c: c3:bf:d7:d0:ea:89:91:5e:8d:61:ce:61:1c:e9:c7:33:af:93: c9:1c:26:96 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt7NrC/oOqF1A9WuFcbHxg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzVlNTI4NWRlZGMzNWFiNjM1MjcwNDhiMzY2ZWU1NTM4MDZjZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8yNpwKnDnyjt2tdcY8DiOWg6ClK ASejwge0vyiR8hOf2s+f/KjcWTe5cC9nY3ewVACaZKUFXinbSPMcGkX+yqP0a6Pw uNpjti872rVDrBFozD9H6gA2m5ObthRo0QpP4sc7C5jM9ZkSKyz+x2T8wdYTgEBo cxtPvPfkpiSJPvwxobMRT98zF3Pats0G3UvHjk37pm6u3hcMs/nteOyAZaQaIrmM KidyNLAxz5pisqQ2XybcFLm+RSsqWLSnt9C0F/6Ufc9BAICAhTiWAV0EPdF9t1Tr CysPWTbeF+1V2oXDvbQq3zDOKJipyrP/b/yJutM7JxCtGiiMB+sD/I55FwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFANeUoXe3DWrY1JwSLNm7lU4Bs4EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2YxOTQ0 Yi0xMDFhLTQxODEtYTM2Yi0yYzI3MDc3MzZmZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvZjE5NDRi LTEwMWEtNDE4MS1hMzZiLTJjMjcwNzczNmZkYi8xL0ExNVNoZDdjTmF0alVuQklz MmJ1VlRnR3pnUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAW9XQAwQAW9XXAwQAW9XZAwQAW9XcMA0EAgAC MAcDBQMqD2TAMA0GCSqGSIb3DQEBCwUAA4IBAQB95gxn+n1nKNLAyzLcbbbv7E7H ZVcPsZkig0AehNzon8PZeHl6m1Dcp+G+RR9WP42zFQEzbMvKwbGAX7TddrIda5rO xo5kQXrxRQay9E49XFvA+3loggmTom62g+ow+xvv81GHp+C+DlcnZULqlf+reYx7 P/KwWJxUAp4D6PHsuROU4ZVrAKLxpAnIodDGMXuIOxe8oy+rXQwaKmIRKJNpy2Wd nd7fIajoZr5Vzykx5kg0OWRgEoz99NtHjllFj+YRbgF0mdKmUs+8Nd4MhbAtOPRR YF6sMGWtw/i14kO2Ux3fJ5dc0snUJkzDv9fQ6omRXo1hzmEc6cczr5PJHCaW -----END CERTIFICATE-----Generated at Mon Feb 9 23:58:12 2026 by rpki-client