This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer File: d0TGtvujc4EeAL7khOIkxrbiP9I.cer (raw, json) Hash identifier: lCaEDqU0m6lmDQEiGRxq5HEbdFTt6zVQ1ICKCjXMvsQ= Subject key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834B151FC666272958637BA9329981D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49232 IP: 37.123.224.0/21 IP: 193.169.164.0/23 IP: 194.169.225.0/24 IP: 2a00:59c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b1:51:fc:66:62:72:95:86:37:ba:93:29:98:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a8:98:73:42:e0:78:7e:c8:6f:91:31:8b:2a: f3:17:da:97:f0:27:17:c4:59:c6:2a:54:40:2b:1a: 78:c7:aa:93:87:af:06:04:0d:03:de:f8:16:b6:a4: e8:52:c7:05:f2:14:49:20:b9:6c:36:0a:98:6c:17: e6:7b:f3:d5:1f:73:78:ba:09:0b:eb:ea:55:66:01: f3:6f:8b:c0:ce:04:5b:43:40:81:d5:98:0f:a5:bd: 0c:ca:a6:f7:c7:bc:e9:26:3b:ca:0b:74:a8:92:ef: 2f:e9:ac:83:ae:6d:d6:01:36:4b:4c:e2:b2:12:e4: c0:9e:2d:9e:fd:4a:ca:80:fe:9c:3d:03:7b:42:11: 85:7f:64:5e:f6:61:39:33:db:1f:9b:e5:2a:05:15: 74:9c:7b:0f:5d:58:e5:b3:51:be:ef:4e:aa:c0:15: 2d:d1:13:47:39:4d:76:48:da:76:76:66:f9:23:c0: a5:7a:41:e5:c8:21:29:d6:83:07:0a:1b:6c:68:6d: 77:73:23:e5:23:6e:5c:b6:37:a9:7f:95:f9:8b:7b: b0:45:ce:b8:85:74:d1:d4:1b:44:e5:c3:11:bd:4b: 63:06:fb:4b:d7:92:16:c5:f7:ee:b0:08:90:a8:46: 6d:09:49:f7:d3:0e:e5:44:de:fb:83:05:f7:1d:bf: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.123.224.0/21 193.169.164.0/23 194.169.225.0/24 IPv6: 2a00:59c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49232 Signature Algorithm: sha256WithRSAEncryption 5f:a5:b5:e7:13:91:ed:43:7e:6e:c4:90:03:50:13:55:73:63: 1f:45:25:4a:af:b5:08:48:63:f9:ac:d5:55:d2:56:d3:e0:f2: 6a:52:dd:65:fe:bb:d6:18:de:a8:d4:f3:4c:b3:65:26:77:c6: 22:57:d5:6d:4d:61:8a:47:04:5c:4f:1d:d6:ce:df:15:3d:ae: 11:92:a7:8c:3c:1f:dc:79:ce:53:38:bb:f2:29:28:97:68:77: 99:a1:ac:cf:07:fb:52:7b:23:52:de:f7:9b:2e:73:84:d5:97: 48:c9:ef:58:d8:b3:40:0d:bc:10:85:47:84:88:05:96:74:1b: 93:b3:b8:50:73:68:59:8a:9f:d9:dc:2b:b2:04:3d:4e:1d:6b: 24:60:6b:62:95:c4:87:e5:dd:7d:61:20:01:65:bf:07:ab:b7: e8:74:22:2a:5e:e2:1a:9c:4c:94:3d:6f:12:45:60:c6:af:7c: 4b:c6:1a:3e:7c:73:3d:7e:cf:f7:b9:f6:51:d4:42:e2:59:0c: e5:3e:1a:d7:f9:e7:0b:eb:52:b5:1a:9b:db:a2:fb:9d:cd:a8: 62:b0:fc:b8:f2:d5:90:03:47:9f:55:da:54:5a:1d:5e:0c:dd: f2:de:e6:d6:3d:4c:65:a1:dd:48:ef:0b:8d:7c:29:c7:81:ee: 80:99:24:88 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4NLFR/GZicpWGN7qTKZgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzQ0YzZiNmZiYTM3MzgxMWUwMGJlZTQ4NGUyMjRjNmI2ZTIzZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqiYc0LgeH7Ib5ExiyrzF9qX8CcX xFnGKlRAKxp4x6qTh68GBA0D3vgWtqToUscF8hRJILlsNgqYbBfme/PVH3N4ugkL 6+pVZgHzb4vAzgRbQ0CB1ZgPpb0Myqb3x7zpJjvKC3Soku8v6ayDrm3WATZLTOKy EuTAni2e/UrKgP6cPQN7QhGFf2Re9mE5M9sfm+UqBRV0nHsPXVjls1G+706qwBUt 0RNHOU12SNp2dmb5I8ClekHlyCEp1oMHChtsaG13cyPlI25ctjepf5X5i3uwRc64 hXTR1BtE5cMRvUtjBvtL15IWxffusAiQqEZtCUn30w7lRN77gwX3Hb+3UwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHdExrb7o3OBHgC+5ITiJMa24j/SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzc0NGRm My04ZTI5LTQ1OGItYTQ1OS04ZjhjODkyMjZlM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvNzQ0ZGYz LThlMjktNDU4Yi1hNDU5LThmOGM4OTIyNmUzZS8xL2QwVEd0dnVqYzRFZUFMN2to T0lreHJiaVA5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDJXvgAwQBwamkAwQAwqnhMA0EAgACMAcDBQAq AFnAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDAUDANBgkqhkiG9w0BAQsFAAOC AQEAX6W15xOR7UN+bsSQA1ATVXNjH0UlSq+1CEhj+azVVdJW0+DyalLdZf671hje qNTzTLNlJnfGIlfVbU1hikcEXE8d1s7fFT2uEZKnjDwf3HnOUzi78ikol2h3maGs zwf7UnsjUt73my5zhNWXSMnvWNizQA28EIVHhIgFlnQbk7O4UHNoWYqf2dwrsgQ9 Th1rJGBrYpXEh+XdfWEgAWW/B6u36HQiKl7iGpxMlD1vEkVgxq98S8YaPnxzPX7P 97n2UdRC4lkM5T4a1/nnC+tStRqb26L7nc2oYrD8uPLVkANHn1XaVFodXgzd8t7m 1j1MZaHdSO8LjXwpx4HugJkkiA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:48 2026 by rpki-client