This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer File: d11030Q8uAUXzkFQ3OImYpQPHXw.cer (raw, json) Hash identifier: tJe7f8ghlxP/KUA/CSYFPHR8q62NQfYXRRzpoSu1qBk= Subject key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA328D9838496B9A4FD6ECC1EF4BE2D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58116 IP: 193.0.170.0/23 IP: 2001:678:568::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:28:d9:83:84:96:b9:a4:fd:6e:cc:1e:f4:be:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=775d74df443cb80517ce4150dce22662940f1d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:08:1c:67:59:60:7b:07:38:db:b3:5c:ad: a8:61:18:bc:2d:c3:28:2b:f9:77:ea:52:d0:02:05: 7d:77:07:66:36:42:8a:69:de:dc:eb:5b:4e:68:e8: b9:4f:9d:65:18:a2:b0:e5:a2:a7:aa:22:24:7a:1a: be:c5:1b:a4:79:c6:f0:e7:24:27:79:d7:b0:b5:98: cd:00:ad:a7:47:96:18:4f:14:6e:2c:9b:cd:c9:34: 6a:d6:2b:27:03:d9:d5:80:15:bb:c0:35:bc:5e:cd: 53:c1:79:b1:e3:04:57:6a:64:0f:1f:87:49:c0:10: 22:be:d4:36:ca:70:3f:f1:a3:5d:20:b6:aa:63:aa: b9:09:5c:3b:16:69:51:9f:54:7f:bc:4e:ec:9c:3a: f7:16:b3:ec:41:f4:5b:af:35:56:db:fc:bf:fb:ed: cc:e9:cb:c4:d2:fd:2d:0a:37:ff:f4:0c:a3:b8:90: a9:e2:dd:2c:11:9c:e9:46:ca:7e:69:8e:fd:f3:52: a3:6e:ba:5f:c2:dc:f3:47:91:9f:e2:3a:e2:2d:39: 28:df:61:98:f3:1f:32:03:17:8c:84:b2:cf:fe:17: bd:64:c6:9d:60:93:bb:bb:4f:82:a2:8b:db:26:52: 3f:5a:03:05:49:1c:9d:8b:d7:4e:97:18:ca:0a:49: a4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.170.0/23 IPv6: 2001:678:568::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58116 Signature Algorithm: sha256WithRSAEncryption 07:cf:d5:a2:8c:74:98:ee:b8:07:60:a5:f7:d8:b9:05:cc:dc: ab:4e:a7:fe:73:bd:c7:13:45:88:5f:f2:69:6c:76:54:0f:ee: 3d:de:d8:44:69:f3:60:91:b3:02:3a:39:7b:47:42:af:06:64: 91:ac:38:2a:3e:b7:b4:8c:49:8c:95:a0:17:1b:4f:46:a2:51: 3b:f7:2e:0b:a2:01:88:81:35:49:62:ed:17:57:5e:26:1e:23: d4:d8:93:ad:76:0e:c8:b7:4d:a8:8b:ec:0a:dc:ad:86:f6:d0: c9:80:ff:10:58:98:31:60:f8:f5:c8:b4:78:5b:45:c3:9f:07: d1:c3:82:c9:15:33:df:34:99:d8:d4:2c:1d:a0:e8:ba:92:56: ff:7a:c6:58:1e:f3:45:29:60:28:0e:64:29:5a:5e:a3:46:dd: 80:09:c3:15:93:9f:ce:cc:48:c4:d6:5b:6f:58:ae:4e:60:b4: fe:30:11:53:c8:13:bc:d2:46:a0:64:72:6d:3f:1e:04:79:bd: 62:ee:c5:6f:0f:1d:18:54:66:33:32:bf:4e:02:00:af:ef:62: 31:a9:55:5a:da:04:e2:27:c9:57:84:3c:06:4b:20:c9:0d:b1: e0:d4:31:fe:c9:20:77:de:61:9f:7f:69:9d:e6:7f:12:c3:6f: 3e:79:53:c4 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7oyjZg4SWuaT9bswe9L4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzVkNzRkZjQ0M2NiODA1MTdjZTQxNTBkY2UyMjY2Mjk0MGYxZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2YIHGdZYHsHONuzXK2oYRi8LcMo K/l36lLQAgV9dwdmNkKKad7c61tOaOi5T51lGKKw5aKnqiIkehq+xRukecbw5yQn edewtZjNAK2nR5YYTxRuLJvNyTRq1isnA9nVgBW7wDW8Xs1TwXmx4wRXamQPH4dJ wBAivtQ2ynA/8aNdILaqY6q5CVw7FmlRn1R/vE7snDr3FrPsQfRbrzVW2/y/++3M 6cvE0v0tCjf/9AyjuJCp4t0sEZzpRsp+aY7981KjbrpfwtzzR5Gf4jriLTko32GY 8x8yAxeMhLLP/he9ZMadYJO7u0+CoovbJlI/WgMFSRydi9dOlxjKCkmkCQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFHdddN9EPLgFF85BUNziJmKUDx18MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzFjNzdi Ny1iODJhLTRkZmQtYjZiNS02Zjc1ODYxOTgzN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMWM3N2I3 LWI4MmEtNGRmZC1iNmI1LTZmNzU4NjE5ODM3Zi8xL2QxMTAzMFE4dUFVWHprRlEz T0ltWXBRUEhYdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwQCqMA8EAgACMAkDBwAgAQZ4BWgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAOMEMA0GCSqGSIb3DQEBCwUAA4IBAQAHz9WijHSY 7rgHYKX32LkFzNyrTqf+c73HE0WIX/JpbHZUD+493thEafNgkbMCOjl7R0KvBmSR rDgqPre0jEmMlaAXG09GolE79y4LogGIgTVJYu0XV14mHiPU2JOtdg7It02oi+wK 3K2G9tDJgP8QWJgxYPj1yLR4W0XDnwfRw4LJFTPfNJnY1CwdoOi6klb/esZYHvNF KWAoDmQpWl6jRt2ACcMVk5/OzEjE1ltvWK5OYLT+MBFTyBO80kagZHJtPx4Eeb1i 7sVvDx0YVGYzMr9OAgCv72IxqVVa2gTiJ8lXhDwGSyDJDbHg1DH+ySB33mGff2md 5n8Sw28+eVPE -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:06 2026 by rpki-client