This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer File: _0DYouqWdjaeboF2eUkOTlBcifM.cer (raw, json) Hash identifier: Bl2/7SyfjaFWOUF7AkQpE3lkUPJJWFptLxawAoGOeU4= Subject key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED4671E7AD00F2A8FE9C81B783718A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35612 IP: 5.157.96.0/19 IP: 49.236.0.0/18 IP: 77.32.0.0/17 IP: 78.134.0.0/17 IP: 81.174.0.0/18 IP: 84.33.64.0 -- 84.33.191.255 IP: 88.147.0.0/17 IP: 88.149.128.0/17 IP: 128.116.128.0/17 IP: 146.241.0.0/16 IP: 147.53.128.0/17 IP: 185.11.20.0/22 IP: 212.124.160.0/19 IP: 216.247.128.0/18 IP: 2001:4c90::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:46:71:e7:ad:00:f2:a8:fe:9c:81:b7:83:71:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:4b:78:2b:c5:ba:cb:49:06:d4:98:ef:65: 2e:09:c7:6b:41:b0:d7:14:52:01:51:b7:4c:d6:77: a6:0b:c4:a9:c7:30:79:e9:e3:3a:92:e7:21:fb:94: ed:30:32:70:b0:8a:fa:7b:d5:57:dd:67:e3:d2:fb: 44:13:c6:c2:c4:8f:42:bb:09:50:87:4d:8d:1d:81: e0:c3:da:d5:3c:a6:e8:f4:91:90:aa:00:64:5f:c8: 7b:9b:fb:c6:d0:d1:ed:2a:75:38:d6:8e:58:85:35: a0:c4:a6:55:15:3a:2d:29:77:20:f4:d0:e6:48:bc: 68:c6:a9:e1:2e:f8:ac:6e:dc:38:bc:85:c1:7f:27: b4:5a:59:61:3f:56:71:8d:b4:d5:c9:fc:2c:6b:1a: a2:b8:86:c8:15:9a:ae:52:ca:88:e9:8b:da:73:b1: cc:88:b1:27:13:06:92:e5:e9:df:d5:30:82:da:bb: b1:4d:1a:ef:75:f2:57:8f:af:c4:25:ae:b4:9f:5d: aa:ab:20:72:0f:7a:34:63:1b:2d:ff:52:27:55:66: 9f:47:a1:cb:1e:bf:2c:a3:e0:08:cd:f5:b2:a8:a9: c2:4e:97:a4:fa:0a:ff:6b:a4:38:c6:05:55:2a:d7: 43:54:27:92:ae:94:8e:06:98:1a:a5:fe:a2:9a:61: 95:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.96.0/19 49.236.0.0/18 77.32.0.0/17 78.134.0.0/17 81.174.0.0/18 84.33.64.0-84.33.191.255 88.147.0.0/17 88.149.128.0/17 128.116.128.0/17 146.241.0.0/16 147.53.128.0/17 185.11.20.0/22 212.124.160.0/19 216.247.128.0/18 IPv6: 2001:4c90::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35612 Signature Algorithm: sha256WithRSAEncryption 44:3a:1a:33:38:7d:74:11:e8:e7:fc:f5:fd:74:c3:77:51:6b: 4d:b1:4b:b2:44:d5:b6:ba:0e:c8:2a:7c:81:2a:bf:ff:3b:b9: da:ea:fa:ed:ca:45:13:61:7f:4b:c7:f6:a1:35:b8:d6:87:e2: 86:16:e5:c2:87:55:cf:45:e3:97:e3:72:6a:de:7f:06:27:f2: 62:32:49:94:7c:9c:36:02:47:96:8e:61:ee:41:4f:d3:a3:09: 3b:9a:2c:04:01:1b:bc:d1:49:f4:84:59:99:31:0c:1c:51:40: bd:30:f6:e2:b0:52:a2:9e:96:d0:89:8d:ea:d0:67:79:9f:b0: 23:45:db:a2:b0:f0:f8:3f:e4:68:1e:64:48:0a:db:01:c9:e2: a7:df:26:43:c1:25:9c:7b:5f:19:22:66:26:76:62:86:c8:86: 23:f3:52:42:7e:d4:69:04:ff:4f:33:9c:00:9f:88:64:3b:03: 30:ca:2c:0a:30:e9:4c:07:3a:3b:b5:33:b8:9b:86:b8:2e:96: dc:a0:88:66:b3:e9:44:5c:dd:a4:b8:43:6f:53:01:ef:11:a5: 7d:49:2b:14:f2:27:81:b7:49:ff:a8:a2:b8:ab:d1:f8:f5:1f: 86:34:ec:ba:37:9a:a2:df:c8:4d:f5:0b:95:74:1f:b6:39:92: 9a:f5:fa:d4 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAZt57UZx560A8qj+nIG3g3GKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjQwZDhhMmVhOTY3NjM2OWU2ZTgxNzY3OTQ5MGU0ZTUwNWM4OWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJtLeCvFustJBtSY72UuCcdrQbDX FFIBUbdM1nemC8SpxzB56eM6kuch+5TtMDJwsIr6e9VX3Wfj0vtEE8bCxI9CuwlQ h02NHYHgw9rVPKbo9JGQqgBkX8h7m/vG0NHtKnU41o5YhTWgxKZVFTotKXcg9NDm SLxoxqnhLvisbtw4vIXBfye0WllhP1ZxjbTVyfwsaxqiuIbIFZquUsqI6Yvac7HM iLEnEwaS5enf1TCC2ruxTRrvdfJXj6/EJa60n12qqyByD3o0Yxst/1InVWafR6HL Hr8so+AIzfWyqKnCTpek+gr/a6Q4xgVVKtdDVCeSrpSOBpgapf6immGVwQIDAQAB o4IDBTCCAwEwHQYDVR0OBBYEFP9A2KLqlnY2nm6BdnlJDk5QXInzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzdhYmYz Yy0yOWYzLTQzYzgtOTc4ZS1iMDUwYzExMjkxMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvN2FiZjNj LTI5ZjMtNDNjOC05NzhlLWIwNTBjMTEyOTEyNi8xL18wRFlvdXFXZGphZWJvRjJl VWtPVGxCY2lmTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEF BQcBBwEB/wR0MHIwYQQCAAEwWwMEBQWdYAMEBjHsAAMEB00gAAMEB06GAAMEBlGu ADAMAwQGVCFAAwQGVCGAAwQHWJMAAwQHWJWAAwQHgHSAAwMAkvEDBAeTNYADBAK5 CxQDBAXUfKADBAbY94AwDQQCAAIwBwMFAyABTJAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAIscMA0GCSqGSIb3DQEBCwUAA4IBAQBEOhozOH10Eejn/PX9dMN3UWtN sUuyRNW2ug7IKnyBKr//O7na6vrtykUTYX9Lx/ahNbjWh+KGFuXCh1XPReOX43Jq 3n8GJ/JiMkmUfJw2AkeWjmHuQU/Towk7miwEARu80Un0hFmZMQwcUUC9MPbisFKi npbQiY3q0Gd5n7AjRduisPD4P+RoHmRICtsByeKn3yZDwSWce18ZImYmdmKGyIYj 81JCftRpBP9PM5wAn4hkOwMwyiwKMOlMBzo7tTO4m4a4LpbcoIhms+lEXN2kuENv UwHvEaV9SSsU8ieBt0n/qKK4q9H49R+GNOy6N5qi38hN9QuVdB+2OZKa9frU -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:58 2026 by rpki-client