This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer (raw, json) Hash identifier: Dgyy+GePj7aBzON25O3+HJG5cOG2sR7Wvem886FvJOg= Subject key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3400A6A040DE0B3CEA71C8F44229C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57442 IP: 91.232.21.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:40:0a:6a:04:0d:e0:b3:ce:a7:1c:8f:44:22:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e9:65:5c:3b:a7:4a:b0:eb:79:8e:f1:9b:33: 10:f4:a9:ad:96:d0:1e:ca:e3:ef:b4:4b:91:48:17: d3:9e:76:54:b2:4b:26:b1:9f:af:64:78:7f:6f:a6: 15:f2:21:a3:52:b1:93:a8:0e:37:5d:24:56:7a:0b: 0e:86:c8:9b:58:6c:51:0a:b2:ff:99:3c:56:db:b9: 71:c4:0e:8c:f3:5f:7d:69:65:62:24:12:f9:db:83: 6d:1d:8f:49:35:c1:62:de:a3:99:a6:d4:f0:27:a1: 6a:5c:b0:d8:0b:e1:48:af:8a:89:65:c0:ad:8c:f7: 7c:a9:3b:22:8c:d4:cb:45:ae:ef:3e:d6:95:a2:82: 2d:d3:06:e2:e0:3c:57:5d:44:d9:fe:4a:8d:de:ba: 2d:cc:9a:74:4e:88:69:a5:f3:bb:fe:c0:f1:18:42: 13:ac:31:03:b2:4a:2c:15:20:73:31:a9:1c:69:c0: 9c:2e:91:83:bb:ef:e2:7f:21:bf:6b:31:9f:e7:da: ee:97:a4:81:88:34:44:15:31:73:44:39:a4:3b:e1: 79:0f:65:96:8b:e3:05:e8:96:95:76:85:d8:d4:7e: 32:c0:1a:a0:67:7a:e0:43:d9:c7:ca:20:11:53:f9: c6:08:f9:56:51:a4:ba:1e:83:89:45:4a:37:86:1d: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.21.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57442 Signature Algorithm: sha256WithRSAEncryption 75:b9:26:99:d6:44:14:1c:a2:e6:3b:72:09:d4:c4:38:04:61: dd:65:cb:25:c5:1f:38:af:b2:4c:79:27:03:95:cf:9b:5e:0b: 2d:29:c1:f9:9b:22:52:72:32:e0:a4:c2:49:d2:d3:ea:f7:0b: 92:7e:28:6f:f5:fe:60:3d:18:63:d3:4a:54:37:c6:f1:5b:6c: 1d:41:43:ba:c7:fb:6c:a2:54:e0:13:ee:49:e5:76:e6:fa:90: b6:c7:b8:f2:fb:72:5c:37:2b:a5:d5:fe:2b:79:49:3a:f4:18: 11:ae:2a:06:14:8c:bc:f4:57:e5:39:f1:2f:0a:58:ca:0d:c7: 07:0d:42:65:15:cd:5d:63:7f:42:c6:1e:80:53:d7:2a:fa:12: 84:23:ca:76:c7:e5:2c:26:9f:52:2d:c1:36:c7:ed:3c:eb:34: 78:7d:00:65:d7:1b:39:14:0f:39:45:a5:f7:6a:68:5f:18:5c: c3:aa:4b:7c:46:ef:9d:67:81:38:58:32:af:0d:a3:d6:f3:a0: c5:2c:05:f7:64:93:0b:8b:fb:73:7f:c8:29:0c:b8:a9:0e:43: b8:66:4d:78:30:26:39:ec:57:63:46:98:fc:87:80:bf:17:88: 46:88:2c:f8:51:d1:e8:a2:85:c8:df:62:5d:8d:a4:1c:c2:39: 9d:5e:fa:a2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7o0AKagQN4LPOpxyPRCKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDEwY2RkMGI4YjczMzA0Yzk4NWZkZTFiMTBlNDAxODJiZjEzOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+llXDunSrDreY7xmzMQ9KmtltAe yuPvtEuRSBfTnnZUsksmsZ+vZHh/b6YV8iGjUrGTqA43XSRWegsOhsibWGxRCrL/ mTxW27lxxA6M8199aWViJBL524NtHY9JNcFi3qOZptTwJ6FqXLDYC+FIr4qJZcCt jPd8qTsijNTLRa7vPtaVooIt0wbi4DxXXUTZ/kqN3rotzJp0TohppfO7/sDxGEIT rDEDskosFSBzMakcacCcLpGDu+/ifyG/azGf59rul6SBiDREFTFzRDmkO+F5D2WW i+MF6JaVdoXY1H4ywBqgZ3rgQ9nHyiARU/nGCPlWUaS6HoOJRUo3hh3PIwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFK0QzdC4tzMEyYX94bEOQBgr8TkCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4L2RlYjg3 NC1mOTBiLTQyYzQtYmNkMi00N2JiZjIxZWFjOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvZGViODc0 LWY5MGItNDJjNC1iY2QyLTQ3YmJmMjFlYWM5Zi8xL3JSRE4wTGkzTXdUSmhmM2hz UTVBR0N2eE9RSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+gVMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDgYjANBgkqhkiG9w0BAQsFAAOCAQEAdbkmmdZEFByi5jtyCdTEOARh3WXLJcUf OK+yTHknA5XPm14LLSnB+ZsiUnIy4KTCSdLT6vcLkn4ob/X+YD0YY9NKVDfG8Vts HUFDusf7bKJU4BPuSeV25vqQtse48vtyXDcrpdX+K3lJOvQYEa4qBhSMvPRX5Tnx LwpYyg3HBw1CZRXNXWN/QsYegFPXKvoShCPKdsflLCafUi3BNsftPOs0eH0AZdcb ORQPOUWl92poXxhcw6pLfEbvnWeBOFgyrw2j1vOgxSwF92STC4v7c3/IKQy4qQ5D uGZNeDAmOexXY0aY/IeAvxeIRogs+FHR6KKFyN9iXY2kHMI5nV76og== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:50 2026 by rpki-client