This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer File: 0PFLigjLX4BX1IsD5T9Fi44f7tY.cer (raw, json) Hash identifier: 6Cg24+STHTNj3V1nI0JT/J9zhPQIK8uu7ET4XqnE4vQ= Subject key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE1C9BBA2E074F0DF6F7E2E72FC64D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39067 IP: 94.232.224.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1c:9b:ba:2e:07:4f:0d:f6:f7:e2:e7:2f:c6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:7d:78:db:b1:9c:12:fe:95:ad:ed:e1:eb: 28:14:c0:68:0f:90:b4:31:3e:99:a5:41:6f:ea:27: 96:bf:ab:bf:ee:e6:c1:82:74:a2:fb:eb:90:a7:5c: f8:39:76:57:ba:20:01:95:bc:b9:34:71:3d:c0:52: b6:4b:71:2a:a3:14:e6:eb:b9:12:ec:61:a0:9d:fa: 1f:16:3f:b7:73:fc:78:8f:43:07:0f:dd:32:3b:9e: 01:3a:8c:1f:08:a1:ad:af:10:95:ce:ee:33:06:8a: b8:86:c4:34:87:b7:16:5e:ef:9d:80:26:95:79:8a: 91:00:7d:0a:fe:b5:4e:8e:84:3f:f0:83:cb:37:2d: ea:fa:2a:c5:fc:57:ff:cc:b2:0b:d2:2f:1b:44:5b: b3:29:a6:a0:b3:7e:91:91:17:c3:fa:e7:8a:e3:fb: 0b:8d:19:3c:84:b5:8d:9a:d2:ab:b2:34:21:01:cf: e9:08:00:ac:6a:8f:d4:8c:ba:d2:20:90:e9:37:93: 8e:1a:12:85:28:74:1d:5c:ed:57:49:0f:e7:40:b6: 80:80:01:c5:d2:aa:d2:02:d6:ca:7c:7a:cf:5d:9e: 10:0a:f1:00:4a:ba:4a:ab:e7:e4:e3:64:55:35:3d: 1f:14:9e:71:25:57:23:92:00:cb:a0:ef:9d:36:21: 41:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.224.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39067 Signature Algorithm: sha256WithRSAEncryption a0:f2:31:61:65:76:39:4f:fa:60:4a:2f:78:bd:ac:ee:8c:12: 13:53:5a:49:41:0c:ba:62:09:94:8a:04:4c:f5:67:ed:b9:94: 6d:75:90:f2:7f:ee:a3:67:4f:77:4c:37:d8:2e:9e:93:5b:4f: fd:98:52:d7:6c:0c:da:0c:f9:c3:48:00:fd:58:25:87:47:02: 99:ba:7f:4f:dc:78:05:fb:48:51:fe:c8:5d:d4:3b:8c:e6:0d: 12:1e:6b:cd:d5:b4:76:9f:63:e2:a7:e1:b1:a2:1f:9c:28:3d: b8:c8:12:c2:5a:12:ef:77:7d:eb:fd:8a:4a:a9:1a:6b:6c:7c: de:2e:df:63:38:9d:18:1e:78:26:b3:8d:b1:e1:af:6b:e4:0b: f8:94:c4:b6:8c:c1:a4:db:c9:f3:b9:43:0e:74:22:0d:9b:bb: 79:a2:82:32:b9:e5:e8:46:5a:5f:b8:ae:fa:07:48:4b:4b:25: 4b:a8:e2:71:e6:f9:0b:de:18:38:f6:0a:15:82:bf:dc:bc:8b: 0c:bc:24:4a:7f:3d:07:5b:fb:1a:33:80:42:dc:b9:3e:c6:dd: a6:25:61:72:6f:d0:4f:df:d7:6e:87:0f:29:67:9a:e6:68:d1: 5f:27:ae:01:90:37:65:bb:12:07:52:20:e8:21:01:13:93:ec: 00:22:38:17 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87hybui4HTw329+LnL8ZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGYxNGI4YTA4Y2I1ZjgwNTdkNDhiMDNlNTNmNDU4YjhlMWZlZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueR9eNuxnBL+la3t4esoFMBoD5C0 MT6ZpUFv6ieWv6u/7ubBgnSi++uQp1z4OXZXuiABlby5NHE9wFK2S3EqoxTm67kS 7GGgnfofFj+3c/x4j0MHD90yO54BOowfCKGtrxCVzu4zBoq4hsQ0h7cWXu+dgCaV eYqRAH0K/rVOjoQ/8IPLNy3q+irF/Ff/zLIL0i8bRFuzKaags36RkRfD+ueK4/sL jRk8hLWNmtKrsjQhAc/pCACsao/UjLrSIJDpN5OOGhKFKHQdXO1XSQ/nQLaAgAHF 0qrSAtbKfHrPXZ4QCvEASrpKq+fk42RVNT0fFJ5xJVcjkgDLoO+dNiFB4QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNDxS4oIy1+AV9SLA+U/RYuOH+7WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzIxYmRi Yi04NTZmLTQxZGQtYWFkOS0wNjZkZGYzMmJmY2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvMjFiZGJi LTg1NmYtNDFkZC1hYWQ5LTA2NmRkZjMyYmZjYy8xLzBQRkxpZ2pMWDRCWDFJc0Q1 VDlGaTQ0Zjd0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDXujgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCYmzANBgkqhkiG9w0BAQsFAAOCAQEAoPIxYWV2OU/6YEoveL2s7owSE1NaSUEM umIJlIoETPVn7bmUbXWQ8n/uo2dPd0w32C6ek1tP/ZhS12wM2gz5w0gA/Vglh0cC mbp/T9x4BftIUf7IXdQ7jOYNEh5rzdW0dp9j4qfhsaIfnCg9uMgSwloS73d96/2K Sqkaa2x83i7fYzidGB54JrONseGva+QL+JTEtozBpNvJ87lDDnQiDZu7eaKCMrnl 6EZaX7iu+gdIS0slS6jiceb5C94YOPYKFYK/3LyLDLwkSn89B1v7GjOAQty5Psbd piVhcm/QT9/XbocPKWea5mjRXyeuAZA3ZbsSB1Ig6CEBE5PsACI4Fw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:40 2026 by rpki-client