This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer File: c90olFaK69Ba1kMtU89w4s14jm4.cer (raw, json) Hash identifier: XGJmgeUGy1njuR2xsGUiHhNSO7Wy9qPs/C5Im+4nXKc= Subject key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1C969F9D68F35707B16B02C67CF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49984 IP: 5.199.232.0/21 IP: 178.210.128.0/19 IP: 185.42.128.0/22 IP: 2a01:a240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1c:96:9f:9d:68:f3:57:07:b1:6b:02:c6:7c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:43:79:22:2d:3d:37:d8:6e:2e:fa:a6:9a: 57:df:21:61:3c:3e:fc:af:e0:54:37:51:ab:26:9f: cf:30:55:f7:79:0d:b4:09:58:83:28:fe:8f:07:f7: d6:cc:23:e2:54:16:1b:19:84:51:91:d3:bf:6e:99: 38:14:d5:6e:13:79:fd:76:70:79:58:ae:a0:f1:b2: 1a:1d:b9:c8:9a:d2:b7:d5:ac:81:f7:6f:fa:9f:4a: dd:8c:05:73:34:9e:62:c5:17:0b:0a:cd:24:4c:84: 3f:53:9e:06:37:23:be:56:59:40:e3:1b:e3:be:b1: 26:51:8d:92:b6:22:42:d0:4e:e3:09:50:d6:43:0f: 8f:31:32:6c:04:22:db:4c:15:11:3c:a5:00:83:b2: f6:ff:4b:da:5d:de:41:c3:63:2a:8e:86:87:63:2d: 61:28:a6:a4:7b:23:f5:bd:34:09:8f:78:2d:0a:df: dd:be:89:a9:78:f0:3f:0c:5a:26:5c:11:05:87:67: d2:cb:15:1b:a9:2c:98:01:51:0d:da:25:a7:1c:36: 6f:28:aa:8e:af:2c:9c:2f:fd:29:3d:f2:b3:97:ae: b8:fd:3c:d4:15:c2:0d:2b:f1:11:b9:16:13:7a:16: 0c:89:d7:99:93:f6:fd:a2:b7:b4:63:9d:2f:17:f7: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.232.0/21 178.210.128.0/19 185.42.128.0/22 IPv6: 2a01:a240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49984 Signature Algorithm: sha256WithRSAEncryption 4c:73:7d:b9:df:d5:fd:4d:dc:c7:09:a2:86:1c:ef:f9:d7:ac: 00:14:d2:e3:41:e2:f2:01:39:b7:e2:4c:4d:fd:f1:84:e0:03: 61:1b:70:b2:99:f1:37:97:84:f6:90:f6:63:e6:a5:00:57:69: af:e7:e2:ca:73:77:8e:bd:a2:ba:02:0d:35:d8:1f:c5:a0:a2: 58:9f:05:da:e0:f2:98:d2:23:f2:0b:65:8e:72:83:7d:ff:dc: 65:fe:8c:23:83:1b:67:97:6a:b3:ee:07:c2:5b:7d:e3:fb:a1: 0b:26:90:f2:05:09:59:50:f7:37:c4:12:25:2f:32:a3:f7:6e: bc:69:52:5f:85:8b:07:1d:c4:80:e9:e8:af:cd:1a:53:b3:5a: 74:d7:46:e7:26:20:d4:61:5c:82:33:d0:a5:f8:ee:0d:45:5e: 1f:42:0b:a8:aa:a5:b2:e4:99:94:b2:d1:e2:e9:a6:7c:59:d9: 5e:23:a4:b4:ff:ee:74:07:af:8f:5b:3c:91:66:f0:11:c2:80: ef:3b:6b:ae:c3:3f:bb:99:94:7c:36:a6:4d:33:e3:2e:a9:88: 25:fb:f6:e8:de:5b:e0:a6:58:4d:33:59:c7:a5:04:18:82:e2: 18:d2:3a:32:0e:bb:9a:29:0d:78:7d:ea:00:06:25:16:e5:df: a8:33:35:45 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt6WxyWn51o81cHsWsCxnzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2RkMjg5NDU2OGFlYmQwNWFkNjQzMmQ1M2NmNzBlMmNkNzg4ZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XtDeSItPTfYbi76pppX3yFhPD78 r+BUN1GrJp/PMFX3eQ20CViDKP6PB/fWzCPiVBYbGYRRkdO/bpk4FNVuE3n9dnB5 WK6g8bIaHbnImtK31ayB92/6n0rdjAVzNJ5ixRcLCs0kTIQ/U54GNyO+VllA4xvj vrEmUY2StiJC0E7jCVDWQw+PMTJsBCLbTBURPKUAg7L2/0vaXd5Bw2MqjoaHYy1h KKakeyP1vTQJj3gtCt/dvompePA/DFomXBEFh2fSyxUbqSyYAVEN2iWnHDZvKKqO ryycL/0pPfKzl664/TzUFcINK/ERuRYTehYMideZk/b9ore0Y50vF/cV3wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHPdKJRWiuvQWtZDLVPPcOLNeI5uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2ExZDIw ZS01MGEyLTQ0ZGMtYjFlOC1hNjdkY2E4YTA4OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvYTFkMjBl LTUwYTItNDRkYy1iMWU4LWE2N2RjYThhMDg4Yy8xL2M5MG9sRmFLNjlCYTFrTXRV ODl3NHMxNGptNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDBcfoAwQFstKAAwQCuSqAMA0EAgACMAcDBQAq AaJAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDDQDANBgkqhkiG9w0BAQsFAAOC AQEATHN9ud/V/U3cxwmihhzv+desABTS40Hi8gE5t+JMTf3xhOADYRtwspnxN5eE 9pD2Y+alAFdpr+fiynN3jr2iugINNdgfxaCiWJ8F2uDymNIj8gtljnKDff/cZf6M I4MbZ5dqs+4Hwlt94/uhCyaQ8gUJWVD3N8QSJS8yo/duvGlSX4WLBx3EgOnor80a U7NadNdG5yYg1GFcgjPQpfjuDUVeH0ILqKqlsuSZlLLR4ummfFnZXiOktP/udAev j1s8kWbwEcKA7ztrrsM/u5mUfDamTTPjLqmIJfv26N5b4KZYTTNZx6UEGILiGNI6 Mg67mikNeH3qAAYlFuXfqDM1RQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:06 2026 by rpki-client