This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer File: 0DjDOLEo-Drewvadk8MsU1PKA5g.cer (raw, json) Hash identifier: 571yDnzsStAqY55JVUolARvIpoG7XoCbwcvuilnps3k= Subject key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDAD97FBA61F737AF028ED94C8A7B1BC8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 10:00:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.206.64.0/18 IP: 130.60.0.0/16 IP: 185.207.117.0 -- 185.207.119.255 IP: 192.12.247.0/24 IP: 192.41.132.0 -- 192.41.136.255 IP: 2001:67c:16dc::/48 IP: 2a0b:2040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:d9:7f:ba:61:f7:37:af:02:8e:d9:4c:8a:7b:1b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 10:00:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d038c338b128f83adec2f69d93c32c5353ca0398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:34:dc:ab:71:fe:4d:6e:d0:74:94:41:90: 93:9d:e5:66:33:9e:30:8e:8a:25:1f:7c:b4:5b:c2: 20:8c:91:88:6f:26:ad:d2:24:fb:a1:cd:12:76:08: 65:9b:5a:5a:cf:4a:0b:f6:31:29:93:42:7e:c2:56: e1:a4:63:a1:04:5e:31:a8:43:a9:a1:2a:7e:87:a3: 8a:f7:7d:c5:80:a7:05:11:f9:5e:0a:1f:c8:39:05: e3:98:90:73:b9:c1:59:f2:44:29:3f:1e:3c:2b:06: 20:3c:c8:b6:db:5c:d6:4c:f4:de:22:d9:04:67:8a: c8:d5:d2:8a:cf:dc:79:72:44:fa:17:a3:6c:bd:75: 91:bd:96:6c:96:34:89:80:75:22:e6:15:cb:51:5c: 66:48:3c:0f:30:f5:4c:2a:2c:8a:ca:7d:b9:d5:fa: 4a:49:4f:39:ee:57:53:0a:d7:02:19:c5:a9:96:9a: e7:7c:3e:9a:7b:f2:1f:30:bd:89:af:3c:b5:35:ec: 09:6a:1a:df:bf:6d:95:41:36:05:37:cf:0d:13:ec: da:fe:df:5c:e8:6e:77:98:6f:72:43:81:f5:65:39: b9:5d:16:f4:bc:1a:d4:cd:e3:69:fc:b6:f9:39:54: 25:5a:34:e3:d2:b0:3b:e7:4c:c4:c8:62:62:a5:85: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.206.64.0/18 130.60.0.0/16 185.207.117.0-185.207.119.255 192.12.247.0/24 192.41.132.0-192.41.136.255 IPv6: 2001:67c:16dc::/48 2a0b:2040::/29 Signature Algorithm: sha256WithRSAEncryption 17:bb:04:e8:03:f1:08:db:14:19:2b:b4:20:10:ee:9a:11:03: 60:7a:a7:53:db:0e:09:37:bd:bf:71:18:c8:30:27:fd:d3:79: bb:12:4e:ff:23:3a:4e:43:a1:af:1d:f2:0f:4d:19:cf:5a:b0: a4:56:4e:48:e1:b6:67:04:17:9d:75:11:e4:78:11:01:56:d6: f7:2b:3f:b7:93:0d:97:e5:15:bf:fa:4a:3e:22:f9:db:d4:a2: b3:88:a2:ec:c1:cf:47:6a:f8:71:9f:8d:a3:28:57:1e:86:06: da:fd:a9:c1:a3:32:df:d3:d8:d8:46:84:68:1f:69:50:cf:76: f6:84:6d:b2:cf:47:00:0a:e3:88:c6:b5:3f:b3:d3:dc:2f:29: 12:a3:ee:b4:00:2c:10:39:b4:05:b4:8a:73:f2:59:7e:7f:71: 00:a3:7d:14:6d:ad:c9:d1:d7:c0:86:f7:44:a8:dc:c3:20:3e: 9f:4a:c0:35:69:86:70:ad:c5:5a:1d:7b:1c:9d:41:2b:65:ed: 0b:af:da:16:f3:17:13:4d:45:e4:0b:91:5f:fb:59:ef:da:73: c7:d9:92:c8:3d:e8:ba:53:31:a8:53:da:06:59:39:07:b2:d6: 70:46:f5:66:64:83:36:78:7e:a2:0e:10:d6:0d:db:d5:6c:68: b5:11:72:bd -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZva2X+6Yfc3rwKO2UyKexvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMTAwMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDM4YzMzOGIxMjhmODNhZGVjMmY2OWQ5M2MzMmM1MzUzY2EwMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvo03Ktx/k1u0HSUQZCTneVmM54w joolH3y0W8IgjJGIbyat0iT7oc0Sdghlm1paz0oL9jEpk0J+wlbhpGOhBF4xqEOp oSp+h6OK933FgKcFEfleCh/IOQXjmJBzucFZ8kQpPx48KwYgPMi221zWTPTeItkE Z4rI1dKKz9x5ckT6F6NsvXWRvZZsljSJgHUi5hXLUVxmSDwPMPVMKiyKyn251fpK SU857ldTCtcCGcWplprnfD6ae/IfML2Jrzy1NewJahrfv22VQTYFN88NE+za/t9c 6G53mG9yQ4H1ZTm5XRb0vBrUzeNp/Lb5OVQlWjTj0rA750zEyGJipYW6EwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFNA4wzixKPg63sL2nZPDLFNTygOYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzkyNWY5 MS0zMGM1LTRhNmItYTE0OS05YmY4YjFlZjJlOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvOTI1Zjkx LTMwYzUtNGE2Yi1hMTQ5LTliZjhiMWVmMmU5Ni8xLzBEakRPTEVvLURyZXd2YWRr OE1zVTFQS0E1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTAzBAIAATAtAwQGWc5AAwMAgjwwDAMEALnPdQMEA7nPcAMEAMAM 9zAMAwQCwCmEAwQAwCmIMBYEAgACMBADBwAgAQZ8FtwDBQMqCyBAMA0GCSqGSIb3 DQEBCwUAA4IBAQAXuwToA/EI2xQZK7QgEO6aEQNgeqdT2w4JN72/cRjIMCf903m7 Ek7/IzpOQ6GvHfIPTRnPWrCkVk5I4bZnBBeddRHkeBEBVtb3Kz+3kw2X5RW/+ko+ Ivnb1KKziKLswc9Havhxn42jKFcehgba/anBozLf09jYRoRoH2lQz3b2hG2yz0cA CuOIxrU/s9PcLykSo+60ACwQObQFtIpz8ll+f3EAo30Uba3J0dfAhvdEqNzDID6f SsA1aYZwrcVaHXscnUErZe0Lr9oW8xcTTUXkC5Ff+1nv2nPH2ZLIPei6UzGoU9oG WTkHstZwRvVmZIM2eH6iDhDWDdvVbGi1EXK9 -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:21 2026 by rpki-client