This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer File: D33TJ3nBqbKX4oywNf1nmrsZFtE.cer (raw, json) Hash identifier: okXjjxWX3Sv9sUhdihBkjQpir/DsUCbi4z6CWrZbv2w= Subject key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB52E2E8C7D449B7FCBD07C849A62D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.234.39.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:52:e2:e8:c7:d4:49:b7:fc:bd:07:c8:49:a6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f8:10:f4:19:40:8f:ab:ea:94:9e:16:5c:dd: a1:99:68:f1:32:c5:50:e1:68:05:90:ce:bb:5b:08: 4b:74:7c:9c:46:2e:5f:90:06:07:1f:ac:8f:99:95: ae:ff:25:97:a5:71:71:52:bd:f8:54:d4:ac:90:39: fa:e3:81:5d:e4:2c:25:09:39:05:64:b7:bf:0c:9a: 21:61:62:f8:ef:86:4f:26:c9:b5:4c:8c:7a:1c:f5: e1:be:00:94:b1:be:0b:7c:72:78:df:2c:f8:89:bc: fc:23:7a:07:ee:1b:36:a4:71:d1:cd:aa:ff:8a:2c: 80:cd:76:78:13:70:d5:c3:a6:28:01:31:65:74:e2: 49:ab:a0:c5:5e:bf:eb:02:ce:e7:26:09:12:f3:03: ad:b3:5e:90:26:8d:d7:27:0d:04:da:de:17:94:04: 52:0e:af:ea:01:4d:da:ec:62:b7:1a:b4:de:d1:d2: 79:6e:54:d5:4e:6f:25:01:2d:42:d2:a5:ed:63:f4: 6e:dc:de:03:0e:c6:72:44:c9:79:cd:f6:ac:ba:d0: 66:1b:8a:74:b7:cb:8a:fe:a2:e4:39:6e:c8:20:ba: d4:5b:bb:55:94:dd:da:bd:bd:7a:a4:cb:5c:ce:97: ec:fd:7a:be:83:6a:df:8f:38:c5:2d:c8:af:38:38: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.39.0/24 Signature Algorithm: sha256WithRSAEncryption 64:97:6a:f3:83:ea:a8:ea:98:04:bc:73:d3:6e:0c:3e:c3:c5: 35:06:5f:1a:26:d6:4e:1f:4a:83:c7:77:54:72:54:ac:f0:c6: 51:2e:41:a2:1e:88:ea:a7:0b:25:8f:40:7a:c3:32:44:87:8d: b3:ea:e4:da:be:4d:c6:03:40:dd:c4:89:3e:be:05:88:e5:07: 8d:5e:60:7a:52:53:a9:11:58:58:70:a7:92:f6:30:a5:87:8e: 30:32:d3:2a:cb:ef:6f:0c:3e:53:ad:de:89:2c:0e:52:d4:8b: e6:12:df:77:c8:eb:23:0a:5d:91:da:a8:19:88:13:3d:3c:a1: 28:de:2b:a8:7a:8b:4a:50:0f:ad:ae:98:d6:1f:d4:59:a5:1c: 68:5e:20:f1:9f:28:a2:11:c8:bc:9f:9d:38:61:fa:5c:78:e5: 84:1f:bb:b9:a8:7f:fb:6d:ca:b4:45:7e:66:a8:e1:3e:8a:2c: 7f:32:bc:8b:62:f6:b4:53:a2:3d:1e:3e:ec:74:c4:e6:8c:22: d7:c7:b5:f3:82:13:89:a0:00:00:3b:a5:24:fe:04:e1:8b:e9: 43:f5:62:3c:7e:3e:67:11:dd:57:1b:d2:c3:0d:5c:1a:64:05: de:51:59:23:d3:09:ae:88:ca:41:a1:5e:83:58:f6:a2:06:e3: d8:bf:61:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt261Li6MfUSbf8vQfISaYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjdkZDMyNzc5YzFhOWIyOTdlMjhjYjAzNWZkNjc5YWJiMTkxNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/gQ9BlAj6vqlJ4WXN2hmWjxMsVQ 4WgFkM67WwhLdHycRi5fkAYHH6yPmZWu/yWXpXFxUr34VNSskDn644Fd5CwlCTkF ZLe/DJohYWL474ZPJsm1TIx6HPXhvgCUsb4LfHJ43yz4ibz8I3oH7hs2pHHRzar/ iiyAzXZ4E3DVw6YoATFldOJJq6DFXr/rAs7nJgkS8wOts16QJo3XJw0E2t4XlARS Dq/qAU3a7GK3GrTe0dJ5blTVTm8lAS1C0qXtY/Ru3N4DDsZyRMl5zfasutBmG4p0 t8uK/qLkOW7IILrUW7tVlN3avb16pMtczpfs/Xq+g2rfjzjFLcivODgoRwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFA990yd5wamyl+KMsDX9Z5q7GRbRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzcyOTIx MC1kNzIwLTRmMzgtYjZiZS1hY2Y2NmY3OGIyYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNzI5MjEw LWQ3MjAtNGYzOC1iNmJlLWFjZjY2Zjc4YjJiNy8xL0QzM1RKM25CcWJLWDRveXdO ZjFubXJzWkZ0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+onMA0GCSqGSIb3DQEBCwUAA4IBAQBkl2rz g+qo6pgEvHPTbgw+w8U1Bl8aJtZOH0qDx3dUclSs8MZRLkGiHojqpwslj0B6wzJE h42z6uTavk3GA0DdxIk+vgWI5QeNXmB6UlOpEVhYcKeS9jClh44wMtMqy+9vDD5T rd6JLA5S1IvmEt93yOsjCl2R2qgZiBM9PKEo3iuoeotKUA+trpjWH9RZpRxoXiDx nyiiEci8n504YfpceOWEH7u5qH/7bcq0RX5mqOE+iix/MryLYva0U6I9Hj7sdMTm jCLXx7XzghOJoAAAO6Uk/gThi+lD9WI8fj5nEd1XG9LDDVwaZAXeUVkj0wmuiMpB oV6DWPaiBuPYv2HL -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:02 2026 by rpki-client