This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R0NPTmaYKfhsbea6PrDo9m2piLY.cer File: R0NPTmaYKfhsbea6PrDo9m2piLY.cer (raw, json) Hash identifier: DyyOS0RfnEYyPtFo195AmkFrF5xWEh7Fe7KWkVLVeRk= Subject key identifier: 47:43:4F:4E:66:98:29:F8:6C:6D:E6:BA:3E:B0:E8:F6:6D:A9:88:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC798C2D81D6F36A6CE8A73FE396704 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/R0NPTmaYKfhsbea6PrDo9m2piLY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:cb8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:98:c2:d8:1d:6f:36:a6:ce:8a:73:fe:39:67:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47434f4e669829f86c6de6ba3eb0e8f66da988b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:43:e3:6f:a4:c4:59:fb:52:94:ad:8f:92: 99:e8:36:2e:38:4c:d1:08:d7:44:83:33:e5:e4:48: 1c:78:f8:44:24:5b:f7:85:59:dd:1e:66:fa:3d:e2: 50:1f:f2:e5:24:d7:47:b4:01:92:cd:7b:91:12:40: 02:60:43:dd:0f:3d:7b:48:33:81:fb:24:90:fc:03: 3c:9e:86:53:c5:a8:f7:8e:3c:c5:80:b7:c9:20:b6: b0:ed:de:46:34:ab:26:56:52:50:4f:79:ea:8c:b9: 5e:bb:1a:4c:6a:c8:0e:5d:16:a6:e9:71:17:39:a8: 61:95:b8:ad:a3:26:d4:21:78:a4:9c:6f:18:62:49: 28:4e:43:c2:47:12:4a:0a:6f:ce:6a:3c:e3:46:64: d3:f6:a7:ba:2f:2e:38:ea:e0:a9:e6:88:a1:c8:21: ec:e2:3f:32:c1:2f:29:f9:67:b3:f4:b6:28:f6:ef: 6f:74:c9:f8:b3:a1:ca:75:e9:79:dd:7a:7c:7f:50: ec:24:bb:88:1e:b9:9f:0c:47:51:7b:dd:e1:90:53: 97:62:d2:fb:0b:62:8c:90:38:8c:f0:f7:da:1b:65: 8d:45:87:b5:26:94:b3:58:7c:a8:49:ce:61:d4:69: da:0e:ec:8d:8e:66:36:27:eb:62:2c:7f:db:17:92: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:43:4F:4E:66:98:29:F8:6C:6D:E6:BA:3E:B0:E8:F6:6D:A9:88:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f4522a-6155-40c6-bd89-5b9ffff082f1/1/R0NPTmaYKfhsbea6PrDo9m2piLY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:cb8::/48 Signature Algorithm: sha256WithRSAEncryption 80:38:c5:66:57:05:31:3e:79:93:4c:9c:09:a2:a0:38:c0:e7: 05:59:c8:0a:ba:b4:5d:75:d9:e8:ed:e2:0e:e3:ba:a8:22:cb: 0c:df:77:87:9c:b2:bb:f0:17:24:89:1a:39:e0:62:5e:4b:81: 83:bf:39:13:cc:13:ce:90:b9:67:14:ae:4b:94:1c:c2:70:c8: 61:62:bd:fc:ab:b2:9b:b5:bd:5f:67:57:68:0a:31:ec:5f:d3: a8:7f:1e:bf:d8:d7:e5:2d:b5:b7:3e:04:8c:51:3c:df:a3:82: ad:9c:be:eb:c3:7a:be:da:89:8c:4d:52:b6:c4:a5:3d:46:e0: a7:07:15:63:69:d3:e1:cb:eb:89:e4:d8:85:10:95:4f:59:24: 73:87:72:e8:9f:d3:b1:97:fe:df:2b:9e:18:b4:21:b6:92:14: 49:dc:96:e0:7e:30:e9:be:2d:bd:44:a3:4a:ae:b4:fe:61:5c: 0a:a5:b2:3a:45:6b:f3:33:2b:7d:42:d8:fc:74:87:fe:44:a8: e1:66:b9:00:0d:7f:4d:1d:b9:13:71:42:6b:8f:b5:d5:c0:de: 5e:c1:6a:07:8c:d0:37:2c:a2:4e:3e:a9:ff:3c:cb:05:f9:2c: 8e:0d:0c:ca:e1:cd:59:70:c8:9d:9a:ff:53:4f:a6:6f:f3:a1: 9d:98:00:92 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt6x5jC2B1vNqbOinP+OWcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzQzNGY0ZTY2OTgyOWY4NmM2ZGU2YmEzZWIwZThmNjZkYTk4OGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV9D42+kxFn7UpStj5KZ6DYuOEzR CNdEgzPl5EgcePhEJFv3hVndHmb6PeJQH/LlJNdHtAGSzXuREkACYEPdDz17SDOB +ySQ/AM8noZTxaj3jjzFgLfJILaw7d5GNKsmVlJQT3nqjLleuxpMasgOXRam6XEX OahhlbitoybUIXiknG8YYkkoTkPCRxJKCm/OajzjRmTT9qe6Ly446uCp5oihyCHs 4j8ywS8p+Wez9LYo9u9vdMn4s6HKdel53Xp8f1DsJLuIHrmfDEdRe93hkFOXYtL7 C2KMkDiM8PfaG2WNRYe1JpSzWHyoSc5h1GnaDuyNjmY2J+tiLH/bF5KtxQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFEdDT05mmCn4bG3muj6w6PZtqYi2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2Y0NTIy YS02MTU1LTQwYzYtYmQ4OS01YjlmZmZmMDgyZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvZjQ1MjJh LTYxNTUtNDBjNi1iZDg5LTViOWZmZmYwODJmMS8xL1IwTlBUbWFZS2Zoc2JlYTZQ ckRvOW0ycGlMWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAy4MA0GCSqGSIb3DQEBCwUAA4IBAQCA OMVmVwUxPnmTTJwJoqA4wOcFWcgKurRdddno7eIO47qoIssM33eHnLK78BckiRo5 4GJeS4GDvzkTzBPOkLlnFK5LlBzCcMhhYr38q7Kbtb1fZ1doCjHsX9Oofx6/2Nfl LbW3PgSMUTzfo4KtnL7rw3q+2omMTVK2xKU9RuCnBxVjadPhy+uJ5NiFEJVPWSRz h3Lon9Oxl/7fK54YtCG2khRJ3JbgfjDpvi29RKNKrrT+YVwKpbI6RWvzMyt9Qtj8 dIf+RKjhZrkADX9NHbkTcUJrj7XVwN5ewWoHjNA3LKJOPqn/PMsF+SyODQzK4c1Z cMidmv9TT6Zv86GdmACS -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:09 2026 by rpki-client