This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer File: 0SIIZtpI4MfP--jHOjUcKkexpNs.cer (raw, json) Hash identifier: 4yzHkPSB0YK94sc4fORvDnrNjANGsxqU7uNi44Nef4k= Subject key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C807840FDB38CD5A53DE22160A61FE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20539 IP: 31.135.128.0/19 IP: 91.201.224.0/22 IP: 193.178.228.0/23 IP: 194.146.228.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:78:40:fd:b3:8c:d5:a5:3d:e2:21:60:a6:1f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:05:34:38:56:cb:12:e9:a3:c2:7e:44:75: 8f:fb:49:a4:ac:48:cb:78:23:87:ad:ab:93:3c:19: e4:d2:cf:d7:95:6f:13:b9:09:58:50:c6:47:b7:ad: 8b:92:d6:b2:13:d4:37:fd:82:e0:f1:b5:45:80:e2: e5:5b:7e:ae:49:7f:be:48:41:75:d8:3f:ff:78:ab: ea:b2:21:6b:98:eb:bc:50:e3:57:09:5c:81:7b:e4: 41:1c:51:84:1e:5e:65:7f:a7:74:7b:81:49:b3:8a: 5a:91:94:82:ba:1a:6e:6a:d1:f9:81:76:65:bf:82: e8:04:d1:77:3e:10:9b:72:86:a1:c5:a8:c1:d5:55: 2f:c6:ed:7f:71:b5:e3:34:0f:10:d9:1c:05:0d:84: d6:c8:50:71:cb:c5:09:27:04:14:b9:00:b0:f1:03: 9d:4c:26:bf:b7:5e:d4:29:65:34:e4:d1:43:ab:df: 07:0b:d6:df:9a:a0:94:3a:ec:91:c9:8a:99:d2:af: 27:79:e1:b9:18:a7:16:6a:c2:1a:d8:ee:f2:0a:d5: 4e:c9:0a:e1:b4:91:7b:2b:3a:34:57:4d:9c:48:d1: 6c:52:e6:01:ad:85:61:f5:c7:60:52:73:30:66:dc: 25:55:9e:68:67:e9:67:50:84:1b:11:01:ac:14:1c: 05:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.128.0/19 91.201.224.0/22 193.178.228.0/23 194.146.228.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20539 Signature Algorithm: sha256WithRSAEncryption 7c:0c:5d:a6:ad:a3:34:d2:6f:21:2f:4f:1b:36:62:52:13:0d: 22:54:31:19:02:cd:72:39:46:0c:5d:b7:ef:dd:ec:33:f6:3c: 32:43:9d:a1:49:b7:5b:1e:cb:1e:2d:7f:80:85:78:36:67:f4: 38:73:b4:8e:f4:52:47:62:c9:0f:eb:68:59:05:34:f1:53:cd: 02:12:0b:45:fd:a7:e6:cf:bc:48:5d:43:dd:c2:e6:41:3e:39: 70:94:a3:ea:c0:97:68:f1:b9:1b:26:93:a5:28:c2:9c:f3:7b: 2c:54:e1:e9:3f:27:09:a7:84:cd:e2:25:36:b4:94:ff:0d:6a: 8a:c6:da:2e:ec:56:17:fd:b9:9a:f0:6e:6e:bf:ea:1d:a4:36: cf:a4:41:23:ab:23:10:02:63:fc:83:f3:f3:21:85:e5:4a:dc: 51:32:77:c3:81:df:9c:33:1f:5a:8f:e3:61:6e:01:fe:b0:6d: 4c:61:2d:aa:df:e7:3f:81:27:8d:4e:f4:c1:06:a4:21:d0:b0: 37:4a:fc:ab:fd:92:3a:32:37:8d:4d:24:b1:8f:60:25:b6:b5: 8d:54:31:24:79:57:55:0b:c3:54:1f:4c:dc:13:45:84:cc:7b: 62:8a:6b:a6:44:52:40:d7:75:68:2b:eb:47:92:a8:ea:dd:3d: 69:42:bc:07 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt8gHhA/bOM1aU94iFgph/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTIyMDg2NmRhNDhlMGM3Y2ZmYmU4YzczYTM1MWMyYTQ3YjFhNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlYFNDhWyxLpo8J+RHWP+0mkrEjL eCOHrauTPBnk0s/XlW8TuQlYUMZHt62LktayE9Q3/YLg8bVFgOLlW36uSX++SEF1 2D//eKvqsiFrmOu8UONXCVyBe+RBHFGEHl5lf6d0e4FJs4pakZSCuhpuatH5gXZl v4LoBNF3PhCbcoahxajB1VUvxu1/cbXjNA8Q2RwFDYTWyFBxy8UJJwQUuQCw8QOd TCa/t17UKWU05NFDq98HC9bfmqCUOuyRyYqZ0q8neeG5GKcWasIa2O7yCtVOyQrh tJF7Kzo0V02cSNFsUuYBrYVh9cdgUnMwZtwlVZ5oZ+lnUIQbEQGsFBwFCwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFNEiCGbaSODHz/voxzo1HCpHsaTbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzYwOTUx ZS03YWI1LTQ1ZDgtOTAxNS05NWVjZDY3MTg4ODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvNjA5NTFl LTdhYjUtNDVkOC05MDE1LTk1ZWNkNjcxODg4Ny8xLzBTSUladHBJNE1mUC0takhP alVjS2tleHBOcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQFH4eAAwQCW8ngAwQBwbLkAwQCwpLkMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAlA7MA0GCSqGSIb3DQEBCwUAA4IBAQB8DF2mraM0 0m8hL08bNmJSEw0iVDEZAs1yOUYMXbfv3ewz9jwyQ52hSbdbHsseLX+AhXg2Z/Q4 c7SO9FJHYskP62hZBTTxU80CEgtF/afmz7xIXUPdwuZBPjlwlKPqwJdo8bkbJpOl KMKc83ssVOHpPycJp4TN4iU2tJT/DWqKxtou7FYX/bma8G5uv+odpDbPpEEjqyMQ AmP8g/PzIYXlStxRMnfDgd+cMx9aj+NhbgH+sG1MYS2q3+c/gSeNTvTBBqQh0LA3 Svyr/ZI6MjeNTSSxj2AltrWNVDEkeVdVC8NUH0zcE0WEzHtiimumRFJA13VoK+tH kqjq3T1pQrwH -----END CERTIFICATE-----Generated at Mon Jan 26 11:42:01 2026 by rpki-client