This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer File: 0dI-JBGcupM36DRmSFv7EGsuJLY.cer (raw, json) Hash identifier: 0cWRrrKPmq2j4M45WaoGDbiu+X6JQzlsD7wWpsRa8yk= Subject key identifier: D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED128764B86F038E9091E5A2531EF0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.50.167.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:12:87:64:b8:6f:03:8e:90:91:e5:a2:53:1e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1d23e24119cba9337e83466485bfb106b2e24b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:5e:09:58:30:db:d3:32:bd:d7:1a:27:f3: 48:0d:57:39:dc:b8:27:48:c9:98:bd:18:fb:f0:af: f7:e6:fa:da:87:1c:82:19:3e:3a:9b:dc:1d:6b:c9: d5:6d:7a:cd:60:39:0e:f0:43:ce:5b:8e:1b:5c:13: 7b:78:80:c5:db:ab:f5:fa:09:4a:cb:25:3b:40:31: b5:5e:ee:47:40:51:a1:16:11:f2:ab:7a:84:59:e0: 82:f4:f5:14:fe:2d:b7:e0:a8:2f:e8:a7:84:d2:6d: f5:0d:2c:8b:51:eb:55:85:3f:bd:8e:d2:d6:dc:c1: 1e:7c:c4:04:c3:be:1a:a6:cc:d1:a3:43:b3:2c:5e: 64:c3:60:d7:6d:64:b9:66:e0:47:24:8d:c2:82:99: f2:e6:7c:6f:f8:77:89:cf:af:81:4d:62:78:bd:f6: 66:47:8f:48:85:90:f0:af:4e:95:1a:55:97:f1:5d: bf:e6:7e:d5:2f:c3:d1:25:84:7c:7c:a3:8e:24:4a: 00:52:4c:64:e1:0e:b4:5e:e6:2b:dd:3a:2a:c8:31: 94:6c:bf:06:98:2b:6c:08:81:35:c6:59:90:47:e7: 18:c5:1a:65:86:fe:1d:2d:c2:08:b0:80:1f:2e:b2: 47:e0:91:0b:78:41:81:af:ad:20:e0:2f:2b:47:d5: a8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.167.0/24 Signature Algorithm: sha256WithRSAEncryption a3:bb:13:72:cb:7e:a6:ec:ea:8b:b5:4d:46:5b:e7:c8:e9:fd: 7b:d6:23:ef:d5:b0:c4:e6:dd:b3:02:9f:89:fe:61:4d:c7:7b: 2a:85:c9:a1:36:6f:ea:90:2e:f0:5c:26:79:35:96:6b:2b:5f: 2e:b6:25:c5:c6:dc:77:bc:82:8e:12:ad:14:90:0a:10:0c:b8: 5c:3f:ce:18:0d:bf:e4:b7:5c:a0:1c:dd:5c:9d:6d:18:8a:4e: 6d:06:37:ac:dd:9c:d5:12:54:16:c5:31:eb:0a:66:f0:54:9a: d2:0a:61:ff:d2:81:2d:31:cf:5f:f3:13:33:ff:83:e6:6d:6f: 08:fd:7f:d4:f6:6c:1d:c3:78:2d:9d:e1:bb:36:8c:7e:eb:5e: af:e8:2b:90:55:33:a2:3d:1b:8a:9a:0c:c3:9e:68:67:75:f5: 7a:bf:fd:bf:1b:33:d3:09:42:8c:f4:e3:54:10:66:29:f2:74: fa:48:81:f6:8c:d8:53:cb:2e:e4:02:1f:58:c0:74:77:2d:c4: bd:23:8d:4b:e3:1a:89:72:c8:1d:3f:cc:49:5c:ae:42:b3:1e: 4e:00:00:29:83:62:61:4d:b2:9c:1a:09:2f:87:92:7e:ac:ef: 8d:e3:03:13:9c:80:9a:07:25:e5:c4:cc:44:18:54:ac:2d:4f: be:00:e6:b5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57RKHZLhvA46QkeWiUx7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWQyM2UyNDExOWNiYTkzMzdlODM0NjY0ODViZmIxMDZiMmUyNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ZeCVgw29MyvdcaJ/NIDVc53Lgn SMmYvRj78K/35vrahxyCGT46m9wda8nVbXrNYDkO8EPOW44bXBN7eIDF26v1+glK yyU7QDG1Xu5HQFGhFhHyq3qEWeCC9PUU/i234Kgv6KeE0m31DSyLUetVhT+9jtLW 3MEefMQEw74apszRo0OzLF5kw2DXbWS5ZuBHJI3Cgpny5nxv+HeJz6+BTWJ4vfZm R49IhZDwr06VGlWX8V2/5n7VL8PRJYR8fKOOJEoAUkxk4Q60XuYr3ToqyDGUbL8G mCtsCIE1xlmQR+cYxRplhv4dLcIIsIAfLrJH4JELeEGBr60g4C8rR9WoUQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNHSPiQRnLqTN+g0Zkhb+xBrLiS2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzZjNDA2 NC04NTAzLTRkMTYtOTM1NC03NGQ0ZTViMDFjMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvNmM0MDY0 LTg1MDMtNGQxNi05MzU0LTc0ZDRlNWIwMWMzNS8xLzBkSS1KQkdjdXBNMzZEUm1T RnY3RUdzdUpMWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwjKnMA0GCSqGSIb3DQEBCwUAA4IBAQCjuxNy y36m7OqLtU1GW+fI6f171iPv1bDE5t2zAp+J/mFNx3sqhcmhNm/qkC7wXCZ5NZZr K18utiXFxtx3vIKOEq0UkAoQDLhcP84YDb/kt1ygHN1cnW0Yik5tBjes3ZzVElQW xTHrCmbwVJrSCmH/0oEtMc9f8xMz/4PmbW8I/X/U9mwdw3gtneG7Nox+616v6CuQ VTOiPRuKmgzDnmhndfV6v/2/GzPTCUKM9ONUEGYp8nT6SIH2jNhTyy7kAh9YwHR3 LcS9I41L4xqJcsgdP8xJXK5Csx5OAAApg2JhTbKcGgkvh5J+rO+N4wMTnICaByXl xMxEGFSsLU++AOa1 -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:20 2026 by rpki-client