This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer File: CdR3O7Q9trKeh94C42U_p9jyb2U.cer (raw, json) Hash identifier: fqceepQ7k6sUy/W99H5p28JXlBzyndvw0qSOccMMgCg= Subject key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B71E974CA5EF27D9A8E1A47F1193B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56713 IP: 91.226.251.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:71:e9:74:ca:5e:f2:7d:9a:8e:1a:47:f1:19:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:a2:96:e5:39:b8:52:2b:f6:e0:cd:63:18: b4:d0:2d:1c:8f:9e:c3:15:a6:3d:70:77:a6:99:6b: a3:9c:60:ad:f5:30:bc:97:b5:dc:25:44:a4:eb:54: f2:88:37:5e:2c:4b:d9:dd:2c:3d:85:75:04:6f:98: d6:01:78:b5:89:41:98:da:bb:47:ce:3e:56:df:81: 9b:3d:dc:e1:3b:a6:e7:48:85:5d:28:16:b6:23:f9: f5:3f:18:2b:6d:c0:25:b2:0d:7c:1f:7e:61:89:d2: a3:ec:30:72:79:68:ea:c3:fa:b6:84:79:52:f6:66: 92:e8:38:23:a5:9b:c6:46:4d:17:a0:c8:e2:64:93: cb:d0:44:58:70:79:59:7a:c6:ce:0e:3b:2f:fd:f5: 0a:2e:e3:f7:6a:fe:80:3d:92:c9:f7:c9:33:cc:81: 82:68:d4:d0:c1:f5:0b:43:b4:ed:7b:7d:79:c0:6a: 5b:20:74:1d:ae:10:a0:e7:58:f3:4a:72:8d:f1:ac: 70:1b:c4:a5:c6:26:8c:8e:f6:0e:a8:3e:c6:dc:42: 7f:70:6c:30:d3:b3:a2:f0:db:65:50:b5:56:57:54: 12:c2:d1:ed:dd:a4:83:a0:1f:2d:d1:09:7e:43:d7: 9d:20:5d:48:83:22:49:21:60:99:f7:59:43:f1:4f: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.251.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56713 Signature Algorithm: sha256WithRSAEncryption 41:c6:da:a8:75:d2:00:4a:49:76:df:4b:6d:b6:dc:08:0e:9b: 1e:6c:75:11:06:86:20:18:63:d8:3a:20:3b:4b:e6:c7:52:9f: fb:15:55:06:fb:8e:4d:25:fd:6c:db:1a:5d:fa:65:8f:ea:98: 25:58:2a:27:da:34:55:8e:d3:c8:ed:83:55:fd:81:0c:cb:01: 63:cd:42:bc:31:64:65:38:09:01:01:09:de:f7:08:ff:cf:dc: 57:66:48:08:18:5d:88:e5:93:36:49:6b:14:3a:71:17:bf:46: ef:ae:9e:5b:62:67:aa:32:45:b0:0a:53:db:1c:e5:ee:db:0c: f0:02:4a:7f:67:52:92:d7:1e:89:f5:76:d2:b0:d0:19:53:c4: f3:b0:67:ac:d2:1a:32:42:d4:57:79:66:d9:23:f5:0a:cc:79: 69:89:46:3c:b3:3e:6d:55:04:39:c6:68:07:d7:d7:86:e5:01: 60:19:86:11:4d:2d:fe:55:dd:49:cf:93:ca:ae:2d:98:bc:b5: b9:11:ba:dc:e8:9d:80:34:ef:29:7b:9f:97:c4:39:e0:ff:47: b6:eb:36:ea:a0:78:dd:9a:8c:af:a5:fe:9e:67:96:a8:e5:46: 28:6f:29:bd:32:9b:7e:19:93:22:e5:42:9d:74:54:d4:46:b0: 81:7c:bf:ed -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9W3HpdMpe8n2ajhpH8Rk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWQ0NzczYmI0M2RiNmIyOWU4N2RlMDJlMzY1M2ZhN2Q4ZjI2ZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVuiluU5uFIr9uDNYxi00C0cj57D FaY9cHemmWujnGCt9TC8l7XcJUSk61TyiDdeLEvZ3Sw9hXUEb5jWAXi1iUGY2rtH zj5W34GbPdzhO6bnSIVdKBa2I/n1PxgrbcAlsg18H35hidKj7DByeWjqw/q2hHlS 9maS6DgjpZvGRk0XoMjiZJPL0ERYcHlZesbODjsv/fUKLuP3av6APZLJ98kzzIGC aNTQwfULQ7Tte315wGpbIHQdrhCg51jzSnKN8axwG8SlxiaMjvYOqD7G3EJ/cGww 07Oi8NtlULVWV1QSwtHt3aSDoB8t0Ql+Q9edIF1IgyJJIWCZ91lD8U8nIQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAnUdzu0PbaynofeAuNlP6fY8m9lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2MyZGM1 MC1mODk1LTQ3NTctYWU4Yi1hZmI1MDBhNDQ4MmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvYzJkYzUw LWY4OTUtNDc1Ny1hZThiLWFmYjUwMGE0NDgyYS8xL0NkUjNPN1E5dHJLZWg5NEM0 MlVfcDlqeWIyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+L7MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdiTANBgkqhkiG9w0BAQsFAAOCAQEAQcbaqHXSAEpJdt9LbbbcCA6bHmx1EQaG IBhj2DogO0vmx1Kf+xVVBvuOTSX9bNsaXfplj+qYJVgqJ9o0VY7TyO2DVf2BDMsB Y81CvDFkZTgJAQEJ3vcI/8/cV2ZICBhdiOWTNklrFDpxF79G766eW2JnqjJFsApT 2xzl7tsM8AJKf2dSktceifV20rDQGVPE87BnrNIaMkLUV3lm2SP1Csx5aYlGPLM+ bVUEOcZoB9fXhuUBYBmGEU0t/lXdSc+Tyq4tmLy1uRG63OidgDTvKXufl8Q54P9H tus26qB43ZqMr6X+nmeWqOVGKG8pvTKbfhmTIuVCnXRU1EawgXy/7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:33 2026 by rpki-client