This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.cer (raw, json) Hash identifier: BdTfbI1QOvLqgq4g59Iw1VI/wGCrHcx+LuBgfhNdTv0= Subject key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDB3727E637ECD1F31FA0ABEE13343 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 85.8.154.0/24 IP: 91.217.134.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b3:72:7e:63:7e:cd:1f:31:fa:0a:be:e1:33:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d05581472b92a85a90caa1e47d7223d788ae0148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:68:c6:5c:01:5a:cc:b5:c3:14:6c:9b:a4:ea: 4a:73:05:8a:ed:cb:e4:d7:93:b3:f1:f2:63:cc:f6: 97:18:b9:4a:9a:76:6a:2a:63:66:ec:86:3c:d8:4b: a5:e2:52:11:d2:ad:2b:83:b6:c4:d9:1b:8c:b3:f3: 8a:fe:87:ca:47:26:6d:19:0e:23:6b:06:d0:8c:8f: 38:92:fa:eb:fb:54:89:e5:ec:56:03:9b:3d:19:d3: 64:24:b6:37:71:9a:7b:d3:fc:9d:38:03:ff:42:a6: 6e:da:12:03:f9:94:b7:90:9f:7f:4f:cc:33:9b:a2: f1:7d:c0:8b:20:95:29:15:45:ee:93:a8:cd:d6:79: 86:0d:a8:a0:0b:9b:c0:da:b0:3d:1a:90:35:89:7d: cc:35:04:52:a7:1c:c3:da:5e:37:ec:fb:4d:18:8b: 9e:62:45:61:a0:28:f9:79:cd:48:c5:0d:c6:c5:38: 1c:30:2d:14:27:69:e9:fb:bc:2a:8a:50:3d:bb:aa: fb:79:4e:24:ad:38:d1:96:16:72:82:8f:4d:ed:73: 78:75:5f:02:c9:45:ea:9a:27:23:77:f2:21:ce:40: 06:e3:f6:65:d2:3b:b9:bf:c2:f1:ba:52:c2:c5:f6: d7:66:b0:7a:3e:ad:a0:09:24:38:2c:74:11:16:fa: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.154.0/24 91.217.134.0/24 Signature Algorithm: sha256WithRSAEncryption 33:f2:0c:60:18:83:0c:46:6d:b2:a8:66:88:4b:26:27:b4:f0: e6:f9:81:3c:ca:58:cf:73:46:f2:aa:cb:65:ce:f8:e6:1e:49: de:d6:f9:fd:cb:0c:e3:a3:20:d1:af:f4:76:17:c1:12:ac:bf: 40:5d:16:fc:37:2a:26:c8:ff:00:0b:0e:30:88:dc:d1:65:50: dd:b1:6f:34:df:63:5c:48:cf:4a:e8:d1:6e:ec:5a:4c:ad:61: fd:99:88:bc:54:42:bb:5b:16:18:fe:65:21:bf:0e:5d:65:7d: a3:50:f7:e2:a7:e4:ad:ed:07:3a:2a:22:c2:c6:c7:5f:23:c5: 93:9f:1a:56:4d:53:e9:f1:17:db:29:00:33:f9:64:a6:d2:55: 9c:e7:c4:bf:48:e4:5a:72:91:86:bb:f2:f1:64:2c:29:cd:23: da:ce:34:25:ad:ad:5b:30:da:36:d3:bf:f6:d1:12:ff:6a:ab: 56:6e:ad:d2:40:4f:92:f9:d6:6e:ac:b2:25:24:0c:f0:7f:d2: 9a:3b:9a:1f:61:7a:17:1d:03:c8:61:79:6d:05:ee:ae:9d:ae: 50:6a:65:27:11:1b:67:d6:c1:a8:3d:ca:b8:68:03:3f:6a:e0: 8b:29:42:99:92:b7:f2:79:98:d5:1d:64:91:0b:ed:c9:60:ef: 9f:c1:ba:7d -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt87bNyfmN+zR8x+gq+4TNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDU1ODE0NzJiOTJhODVhOTBjYWExZTQ3ZDcyMjNkNzg4YWUwMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/WjGXAFazLXDFGybpOpKcwWK7cvk 15Oz8fJjzPaXGLlKmnZqKmNm7IY82Eul4lIR0q0rg7bE2RuMs/OK/ofKRyZtGQ4j awbQjI84kvrr+1SJ5exWA5s9GdNkJLY3cZp70/ydOAP/QqZu2hID+ZS3kJ9/T8wz m6LxfcCLIJUpFUXuk6jN1nmGDaigC5vA2rA9GpA1iX3MNQRSpxzD2l437PtNGIue YkVhoCj5ec1IxQ3GxTgcMC0UJ2np+7wqilA9u6r7eU4krTjRlhZygo9N7XN4dV8C yUXqmicjd/IhzkAG4/Zl0ju5v8LxulLCxfbXZrB6Pq2gCSQ4LHQRFvrs1wIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFNBVgUcrkqhakMqh5H1yI9eIrgFIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2EwODc0 OC04NjIyLTRlODYtODJlZi0zYmRhYWNiOWQwOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvYTA4NzQ4 LTg2MjItNGU4Ni04MmVmLTNiZGFhY2I5ZDA4ZC8xLzBGV0JSeXVTcUZxUXlxSGtm WElqMTRpdUFVZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAVQiaAwQAW9mGMA0GCSqGSIb3DQEBCwUAA4IB AQAz8gxgGIMMRm2yqGaISyYntPDm+YE8yljPc0byqstlzvjmHkne1vn9ywzjoyDR r/R2F8ESrL9AXRb8NyomyP8ACw4wiNzRZVDdsW8032NcSM9K6NFu7FpMrWH9mYi8 VEK7WxYY/mUhvw5dZX2jUPfip+St7Qc6KiLCxsdfI8WTnxpWTVPp8RfbKQAz+WSm 0lWc58S/SORacpGGu/LxZCwpzSPazjQlra1bMNo207/20RL/aqtWbq3SQE+S+dZu rLIlJAzwf9KaO5ofYXoXHQPIYXltBe6una5QamUnERtn1sGoPcq4aAM/auCLKUKZ krfyeZjVHWSRC+3JYO+fwbp9 -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:03 2026 by rpki-client