This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer File: 02v9kovMtCrZxGilUqtzk_3YcJU.cer (raw, json) Hash identifier: DTPRIPlrilvG4MPcGCF+NefYsTbrxYtjI3/QN80jUtg= Subject key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759106927732AA4DF2E9E1F7C865F62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25599 AS: 29063 AS: 29519 IP: 83.138.0.0/21 IP: 156.150.0.0/16 IP: 161.89.0.0 -- 161.90.255.255 IP: 192.68.230.0/24 IP: 193.138.100.0/24 IP: 212.25.192.0/19 IP: 212.159.192.0/18 IP: 2a01:8500::/32 IP: 2a02:8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:10:69:27:73:2a:a4:df:2e:9e:1f:7c:86:5f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:9c:eb:08:65:58:27:97:f0:b0:ce:60:fd: cf:2a:78:5d:a2:e9:2f:cd:ef:25:df:4f:7b:bc:20: 77:c1:6a:49:fe:7f:0f:82:99:23:dc:be:43:d7:69: 22:98:7f:1a:a1:99:cc:6d:eb:6f:dc:da:17:4f:cb: ca:0b:a0:d5:2b:c8:9f:73:6d:5d:db:51:da:06:76: df:70:90:60:73:bb:9d:a5:64:9b:67:ab:55:ca:ea: c2:64:61:41:42:cf:3e:f9:44:b4:97:c0:87:e0:da: d1:73:66:7d:9c:b3:79:9c:a2:9a:5f:b4:a8:32:c7: a9:74:fb:d5:00:38:75:2a:ce:2e:9d:8d:ca:f5:d5: 34:74:46:43:80:06:02:c4:2f:42:2e:20:8e:41:21: c9:8d:e5:34:3b:30:6c:fc:37:12:d6:07:57:9e:15: bc:81:65:aa:54:21:8b:48:93:4a:20:6f:bf:f0:08: 4d:01:71:86:5a:6f:ac:bb:2e:04:16:b7:3f:9e:7f: 1e:cc:cc:17:f7:30:af:a4:17:c5:b4:36:3e:06:0f: 64:89:5c:57:38:b3:e3:c0:82:4e:c2:97:24:d8:e1: c5:98:e4:01:2f:9d:2b:d2:24:c8:8f:b0:0a:7a:8b: a3:32:fd:19:5b:51:23:77:31:89:0e:59:85:26:0c: d0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.138.0.0/21 156.150.0.0/16 161.89.0.0-161.90.255.255 192.68.230.0/24 193.138.100.0/24 212.25.192.0/19 212.159.192.0/18 IPv6: 2a01:8500::/32 2a02:8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25599 29063 29519 Signature Algorithm: sha256WithRSAEncryption 25:61:0c:96:9c:4b:4f:8c:4f:16:41:c2:d6:98:75:e1:d7:27: 9f:38:1a:14:44:5e:cc:48:9d:9c:a5:36:ff:25:8e:84:b6:ad: 03:b6:09:e6:ef:82:41:65:da:bc:96:28:e2:4f:4e:cc:71:9e: 11:40:95:d1:9f:02:dc:c4:22:4f:f6:78:2a:a1:85:7a:75:da: ce:db:66:2c:5a:fc:d3:b5:9f:be:75:aa:be:80:16:c8:6c:50: 47:79:c8:76:52:f6:ba:b1:7d:93:2b:62:2f:f8:09:00:ef:ac: 10:ed:a0:a8:3a:f0:86:19:15:61:0c:dd:f1:3b:07:0d:33:e1: 17:0d:57:36:34:0a:fd:1b:00:2c:ab:9f:3f:d0:df:20:b4:d4: 04:72:90:4b:72:06:70:c6:ee:94:51:a4:32:21:e0:14:db:0d: 7e:ac:7e:63:5d:aa:e3:df:a2:5f:e8:59:37:db:05:9a:d8:57: d2:10:c0:0b:90:43:10:b9:4b:40:07:48:df:3c:f2:bf:c2:7e: 01:48:15:c8:d1:92:8c:fe:9d:08:e8:5a:e5:8e:32:3a:3c:a2: 9a:17:55:a0:02:ac:f6:97:7d:c0:3f:db:9f:ff:4f:2f:e8:92: e8:5b:ac:48:d8:2e:bd:d2:15:cb:8e:7d:a3:c3:d9:9e:91:04: b2:3b:78:29 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgISAZt3WRBpJ3MqpN8unh98hl9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzZiZmQ5MjhiY2NiNDJhZDljNDY4YTU1MmFiNzM5M2ZkZDg3MDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9Oc6whlWCeX8LDOYP3PKnhdoukv ze8l3097vCB3wWpJ/n8Pgpkj3L5D12kimH8aoZnMbetv3NoXT8vKC6DVK8ifc21d 21HaBnbfcJBgc7udpWSbZ6tVyurCZGFBQs8++US0l8CH4NrRc2Z9nLN5nKKaX7So MsepdPvVADh1Ks4unY3K9dU0dEZDgAYCxC9CLiCOQSHJjeU0OzBs/DcS1gdXnhW8 gWWqVCGLSJNKIG+/8AhNAXGGWm+suy4EFrc/nn8ezMwX9zCvpBfFtDY+Bg9kiVxX OLPjwIJOwpck2OHFmOQBL50r0iTIj7AKeoujMv0ZW1EjdzGJDlmFJgzQRwIDAQAB o4IC5jCCAuIwHQYDVR0OBBYEFNNr/ZKLzLQq2cRopVKrc5P92HCVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2M3YWEy YS0wOTBjLTRmNzctOWQ2OS1hNzRlNGE4ODc4MDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvYzdhYTJh LTA5MGMtNGY3Ny05ZDY5LWE3NGU0YTg4NzgwNC8xLzAydjlrb3ZNdENyWnhHaWxV cXR6a18zWWNKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA1BAIAATAvAwQDU4oAAwMAnJYwCgMDAKFZAwMAoVoDBADAROYD BADBimQDBAXUGcADBAbUn8AwFAQCAAIwDgMFACoBhQADBQAqAgAIMCEGCCsGAQUF BwEIAQH/BBIwEKAOMAwCAmP/AgJxhwICc08wDQYJKoZIhvcNAQELBQADggEBACVh DJacS0+MTxZBwtaYdeHXJ584GhREXsxInZylNv8ljoS2rQO2CebvgkFl2ryWKOJP TsxxnhFAldGfAtzEIk/2eCqhhXp12s7bZixa/NO1n751qr6AFshsUEd5yHZS9rqx fZMrYi/4CQDvrBDtoKg68IYZFWEM3fE7Bw0z4RcNVzY0Cv0bACyrnz/Q3yC01ARy kEtyBnDG7pRRpDIh4BTbDX6sfmNdquPfol/oWTfbBZrYV9IQwAuQQxC5S0AHSN88 8r/CfgFIFcjRkoz+nQjoWuWOMjo8opoXVaACrPaXfcA/25//Ty/okuhbrEjYLr3S FcuOfaPD2Z6RBLI7eCk= -----END CERTIFICATE-----Generated at Sun Jan 25 21:21:03 2026 by rpki-client