This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer File: 0f00NtehmnND-oANh6Aa8YPaMYs.cer (raw, json) Hash identifier: 6EYWKkYGQns3aFKsySGmi5PPjF5B/c9rv0S2W2q7/Xc= Subject key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791108AF4DC2677D094B4927FB3C03BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.13.208.0/22 IP: 2a03:a540::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:08:af:4d:c2:67:7d:09:4b:49:27:fb:3c:03:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1fd3436d7a19a7343fa800d87a01af183da318b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:8a:19:58:8a:c2:60:24:b9:f2:51:da:e2: 17:60:4a:28:e3:8e:b5:d3:04:0f:0c:0d:e6:3e:b2: 8d:93:f5:6d:68:e2:4f:b5:12:61:6a:a2:cd:37:72: 29:b2:23:b2:2f:4c:dd:a4:34:0a:b2:f1:3f:b1:5a: 11:7e:b9:17:49:f0:98:9a:55:1b:e6:a3:2c:15:be: e1:60:42:05:8d:0d:47:1c:8e:79:c7:0a:d5:e3:81: 22:ff:bd:0f:bd:ac:0b:bf:de:bf:f4:54:fa:20:0e: 47:f9:44:2d:a3:20:4d:dc:3d:08:57:fb:d5:07:46: 76:78:2d:7d:ac:ea:c2:77:61:d6:05:f5:fb:59:bd: 2e:c1:63:99:d6:db:eb:1c:03:56:b3:be:f3:8e:00: ca:e5:3e:e6:0c:ba:70:6a:bd:18:47:9b:54:7b:42: fc:3c:47:08:f9:d4:4b:ea:0a:62:91:cb:16:e2:27: 3a:a4:83:b6:cf:0d:42:9c:30:d6:05:88:2c:66:2c: 27:53:07:3b:6a:a4:a1:f5:41:84:d6:43:de:fe:6b: 42:ca:a6:0b:c2:20:71:93:64:8d:7d:22:c0:d2:24: 6a:9d:98:47:53:46:68:a4:ca:29:e9:e3:87:e3:55: 5b:d8:23:c5:59:37:96:be:6f:f4:fe:3b:66:8a:b2: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.208.0/22 IPv6: 2a03:a540::/32 Signature Algorithm: sha256WithRSAEncryption 85:1b:86:0b:ec:08:05:da:be:43:25:2d:b8:37:bf:2e:c3:d6: 7c:1d:10:1c:19:d6:3d:0b:54:3b:1c:bf:22:51:b5:b7:3c:ed: f7:31:9b:5c:a2:a8:d3:14:20:6f:af:fa:bf:3b:c5:8e:ae:d4: 61:de:8e:e9:0c:59:9b:6d:0b:06:f9:47:bc:d3:4d:69:25:6b: 0f:87:0e:c3:bf:ae:4c:5e:aa:0f:36:5c:ce:6c:29:a0:c9:2a: e8:1e:df:da:f8:11:27:8f:b9:85:9c:59:3e:46:c2:db:24:28: b9:f6:60:07:6b:33:12:a6:53:d7:ae:4c:92:4f:7c:de:97:58: 1e:78:e0:66:06:87:5f:03:36:49:4c:07:3b:b4:5b:ce:09:29: 1f:fb:4d:94:8f:3d:54:ad:54:58:ff:03:c5:6c:1b:f9:c1:cc: c6:79:51:17:84:ac:0a:78:f8:48:92:a5:c9:04:88:1a:76:29: 5f:08:b2:4d:84:3b:13:f3:df:45:77:35:c8:2f:a6:91:a6:47: 78:87:a7:33:ee:d0:5a:66:56:ea:3e:2c:7b:3f:cc:a8:a1:15: e1:7c:08:ac:05:54:4c:a0:e8:3e:f2:52:f4:42:8f:1f:44:5e: ab:e7:ca:e8:b5:ec:5d:be:91:d1:a3:ff:d4:07:27:f3:11:2b: d4:09:ab:cb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EQivTcJnfQlLSSf7PAO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWZkMzQzNmQ3YTE5YTczNDNmYTgwMGQ4N2EwMWFmMTgzZGEzMThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqWKGViKwmAkufJR2uIXYEoo4461 0wQPDA3mPrKNk/VtaOJPtRJhaqLNN3IpsiOyL0zdpDQKsvE/sVoRfrkXSfCYmlUb 5qMsFb7hYEIFjQ1HHI55xwrV44Ei/70PvawLv96/9FT6IA5H+UQtoyBN3D0IV/vV B0Z2eC19rOrCd2HWBfX7Wb0uwWOZ1tvrHANWs77zjgDK5T7mDLpwar0YR5tUe0L8 PEcI+dRL6gpikcsW4ic6pIO2zw1CnDDWBYgsZiwnUwc7aqSh9UGE1kPe/mtCyqYL wiBxk2SNfSLA0iRqnZhHU0ZopMop6eOH41Vb2CPFWTeWvm/0/jtmirLC8wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNH9NDbXoZpzQ/qADYegGvGD2jGLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2JjZDVl OC01ZDFmLTQ2YjEtOTZiYy0zOWE2NmNiZTFlNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvYmNkNWU4 LTVkMWYtNDZiMS05NmJjLTM5YTY2Y2JlMWU0ZC8xLzBmMDBOdGVobW5ORC1vQU5o NkFhOFlQYU1Zcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQ3QMA0EAgACMAcDBQAqA6VAMA0GCSqGSIb3 DQEBCwUAA4IBAQCFG4YL7AgF2r5DJS24N78uw9Z8HRAcGdY9C1Q7HL8iUbW3PO33 MZtcoqjTFCBvr/q/O8WOrtRh3o7pDFmbbQsG+Ue8001pJWsPhw7Dv65MXqoPNlzO bCmgySroHt/a+BEnj7mFnFk+RsLbJCi59mAHazMSplPXrkyST3zel1geeOBmBodf AzZJTAc7tFvOCSkf+02Ujz1UrVRY/wPFbBv5wczGeVEXhKwKePhIkqXJBIgadilf CLJNhDsT899FdzXIL6aRpkd4h6cz7tBaZlbqPix7P8yooRXhfAisBVRMoOg+8lL0 Qo8fRF6r58rotexdvpHRo//UByfzESvUCavL -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:36 2026 by rpki-client