This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer File: phFtBD5EtAQUTmpC0mqp2vU9BKc.cer (raw, json) Hash identifier: Eu0RXqR1aD/b4cIXI1bo49gIAmqyAqK/K3ymv2OPep4= Subject key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759138BC37C442971C6FC7DCC8A9FE2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42518 IP: 91.192.188.0/22 IP: 91.215.120.0/22 IP: 2001:67c:19f0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:13:8b:c3:7c:44:29:71:c6:fc:7d:cc:8a:9f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:0b:7c:67:bb:1b:0b:42:fc:aa:c0:ab:98: 80:bc:d5:eb:e4:77:5e:e6:de:9b:19:bf:a3:d8:4f: ff:6b:a6:41:80:d5:61:fc:5f:1d:f9:7c:a6:31:3a: fa:71:90:11:c0:50:f3:a8:34:d7:5f:94:73:3b:d9: 88:55:86:23:be:20:16:bd:bb:4c:dd:cf:ad:37:10: 3b:a4:5e:fa:55:5e:37:e5:90:50:de:d8:63:6f:3d: 62:64:51:8e:d8:37:10:5d:23:44:70:7c:26:02:4f: ac:78:ee:56:05:b4:4f:75:cf:a3:c8:16:0e:c3:6f: c7:ac:4a:39:62:7f:17:ad:f9:0d:09:93:fd:34:bd: 3c:69:b3:8d:59:27:d0:87:d0:ca:a6:a6:54:d9:51: 36:f2:e6:52:57:13:ce:21:5e:35:73:1c:13:0c:e4: 01:d5:05:f3:f4:d1:1a:d0:7c:ed:f3:3a:9a:d4:d8: 7f:49:d7:f1:50:74:61:40:6f:cb:79:95:92:de:96: e7:d5:5d:7c:d3:5a:b2:66:11:e3:0e:75:cc:4e:f0: ce:4a:cf:c5:77:8b:37:be:f6:c3:d2:72:49:89:80: 6d:10:6a:84:83:44:09:67:7d:51:0a:74:91:d5:13: f1:e1:c9:33:12:be:b9:76:3b:71:80:1f:ed:f9:d4: 0f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.188.0/22 91.215.120.0/22 IPv6: 2001:67c:19f0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42518 Signature Algorithm: sha256WithRSAEncryption 9c:89:f5:7c:19:f0:4e:e6:ab:ed:14:ca:4e:d7:34:bc:82:bb: 10:d9:47:d4:eb:52:5b:6f:dc:25:ec:40:e2:e5:7c:5a:ba:fd: 49:54:ca:4d:cc:7f:52:49:e7:85:c8:76:f1:57:c2:0a:dd:81: 11:33:19:40:8b:36:53:30:72:dc:2b:e0:82:36:76:88:e0:c9: ef:e0:43:d1:0c:dd:0f:16:45:8e:25:07:2a:3f:f6:bd:3b:09: ad:06:35:89:35:e8:94:61:83:26:ff:45:c9:8d:46:cf:a1:be: 8f:62:3f:ce:2e:d2:d3:ed:07:b0:ae:b4:01:b9:1d:36:b7:93: 52:b6:33:45:6b:2f:3b:86:5e:87:71:74:4a:13:1f:b9:55:74: ae:73:d0:68:72:64:39:fe:2e:1e:78:a3:3a:2c:fb:5b:28:eb: 70:67:12:2c:51:ad:80:ce:58:dd:2b:9d:15:5d:0b:5e:05:f6: 0d:78:8b:80:b7:e7:6a:35:7d:61:23:d7:16:b0:af:ce:7c:36: 5c:4f:b4:2a:1f:fb:82:6e:81:35:0d:13:12:c5:b1:69:ad:8f: ca:0b:43:8e:9a:c7:1a:ba:56:a8:aa:e5:d3:11:69:1a:d2:9e: 11:05:ac:65:d0:ba:42:3f:9e:41:94:7d:00:2e:36:32:bc:81: b2:2c:9b:41 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt3WROLw3xEKXHG/H3Mip/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjExNmQwNDNlNDRiNDA0MTQ0ZTZhNDJkMjZhYTlkYWY1M2QwNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+oLfGe7GwtC/KrAq5iAvNXr5Hde 5t6bGb+j2E//a6ZBgNVh/F8d+XymMTr6cZARwFDzqDTXX5RzO9mIVYYjviAWvbtM 3c+tNxA7pF76VV435ZBQ3thjbz1iZFGO2DcQXSNEcHwmAk+seO5WBbRPdc+jyBYO w2/HrEo5Yn8XrfkNCZP9NL08abONWSfQh9DKpqZU2VE28uZSVxPOIV41cxwTDOQB 1QXz9NEa0Hzt8zqa1Nh/SdfxUHRhQG/LeZWS3pbn1V1801qyZhHjDnXMTvDOSs/F d4s3vvbD0nJJiYBtEGqEg0QJZ31RCnSR1RPx4ckzEr65djtxgB/t+dQPfwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFKYRbQQ+RLQEFE5qQtJqqdr1PQSnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzI1MGRj OC0wNzAxLTQyN2EtYTg5ZC00M2Y1YmNmNjc3NWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMjUwZGM4 LTA3MDEtNDI3YS1hODlkLTQzZjViY2Y2Nzc1ZC8xL3BoRnRCRDVFdEFRVVRtcEMw bXFwMnZVOUJLYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQCW8C8AwQCW9d4MA8EAgACMAkDBwAgAQZ8GfAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKYWMA0GCSqGSIb3DQEBCwUAA4IBAQCc ifV8GfBO5qvtFMpO1zS8grsQ2UfU61Jbb9wl7EDi5Xxauv1JVMpNzH9SSeeFyHbx V8IK3YERMxlAizZTMHLcK+CCNnaI4Mnv4EPRDN0PFkWOJQcqP/a9OwmtBjWJNeiU YYMm/0XJjUbPob6PYj/OLtLT7QewrrQBuR02t5NStjNFay87hl6HcXRKEx+5VXSu c9BocmQ5/i4eeKM6LPtbKOtwZxIsUa2AzljdK50VXQteBfYNeIuAt+dqNX1hI9cW sK/OfDZcT7QqH/uCboE1DRMSxbFprY/KC0OOmscaulaoquXTEWka0p4RBaxl0LpC P55BlH0ALjYyvIGyLJtB -----END CERTIFICATE-----Generated at Mon Jan 26 13:47:34 2026 by rpki-client