This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer File: v60IrIYttq4LsLiArsBV7by7gvw.cer (raw, json) Hash identifier: Zd2j+R8ZA3Dp3mOnmUocBv0R/GydH/XJpu6oP+K83Wc= Subject key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9EA3D49E44861A4BC894903731EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 217.74.80.0/20 IP: 2a02:dd80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9e:a3:d4:9e:44:86:1a:4b:c8:94:90:37:31:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:53:4e:05:ff:55:19:8c:88:fc:8a:63:de:05: bb:d2:74:91:0a:09:8a:e5:ef:43:38:13:bc:0c:2c: ff:57:eb:65:32:f5:8a:6c:76:bd:d5:e1:7d:8d:fc: 3c:f7:b6:45:51:8e:c7:40:4d:44:67:6d:c9:42:4a: ec:f5:55:ce:79:29:84:f8:23:b2:1c:87:64:ec:cc: c4:45:36:b2:4a:9f:a1:35:f0:9b:b3:ca:a2:ef:24: 9a:cb:c2:f8:08:7f:59:17:2f:f7:30:4f:6d:e7:bb: 56:39:f1:9a:11:01:c4:b3:85:ec:a3:61:73:aa:d0: d7:94:73:f3:b2:4c:16:06:98:cb:59:75:44:24:a3: 18:b5:f3:7e:34:4f:38:b5:f8:01:87:95:ab:35:98: 49:00:2f:63:41:7d:eb:ed:4f:5e:c6:94:f8:20:8e: b6:2c:01:9d:59:04:be:70:87:58:17:69:23:f6:61: 19:d5:6c:55:27:66:ae:a3:9b:46:1d:e6:0a:6c:a1: 12:0c:a4:4f:c4:05:94:20:6e:4e:0a:c5:8a:ef:90: 84:fe:11:44:c4:30:f5:e2:ec:96:10:2c:0e:ba:9c: a0:19:7a:ac:fa:dd:e5:18:b4:6f:10:43:f8:2f:d3: e4:76:92:9b:e0:4b:54:66:8e:89:92:00:c8:35:a9: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.74.80.0/20 IPv6: 2a02:dd80::/29 Signature Algorithm: sha256WithRSAEncryption a3:90:87:53:ae:e1:aa:7f:d0:42:7f:4b:96:cf:4e:70:2e:05: 36:9c:a3:34:f0:38:8e:7f:ca:b5:dc:e8:90:49:96:e2:ab:49: c0:cb:0d:e0:62:c6:c8:b0:25:0b:09:2c:ec:94:9e:26:30:c2: 1b:3d:0f:66:10:ad:d9:0b:ba:14:a7:16:05:2f:38:77:4c:9d: b1:9e:99:ce:c0:84:2e:1e:55:40:ed:a2:62:04:cc:0d:5b:32: 54:3c:e0:59:73:5f:4d:8b:12:cb:e4:9b:e7:ee:d4:e5:d3:3c: 9d:79:22:e6:69:81:aa:b2:80:72:63:ec:59:eb:53:eb:f0:4a: ee:a1:bf:a5:87:3c:02:26:b0:97:00:d5:63:56:cb:5f:ba:d3: 69:83:76:72:dd:e4:af:ad:0a:6c:c5:8f:65:56:9d:c5:cc:6a: 2f:80:30:17:73:52:25:64:d1:a0:89:6a:e1:15:3a:78:fc:db: 32:24:1c:85:f8:56:15:67:d4:bb:de:81:77:30:20:f4:27:f0: c4:bd:61:51:3f:de:0e:e1:81:0c:4e:9d:cf:ee:d6:60:85:18: f6:8f:eb:ce:23:85:d1:bf:db:cd:89:bb:7e:ab:01:7a:b8:a1: 26:f9:ce:5f:d2:e6:73:a8:20:e5:40:ea:5c:0d:ec:8e:f3:3d: c5:50:58:81 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6W56j1J5EhhpLyJSQNzHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmFkMDhhYzg2MmRiNmFlMGJiMGI4ODBhZWMwNTVlZGJjYmI4MmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VNOBf9VGYyI/Ipj3gW70nSRCgmK 5e9DOBO8DCz/V+tlMvWKbHa91eF9jfw897ZFUY7HQE1EZ23JQkrs9VXOeSmE+COy HIdk7MzERTaySp+hNfCbs8qi7ySay8L4CH9ZFy/3ME9t57tWOfGaEQHEs4Xso2Fz qtDXlHPzskwWBpjLWXVEJKMYtfN+NE84tfgBh5WrNZhJAC9jQX3r7U9expT4II62 LAGdWQS+cIdYF2kj9mEZ1WxVJ2auo5tGHeYKbKESDKRPxAWUIG5OCsWK75CE/hFE xDD14uyWECwOupygGXqs+t3lGLRvEEP4L9PkdpKb4EtUZo6JkgDINanitQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFL+tCKyGLbauC7C4gK7AVe28u4L8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2Q1ZGM2 MS04ODJiLTQ2MzYtYWZmMS0xZmIzZjgxNzYwOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvZDVkYzYx LTg4MmItNDYzNi1hZmYxLTFmYjNmODE3NjA4Zi8xL3Y2MElySVl0dHE0THNMaUFy c0JWN2J5N2d2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQE2UpQMA0EAgACMAcDBQMqAt2AMA0GCSqGSIb3 DQEBCwUAA4IBAQCjkIdTruGqf9BCf0uWz05wLgU2nKM08DiOf8q13OiQSZbiq0nA yw3gYsbIsCULCSzslJ4mMMIbPQ9mEK3ZC7oUpxYFLzh3TJ2xnpnOwIQuHlVA7aJi BMwNWzJUPOBZc19NixLL5Jvn7tTl0zydeSLmaYGqsoByY+xZ61Pr8Eruob+lhzwC JrCXANVjVstfutNpg3Zy3eSvrQpsxY9lVp3FzGovgDAXc1IlZNGgiWrhFTp4/Nsy JByF+FYVZ9S73oF3MCD0J/DEvWFRP94O4YEMTp3P7tZghRj2j+vOI4XRv9vNibt+ qwF6uKEm+c5f0uZzqCDlQOpcDeyO8z3FUFiB -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:48 2026 by rpki-client