This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer File: d411kki9lFxs44QujWQtzScxM00.cer (raw, json) Hash identifier: 0602wRQLlOkUK2nEwl80lxl6CQLULpn+Vt8qYAsfkMY= Subject key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C131CDA6AADE60F0D54EA23BAAEC115 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29203 IP: 192.162.76.0/22 IP: 2001:67c:1370::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1c:da:6a:ad:e6:0f:0d:54:ea:23:ba:ae:c1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=778d759248bd945c6ce3842e8d642dcd2731334d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:a3:30:11:4a:2e:62:96:4b:61:34:99:c9: 66:7a:33:b9:62:01:39:9d:9d:75:25:63:f7:35:8d: 5c:86:86:0b:44:21:34:cd:a7:c6:63:9c:c0:03:f1: 89:ef:c3:7b:80:bf:8d:54:c6:91:f6:37:76:ff:cf: 2f:73:81:50:aa:55:f7:da:d8:f8:90:01:c4:d7:31: c4:0f:c5:50:e9:21:38:c0:81:80:2d:7d:c8:f8:4c: 8c:47:00:87:a0:b0:a7:f7:3d:fe:d9:aa:c4:c5:ba: bd:10:e2:ab:f0:e6:f3:2a:b2:48:ef:5b:05:69:de: 61:a8:72:7b:03:8e:ce:a5:51:fc:40:1e:aa:6e:52: 24:18:8c:d9:db:55:76:93:20:f1:5e:02:95:de:a1: 0f:5a:ea:b2:6a:cb:21:b8:a9:ee:fc:28:9b:2d:f8: 16:a7:76:3b:05:fc:a8:1b:20:54:ba:91:a0:99:85: b8:bd:fa:4c:2d:46:c4:a9:0c:a0:70:d3:42:9f:5c: bf:48:b5:08:58:98:29:c9:63:66:b2:ac:66:cc:91: 8a:9a:ee:81:36:7e:07:af:48:ad:18:bb:67:e8:86: c2:35:85:c6:54:22:d1:b2:92:76:9b:e7:2f:4a:f0: 4b:34:bb:08:b9:f8:88:e0:0f:06:73:42:16:13:a6: 65:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.76.0/22 IPv6: 2001:67c:1370::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29203 Signature Algorithm: sha256WithRSAEncryption 92:f4:dc:79:3e:ec:ed:bf:44:2e:c2:c3:eb:bb:3f:9f:e2:5b: c5:b3:cc:86:54:08:95:5b:0e:66:e9:7a:63:26:e4:91:ba:fc: 3f:b7:74:05:e8:cb:4e:70:b4:57:0a:5c:eb:03:a8:43:ff:dd: 7e:82:59:90:32:76:8a:bf:66:ce:57:28:9a:b3:c3:80:b7:0f: 3b:a6:51:e9:df:7f:e2:b4:12:e0:56:20:de:6c:21:3b:4b:7c: bb:93:84:26:88:3a:b0:cc:12:ca:7e:2b:a4:cf:a6:3f:75:32: 53:09:9d:75:44:f7:1d:fc:75:ca:85:a2:11:33:92:2c:1e:52: bc:29:ee:14:9d:17:4f:88:25:d1:78:61:a7:e3:d5:25:35:62: 53:67:2c:a0:5a:f9:f2:cd:ba:c4:9d:56:48:e8:89:17:ad:88: 93:48:a8:a3:5f:d4:5a:f4:f1:94:36:8a:cb:86:c0:00:81:d2: 44:dd:11:16:d6:e9:9b:f6:67:f6:47:80:49:2b:e8:c4:33:6f: ca:8f:09:cf:02:a8:c7:57:78:89:0a:aa:9a:34:3b:95:f2:d6: 5d:b2:c9:49:90:a1:82:0a:5a:b0:34:f0:d6:03:6b:15:6f:f0: cd:0a:d0:d8:d1:08:f0:0e:2f:b9:64:1c:a3:74:28:7d:13:58: 3c:c9:d1:df -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt8Exzaaq3mDw1U6iO6rsEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzhkNzU5MjQ4YmQ5NDVjNmNlMzg0MmU4ZDY0MmRjZDI3MzEzMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwujMBFKLmKWS2E0mclmejO5YgE5 nZ11JWP3NY1choYLRCE0zafGY5zAA/GJ78N7gL+NVMaR9jd2/88vc4FQqlX32tj4 kAHE1zHED8VQ6SE4wIGALX3I+EyMRwCHoLCn9z3+2arExbq9EOKr8ObzKrJI71sF ad5hqHJ7A47OpVH8QB6qblIkGIzZ21V2kyDxXgKV3qEPWuqyasshuKnu/CibLfgW p3Y7BfyoGyBUupGgmYW4vfpMLUbEqQygcNNCn1y/SLUIWJgpyWNmsqxmzJGKmu6B Nn4Hr0itGLtn6IbCNYXGVCLRspJ2m+cvSvBLNLsIufiI4A8Gc0IWE6ZlmQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFHeNdZJIvZRcbOOELo1kLc0nMTNNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzU4MjI0 Mi0wMDk4LTRiM2YtODBiMC1kZmExYzliM2ZkMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNTgyMjQy LTAwOTgtNGIzZi04MGIwLWRmYTFjOWIzZmQxZi8xL2Q0MTFra2k5bEZ4czQ0UXVq V1F0elNjeE0wMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCwKJMMA8EAgACMAkDBwAgAQZ8E3AwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICchMwDQYJKoZIhvcNAQELBQADggEBAJL03Hk+7O2/ RC7Cw+u7P5/iW8WzzIZUCJVbDmbpemMm5JG6/D+3dAXoy05wtFcKXOsDqEP/3X6C WZAydoq/Zs5XKJqzw4C3DzumUenff+K0EuBWIN5sITtLfLuThCaIOrDMEsp+K6TP pj91MlMJnXVE9x38dcqFohEzkiweUrwp7hSdF0+IJdF4Yafj1SU1YlNnLKBa+fLN usSdVkjoiRetiJNIqKNf1Fr08ZQ2isuGwACB0kTdERbW6Zv2Z/ZHgEkr6MQzb8qP Cc8CqMdXeIkKqpo0O5Xy1l2yyUmQoYIKWrA08NYDaxVv8M0K0NjRCPAOL7lkHKN0 KH0TWDzJ0d8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:51 2026 by rpki-client