This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer File: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer (raw, json) Hash identifier: k0vuE3MSNjh9LbnMIxgxU0dQQYMpUTf0rWEOn4iLzJ8= Subject key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EBA6D61EE26416C28B4900BEABE633 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50229 AS: 64401 AS: 211119 IP: 83.142.96.0/21 IP: 89.251.208.0/20 IP: 109.71.144.0/21 IP: 178.20.104.0/21 IP: 185.126.24.0/22 IP: 2a00:ed20::/32 IP: 2a04:4900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a6:d6:1e:e2:64:16:c2:8b:49:00:be:ab:e6:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fefebd15fbc651487acaf67424f4783d43eb420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:b4:5a:21:93:0d:d6:25:91:ff:a2:97:ff: 73:7f:54:c1:6f:22:d8:38:b6:65:e6:e3:c4:26:c3: 2f:93:92:76:f2:15:f8:79:91:68:b3:12:d2:6b:1a: 46:bd:5c:b5:f3:4a:96:d4:09:98:d6:de:14:83:6c: 15:63:06:ec:0c:b7:14:e3:58:12:5a:80:7a:0b:9c: 31:a4:62:a0:41:0a:27:f8:9e:65:86:f5:fa:b9:a6: 91:f9:eb:9c:a1:01:28:c7:bf:ab:67:4a:a0:03:e0: f1:38:66:57:19:b6:98:1a:dd:80:6b:cf:6a:82:08: ef:da:f2:36:47:4f:51:24:0a:7a:91:76:22:e4:b3: f2:ed:bf:3a:57:0d:21:3b:aa:ec:19:1f:8c:0a:a9: 3a:4f:33:37:af:04:65:93:80:55:24:44:30:6c:5a: b1:a8:30:f4:f0:5c:a6:38:6d:a0:8d:5c:47:42:85: 3f:42:55:53:04:8b:82:d8:ce:ed:e6:26:11:2b:45: 62:f4:93:1d:ef:38:33:fd:7b:1f:79:44:d0:cd:b1: b2:78:5d:a7:4c:f7:c6:d7:98:45:29:c8:fb:58:96: 3b:b5:8f:3d:80:a2:fa:5c:a1:14:b2:f5:60:de:a7: 6c:e7:7c:0f:e9:5c:95:c7:9f:bc:3d:63:fb:23:09: 76:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.142.96.0/21 89.251.208.0/20 109.71.144.0/21 178.20.104.0/21 185.126.24.0/22 IPv6: 2a00:ed20::/32 2a04:4900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50229 64401 211119 Signature Algorithm: sha256WithRSAEncryption 3d:72:a5:1c:7c:77:d8:16:06:88:a4:e0:4a:89:5f:37:01:20: 82:e3:9a:50:73:f2:22:8f:70:fa:5d:25:41:71:c7:0d:0d:47: 76:81:3d:f9:f5:83:af:c7:f3:e0:76:df:eb:b2:4e:76:8c:f7: 54:ae:6d:66:d7:4b:fe:69:e5:e1:9e:d0:15:1b:78:4f:9c:80: 97:c8:3c:1d:2d:8d:fa:89:84:a7:38:73:22:1b:8c:b6:a3:f2: e9:e7:ec:b7:90:d1:1b:77:95:f7:7f:f5:bc:81:37:78:ea:f3: af:4e:0e:8d:56:fe:b0:13:cd:5c:4c:16:db:bc:7b:20:f3:6a: 56:02:96:df:b5:f4:e8:a7:26:4b:cf:34:ea:b1:78:29:09:d6: c1:de:fb:62:97:66:8d:88:ed:1b:7a:29:42:62:b7:bf:26:0d: e9:1c:26:a7:bc:eb:ea:0c:dd:fd:bd:2a:55:70:71:cc:99:89: 7d:bc:f8:e7:b0:00:f1:bb:a1:c3:b8:01:f7:d9:ac:da:91:f9: 67:30:31:d6:49:d9:ab:19:3e:4b:7e:fc:42:22:9b:b5:7a:cd: 82:c0:55:dd:0b:da:43:a2:bf:03:75:01:c9:85:22:6e:38:b2: dd:0d:fe:d1:35:cc:b6:56:6a:ea:2d:80:a1:fb:b1:63:9e:48: 56:97:2f:57 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt266bWHuJkFsKLSQC+q+YzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmVmZWJkMTVmYmM2NTE0ODdhY2FmNjc0MjRmNDc4M2Q0M2ViNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJq0WiGTDdYlkf+il/9zf1TBbyLY OLZl5uPEJsMvk5J28hX4eZFosxLSaxpGvVy180qW1AmY1t4Ug2wVYwbsDLcU41gS WoB6C5wxpGKgQQon+J5lhvX6uaaR+eucoQEox7+rZ0qgA+DxOGZXGbaYGt2Aa89q ggjv2vI2R09RJAp6kXYi5LPy7b86Vw0hO6rsGR+MCqk6TzM3rwRlk4BVJEQwbFqx qDD08FymOG2gjVxHQoU/QlVTBIuC2M7t5iYRK0Vi9JMd7zgz/XsfeUTQzbGyeF2n TPfG15hFKcj7WJY7tY89gKL6XKEUsvVg3qds53wP6VyVx5+8PWP7Iwl2FQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFH/v69FfvGUUh6yvZ0JPR4PUPrQgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzI2ZWY2 My1iNzJmLTRiM2MtOGRmYy0yYmM4NDUxOTIyN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvMjZlZjYz LWI3MmYtNGIzYy04ZGZjLTJiYzg0NTE5MjI3YS8xL2YtX3IwVi04WlJTSHJLOW5R azlIZzlRLXRDQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQDU45gAwQEWfvQAwQDbUeQAwQDshRoAwQCuX4Y MBQEAgACMA4DBQAqAO0gAwUDKgRJADAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMA xDUCAwD7kQIDAzivMA0GCSqGSIb3DQEBCwUAA4IBAQA9cqUcfHfYFgaIpOBKiV83 ASCC45pQc/Iij3D6XSVBcccNDUd2gT359YOvx/Pgdt/rsk52jPdUrm1m10v+aeXh ntAVG3hPnICXyDwdLY36iYSnOHMiG4y2o/Lp5+y3kNEbd5X3f/W8gTd46vOvTg6N Vv6wE81cTBbbvHsg82pWApbftfTopyZLzzTqsXgpCdbB3vtil2aNiO0beilCYre/ Jg3pHCanvOvqDN39vSpVcHHMmYl9vPjnsADxu6HDuAH32azakflnMDHWSdmrGT5L fvxCIpu1es2CwFXdC9pDor8DdQHJhSJuOLLdDf7RNcy2VmrqLYCh+7FjnkhWly9X -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:37 2026 by rpki-client