This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer File: ORl1rVfOt2WtlIvl60w4LcdIRMA.cer (raw, json) Hash identifier: erU3CcEgpr1L9ngz01qpewYkjDgKKeKKjRFoLImSeb8= Subject key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA714F1EA66B7FB5F405B8B299A544D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.243.24.0/22 IP: 2a0c:ff80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:14:f1:ea:66:b7:fb:5f:40:5b:8b:29:9a:54:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:ab:68:10:6d:39:a3:8b:69:3f:be:12:62: d6:32:44:c4:63:11:0a:74:f1:98:06:fb:9a:d8:b1: bc:02:ca:c2:f9:56:ba:14:9d:f7:53:e6:f5:61:8a: 7a:c7:72:12:53:e3:55:95:92:bd:53:44:8b:9d:85: fc:aa:31:8d:9d:3b:4e:5c:68:71:4d:25:a9:e9:06: e0:1d:93:28:d2:b4:bc:5e:65:77:98:56:d5:91:77: 31:bb:0a:7e:56:79:12:1d:ec:8d:36:db:cd:d3:db: ce:0b:e1:e3:52:c5:8d:0b:eb:42:55:d1:8a:49:e0: fc:3d:fa:ea:35:7f:33:9d:4d:82:19:be:9f:97:18: 79:14:34:27:bc:6b:a7:67:0e:97:82:6d:85:8c:8f: f1:eb:3c:85:0d:44:a8:b3:3f:39:76:67:c9:e2:d6: c7:d0:72:83:c8:58:0b:3d:f7:47:ca:f4:ea:65:1a: 92:cf:d8:1f:4c:b9:83:1d:66:2e:28:59:19:a0:b9: 97:83:9b:52:5a:88:89:f1:5a:bd:2e:46:bc:98:22: fa:05:51:8a:59:73:9e:ce:c2:3e:60:9d:86:a3:2e: ad:56:eb:ea:04:a5:dd:14:a4:a2:84:11:0c:76:fa: 48:00:fe:b1:17:78:85:25:fe:bc:2a:ea:a8:92:a0: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.24.0/22 IPv6: 2a0c:ff80::/29 Signature Algorithm: sha256WithRSAEncryption 86:76:0e:a8:f9:be:37:fb:22:ed:0a:ed:f0:47:92:9f:aa:57: 39:9c:6b:65:b4:a7:20:2d:8a:ac:91:d5:61:90:8c:88:97:4b: 07:b0:b2:c3:57:25:f9:7b:86:83:2b:49:de:72:11:0c:12:0f: 93:09:d3:cc:5f:da:0a:4a:6a:94:e2:1f:5d:6c:82:68:f4:1a: 12:a2:6d:d7:1d:a1:25:52:00:ed:77:55:b2:5f:32:4e:74:87: 6a:9b:55:e1:d9:10:e0:35:34:e3:4b:1f:a9:48:d2:48:1e:43: ab:69:f6:6b:aa:3e:f4:f8:2e:ad:7b:c8:d9:81:47:71:a0:4e: 14:21:3c:ef:91:a0:b1:55:3f:62:d3:05:e1:c1:c9:7b:1d:74: 3e:78:6e:8e:e0:d8:f1:4f:bb:97:c8:27:44:63:13:34:10:7d: a5:fd:9a:63:24:7d:41:ca:9b:15:f6:28:fa:d0:fd:ae:4a:f3: 4c:bc:1e:87:41:b3:83:3a:13:82:38:97:f8:34:64:aa:2f:3b: b9:64:05:61:30:a0:1c:fc:10:cb:79:1a:17:74:d6:9b:63:b4: 65:91:12:70:97:a8:c7:82:ef:f4:bd:00:81:94:a8:bb:6d:a7: 67:b0:f1:bd:82:e3:26:da:6f:7a:27:d4:a5:01:ed:7e:ce:45: 6f:6c:6b:2b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pxTx6ma3+19AW4spmlRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTE5NzVhZDU3Y2ViNzY1YWQ5NDhiZTVlYjRjMzgyZGM3NDg0NGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNiraBBtOaOLaT++EmLWMkTEYxEK dPGYBvua2LG8AsrC+Va6FJ33U+b1YYp6x3ISU+NVlZK9U0SLnYX8qjGNnTtOXGhx TSWp6QbgHZMo0rS8XmV3mFbVkXcxuwp+VnkSHeyNNtvN09vOC+HjUsWNC+tCVdGK SeD8PfrqNX8znU2CGb6flxh5FDQnvGunZw6Xgm2FjI/x6zyFDUSosz85dmfJ4tbH 0HKDyFgLPfdHyvTqZRqSz9gfTLmDHWYuKFkZoLmXg5tSWoiJ8Vq9Lka8mCL6BVGK WXOezsI+YJ2Goy6tVuvqBKXdFKSihBEMdvpIAP6xF3iFJf68KuqokqBK5wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDkZda1XzrdlrZSL5etMOC3HSETAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzZiNTA2 NC04ZDVlLTRjOTQtYjViZC0wNTAyMDQ1MzIyODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNmI1MDY0 LThkNWUtNGM5NC1iNWJkLTA1MDIwNDUzMjI4Ni8xL09SbDFyVmZPdDJXdGxJdmw2 MHc0TGNkSVJNQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufMYMA0EAgACMAcDBQMqDP+AMA0GCSqGSIb3 DQEBCwUAA4IBAQCGdg6o+b43+yLtCu3wR5Kfqlc5nGtltKcgLYqskdVhkIyIl0sH sLLDVyX5e4aDK0nechEMEg+TCdPMX9oKSmqU4h9dbIJo9BoSom3XHaElUgDtd1Wy XzJOdIdqm1Xh2RDgNTTjSx+pSNJIHkOrafZrqj70+C6te8jZgUdxoE4UITzvkaCx VT9i0wXhwcl7HXQ+eG6O4NjxT7uXyCdEYxM0EH2l/ZpjJH1BypsV9ij60P2uSvNM vB6HQbODOhOCOJf4NGSqLzu5ZAVhMKAc/BDLeRoXdNabY7RlkRJwl6jHgu/0vQCB lKi7badnsPG9guMm2m96J9SlAe1+zkVvbGsr -----END CERTIFICATE-----Generated at Mon Jan 26 19:18:03 2026 by rpki-client