This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer File: a0P3ovQ2ixel4DXOS9km-KFC1os.cer (raw, json) Hash identifier: sdkUePhkzpKLU9XzE/AwKB/YPytTunioHIWy27GoNxA= Subject key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B76D85633C4A903A16D4339A669A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 83.97.80.0/21 IP: 185.40.216.0/22 IP: 185.163.92.0/22 IP: 193.25.102.0/23 IP: 2a0b:7800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:76:d8:56:33:c4:a9:03:a1:6d:43:39:a6:69:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:c8:b2:14:b5:f6:c8:3f:d0:4e:82:f5:7e: 93:a4:51:39:cf:e4:37:46:a4:07:11:e2:aa:41:94: 19:78:f9:e5:5d:72:58:c4:50:bd:69:af:35:46:0c: 3e:16:19:e0:ab:3e:58:7e:cb:a7:f8:0e:03:27:5b: 8e:10:46:a3:02:3f:ef:13:55:95:c4:cf:7c:9b:4c: ae:72:45:11:a8:76:a9:b4:52:c3:0e:3f:e3:ec:f3: a2:32:fa:64:a7:fe:3d:98:18:fa:2f:e1:38:1d:68: d2:dd:d0:3d:8f:1d:ec:11:2b:42:58:32:50:8d:30: 07:4f:88:e5:44:04:d8:fb:c1:ba:9f:e9:c6:bc:57: fb:89:04:bd:cb:fa:57:02:16:56:40:bc:c6:c6:06: 81:ee:65:98:06:4b:f2:6a:f4:dc:9b:92:87:c2:c5: df:9e:ef:57:c0:73:bf:23:f1:b3:0c:4b:db:2b:60: 68:07:4d:2a:f2:61:02:7e:64:b4:9f:68:7d:88:cb: c1:74:ed:fd:58:c5:8f:f3:62:03:65:47:fc:9e:c6: 81:bf:e1:f8:46:93:b1:f2:26:e3:e1:6b:1b:e2:da: 9f:a4:bd:8f:44:08:8e:79:d2:5b:ab:ad:51:e0:3c: 09:8c:bc:27:9a:57:5a:66:94:5e:4d:e1:aa:91:55: 34:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.80.0/21 185.40.216.0/22 185.163.92.0/22 193.25.102.0/23 IPv6: 2a0b:7800::/29 Signature Algorithm: sha256WithRSAEncryption 49:bc:80:c2:16:3c:23:06:a9:6a:95:71:4c:91:b1:42:6f:b0: f8:b2:b4:49:73:cd:33:9a:33:d5:34:d5:f8:3e:5d:37:bf:ad: 72:a0:c8:4a:98:4f:08:63:82:0e:03:5f:bb:89:43:cc:66:de: c3:e0:7e:61:b8:5e:f3:6f:e8:67:58:0c:d3:32:61:e5:26:01: 32:d6:07:5a:d5:b4:96:6a:42:a4:e9:08:4f:a8:1b:83:ec:b5: 5d:be:7e:b5:f3:8d:17:65:eb:0e:28:d1:bf:46:dc:4c:30:33: 89:2c:9d:a9:3c:b0:79:d2:8c:29:57:fe:43:ff:7e:00:2f:bf: 40:7f:91:46:ed:0e:eb:28:e4:c6:2e:c2:85:2e:5e:08:b1:85: 4a:95:90:e1:8c:7a:42:77:23:c6:a9:70:f5:de:aa:bb:2e:cd: ab:fc:b3:d1:f8:a1:ed:42:ff:07:7f:ee:04:17:57:a7:8b:91: 93:d6:f8:a0:6b:61:d9:82:d7:e0:22:e7:4c:df:b4:85:de:68: b2:dd:2a:79:f7:59:e6:36:56:0e:c1:c1:71:ce:be:44:27:8a: 85:a6:5a:e3:66:79:fe:bc:0f:52:c0:28:5a:62:6f:68:c7:77: 5d:60:3b:01:68:43:c0:d5:f8:fb:d4:7d:e6:2f:51:93:cd:d8: de:eb:c2:d6 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt6W3bYVjPEqQOhbUM5pmmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjQzZjdhMmY0MzY4YjE3YTVlMDM1Y2U0YmQ5MjZmOGExNDJkNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTPIshS19sg/0E6C9X6TpFE5z+Q3 RqQHEeKqQZQZePnlXXJYxFC9aa81Rgw+Fhngqz5Yfsun+A4DJ1uOEEajAj/vE1WV xM98m0yuckURqHaptFLDDj/j7POiMvpkp/49mBj6L+E4HWjS3dA9jx3sEStCWDJQ jTAHT4jlRATY+8G6n+nGvFf7iQS9y/pXAhZWQLzGxgaB7mWYBkvyavTcm5KHwsXf nu9XwHO/I/GzDEvbK2BoB00q8mECfmS0n2h9iMvBdO39WMWP82IDZUf8nsaBv+H4 RpOx8ibj4Wsb4tqfpL2PRAiOedJbq61R4DwJjLwnmldaZpReTeGqkVU0awIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFGtD96L0NosXpeA1zkvZJvihQtaLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2JhN2Ri YS00NzRhLTQyZmQtYTljMy0zNWIwMzEzNmRkMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYmE3ZGJh LTQ3NGEtNDJmZC1hOWMzLTM1YjAzMTM2ZGQwMy8xL2EwUDNvdlEyaXhlbDREWE9T OWttLUtGQzFvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDU2FQAwQCuSjYAwQCuaNcAwQBwRlmMA0EAgAC MAcDBQMqC3gAMA0GCSqGSIb3DQEBCwUAA4IBAQBJvIDCFjwjBqlqlXFMkbFCb7D4 srRJc80zmjPVNNX4Pl03v61yoMhKmE8IY4IOA1+7iUPMZt7D4H5huF7zb+hnWAzT MmHlJgEy1gda1bSWakKk6QhPqBuD7LVdvn61840XZesOKNG/RtxMMDOJLJ2pPLB5 0owpV/5D/34AL79Af5FG7Q7rKOTGLsKFLl4IsYVKlZDhjHpCdyPGqXD13qq7Ls2r /LPR+KHtQv8Hf+4EF1eni5GT1viga2HZgtfgIudM37SF3miy3Sp591nmNlYOwcFx zr5EJ4qFplrjZnn+vA9SwChaYm9ox3ddYDsBaEPA1fj71H3mL1GTzdje68LW -----END CERTIFICATE-----Generated at Mon Jan 26 22:12:13 2026 by rpki-client