This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer File: d2ijHlyKWogiWYmhuu9KOBM4YBo.cer (raw, json) Hash identifier: sCJo5+fHMIP8B4JmSVf0RBA2AgmT6c3NvU28UbLai5w= Subject key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15DB92888C58A5E86E362EA6058E0F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42012 IP: 194.36.162.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:db:92:88:8c:58:a5:e8:6e:36:2e:a6:05:8e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7768a31e5c8a5a88225989a1baef4a381338601a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:85:cb:d6:9a:49:ae:92:8f:d9:65:4e:d7:f2: 7d:a1:11:63:bc:2e:2c:69:5d:33:68:87:ca:37:83: 25:f6:40:1b:d2:33:23:ee:c8:20:db:15:72:d7:14: a4:e5:83:bf:71:46:fd:15:8d:09:24:97:6e:17:81: d8:44:99:b5:18:c9:c9:04:4d:2c:60:41:35:4d:80: 91:3f:e6:65:b6:2f:a8:b0:2a:a4:59:30:d1:74:b8: ca:64:5d:15:76:08:ac:cc:59:9e:6e:4d:ad:69:14: da:f9:06:55:64:4f:64:6c:81:aa:ec:9c:81:4d:83: 62:ca:ec:20:de:dd:e6:fc:3f:23:4e:7b:be:59:55: 25:8a:43:06:41:7d:39:ff:36:6c:c7:fa:59:0e:0b: ba:24:1b:ad:de:40:b6:8a:6b:5f:c1:f2:04:66:90: db:c8:28:d0:05:f8:20:cb:f8:76:16:85:d4:58:42: 52:24:1b:26:e7:ff:71:fb:c7:28:86:fd:f4:a2:10: a3:7c:02:f6:e2:cf:1e:26:f5:29:57:de:3d:df:56: be:d1:4f:55:35:ce:c3:40:58:51:ef:fc:a1:34:47: a3:af:3f:aa:34:3f:cf:05:69:d9:9b:0a:eb:5c:16: b3:fd:22:3b:86:af:07:2e:92:52:4b:f8:4f:08:ea: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.162.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42012 Signature Algorithm: sha256WithRSAEncryption 15:52:6c:67:9c:c9:36:5e:55:9f:5d:05:82:e7:64:11:48:66: 5a:39:9c:79:e5:c9:10:d1:d1:bf:37:b5:8f:16:d5:4d:30:68: aa:e7:26:a8:36:05:e7:b4:56:06:1c:57:72:b2:4a:cd:bf:96: ba:85:4a:9a:5b:cc:7c:8e:74:27:6d:cd:e1:dc:7d:b8:3e:05: 5b:be:ac:ed:f4:3e:f8:a1:69:1c:03:fd:0a:28:70:d0:e1:70: 73:ab:4c:10:e1:16:48:2b:e3:07:d9:8e:5b:9d:58:63:72:97: 55:5a:4f:6d:b6:fb:7b:32:f9:56:7e:04:7b:a3:b1:58:75:0c: a5:5a:d7:61:a7:b8:f5:8a:d9:8b:c3:e3:09:fb:66:f7:6e:f6: 05:bd:1a:7d:e0:45:b6:a0:4b:ce:1b:88:c7:20:1d:14:60:92: a4:0d:cd:7d:fc:4d:8f:46:1d:cd:fc:5e:cc:ed:92:6f:af:99: 17:bc:99:e7:c2:79:bc:c7:7d:d9:90:7e:39:55:01:55:39:92: 9f:cd:91:d9:03:46:f5:4d:e0:d6:b0:d7:40:df:8c:38:8d:c0: 04:ee:c9:dd:38:2f:8a:dc:ff:5c:6c:7b:f3:08:20:c1:a9:d6: ff:db:2f:97:1b:c7:af:bc:b6:7d:bd:42:1b:3d:78:9f:5d:4e: 74:f8:01:97 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FduSiIxYpehuNi6mBY4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzY4YTMxZTVjOGE1YTg4MjI1OTg5YTFiYWVmNGEzODEzMzg2MDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54XL1ppJrpKP2WVO1/J9oRFjvC4s aV0zaIfKN4Ml9kAb0jMj7sgg2xVy1xSk5YO/cUb9FY0JJJduF4HYRJm1GMnJBE0s YEE1TYCRP+Zlti+osCqkWTDRdLjKZF0VdgiszFmebk2taRTa+QZVZE9kbIGq7JyB TYNiyuwg3t3m/D8jTnu+WVUlikMGQX05/zZsx/pZDgu6JBut3kC2imtfwfIEZpDb yCjQBfggy/h2FoXUWEJSJBsm5/9x+8cohv30ohCjfAL24s8eJvUpV94931a+0U9V Nc7DQFhR7/yhNEejrz+qND/PBWnZmwrrXBaz/SI7hq8HLpJSS/hPCOpEdQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHdoox5cilqIIlmJobrvSjgTOGAaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2UzMDUw ZS05OTk0LTRiOTYtYmM3OS03NjZlYWQ3ZTY1MTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvZTMwNTBl LTk5OTQtNGI5Ni1iYzc5LTc2NmVhZDdlNjUxMy8xL2QyaWpIbHlLV29naVdZbWh1 dTlLT0JNNFlCby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwiSiMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCkHDANBgkqhkiG9w0BAQsFAAOCAQEAFVJsZ5zJNl5Vn10FgudkEUhmWjmceeXJ ENHRvze1jxbVTTBoqucmqDYF57RWBhxXcrJKzb+WuoVKmlvMfI50J23N4dx9uD4F W76s7fQ++KFpHAP9Cihw0OFwc6tMEOEWSCvjB9mOW51YY3KXVVpPbbb7ezL5Vn4E e6OxWHUMpVrXYae49YrZi8PjCftm9272Bb0afeBFtqBLzhuIxyAdFGCSpA3NffxN j0YdzfxezO2Sb6+ZF7yZ58J5vMd92ZB+OVUBVTmSn82R2QNG9U3g1rDXQN+MOI3A BO7J3Tgvitz/XGx78wggwanW/9svlxvHr7y2fb1CGz14n11OdPgBlw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:50 2026 by rpki-client