This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer File: 0RIqXLBkP3NsfseWGAmiWThmjw4.cer (raw, json) Hash identifier: u1CsZm8S9lk641jZeUV30Fd1nFI7uVv5xwrQqOPG2Mw= Subject key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4E08FD5B1076490A077EF6F136164 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60354 IP: 185.251.112.0/22 IP: 2a0c:1940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:e0:8f:d5:b1:07:64:90:a0:77:ef:6f:13:61:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1122a5cb0643f736c7ec7961809a25938668f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:2e:e9:b0:79:16:2c:37:95:ce:4e:aa:67: 36:38:0b:0f:7b:91:1a:91:0c:33:34:61:e2:80:0a: a5:b7:35:59:1b:3a:4b:86:1f:9a:70:d8:0a:b8:fd: c7:a4:bb:d9:e4:7b:4d:f2:66:30:ea:04:df:45:6f: 85:32:e9:34:bb:12:18:8e:2c:27:b9:8c:2c:84:c3: f7:0c:97:33:76:dd:4e:79:6c:4f:98:a0:7c:82:05: 74:a2:69:cf:48:41:9b:ef:52:5e:09:30:2d:3d:91: 2e:1c:03:19:81:44:62:d4:9d:30:67:57:94:41:e4: a6:a1:19:0f:ed:25:c8:e6:91:08:33:10:9d:43:7e: 73:6b:18:e6:b8:88:f8:65:9f:25:b2:55:84:8a:2f: 08:b5:d1:02:c5:29:47:fa:db:c9:b2:ed:c7:cb:9e: e1:50:03:99:4e:bc:f2:a3:5c:b0:05:80:f0:4f:c6: 12:38:82:fa:4a:5a:d2:74:d3:4d:9b:d2:6b:3c:d8: a4:c7:fe:b2:8b:26:9d:6f:a7:54:3c:98:e6:ac:aa: 44:2a:3f:80:f4:56:24:af:74:d4:e0:ce:52:3d:58: 58:fd:cf:37:9a:eb:a3:37:f6:5e:ea:63:35:79:19: fc:d5:86:42:50:a6:1d:18:60:fb:5c:f3:8f:14:f6: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.112.0/22 IPv6: 2a0c:1940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60354 Signature Algorithm: sha256WithRSAEncryption 20:a1:12:cf:76:f5:fb:a4:e6:1c:3f:39:70:b7:9d:29:8a:08: 94:7c:2d:87:8e:89:e4:78:33:5e:16:89:71:13:31:5a:7f:37: ef:99:fc:4d:b1:fe:52:64:ad:b5:7d:49:3e:d6:47:a8:ef:08: 83:95:70:da:cf:db:3a:51:50:ad:0f:cc:bd:b5:60:ac:04:f8: 5e:1b:e1:a9:c4:f3:c8:b6:bc:71:64:6f:d8:10:f0:9f:49:0f: 42:3a:24:d7:40:55:ce:54:eb:6d:5a:62:ab:ed:72:2d:6a:80: c7:86:da:92:25:d6:bc:be:0f:87:1f:75:20:36:cc:fe:96:aa: d0:a1:49:ff:dc:52:de:73:2d:ed:bd:3b:c9:d7:1d:df:b2:98: 7f:34:45:69:9d:c0:28:ce:05:e2:9f:e5:1e:7f:e9:16:b2:9b: 55:d6:9b:d9:4b:a5:28:2d:c4:cb:cb:ef:8d:37:e6:74:d9:fb: cf:11:b4:a1:b4:7f:7b:35:47:d8:d7:7e:75:0d:c9:cf:fa:cd: 3b:a7:ec:b5:87:42:ca:76:74:ce:e7:45:ce:4d:55:2a:9d:9f: f2:7e:e2:2e:72:83:a1:b4:41:4c:02:22:0f:71:5f:80:8d:b7: 32:60:b1:5e:1b:ea:95:9d:30:8f:55:24:42:ec:81:97:f4:1f: 53:d2:2d:fe -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pOCP1bEHZJCgd+9vE2FkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTEyMmE1Y2IwNjQzZjczNmM3ZWM3OTYxODA5YTI1OTM4NjY4ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiIu6bB5Fiw3lc5Oqmc2OAsPe5Ea kQwzNGHigAqltzVZGzpLhh+acNgKuP3HpLvZ5HtN8mYw6gTfRW+FMuk0uxIYjiwn uYwshMP3DJczdt1OeWxPmKB8ggV0omnPSEGb71JeCTAtPZEuHAMZgURi1J0wZ1eU QeSmoRkP7SXI5pEIMxCdQ35zaxjmuIj4ZZ8lslWEii8ItdECxSlH+tvJsu3Hy57h UAOZTrzyo1ywBYDwT8YSOIL6SlrSdNNNm9JrPNikx/6yiyadb6dUPJjmrKpEKj+A 9FYkr3TU4M5SPVhY/c83muujN/Ze6mM1eRn81YZCUKYdGGD7XPOPFPYlVQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNESKlywZD9zbH7HlhgJolk4Zo8OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2FjY2Qz OC0wYWU2LTRiNDMtYTE2OC0xMTUyZjQzOTMwMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvYWNjZDM4 LTBhZTYtNGI0My1hMTY4LTExNTJmNDM5MzAyMC8xLzBSSXFYTEJrUDNOc2ZzZVdH QW1pV1RobWp3NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuftwMA0EAgACMAcDBQMqDBlAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDrwjANBgkqhkiG9w0BAQsFAAOCAQEAIKESz3b1+6Tm HD85cLedKYoIlHwth46J5HgzXhaJcRMxWn8375n8TbH+UmSttX1JPtZHqO8Ig5Vw 2s/bOlFQrQ/MvbVgrAT4XhvhqcTzyLa8cWRv2BDwn0kPQjok10BVzlTrbVpiq+1y LWqAx4bakiXWvL4Phx91IDbM/paq0KFJ/9xS3nMt7b07ydcd37KYfzRFaZ3AKM4F 4p/lHn/pFrKbVdab2UulKC3Ey8vvjTfmdNn7zxG0obR/ezVH2Nd+dQ3Jz/rNO6fs tYdCynZ0zudFzk1VKp2f8n7iLnKDobRBTAIiD3FfgI23MmCxXhvqlZ0wj1UkQuyB l/QfU9It/g== -----END CERTIFICATE-----Generated at Mon Jan 26 10:56:05 2026 by rpki-client