This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer File: 0lgUed7jtZlPEcnZVkYxv1pATAc.cer (raw, json) Hash identifier: rIF1YbWl0100quTm8SnO8hCUQzw45XeutPJXFYgLPec= Subject key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F808D39D213FB116D58461F876A4EE5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 134.59.0.0/16 IP: 157.169.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:8d:39:d2:13:fb:11:6d:58:46:1f:87:6a:4e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:fd:8e:67:eb:4c:55:0d:81:a5:ae:48:1d: 88:0b:c2:be:ae:e9:ef:c9:43:d1:a8:33:46:99:a4: 0b:69:3b:3c:ba:d3:0a:7e:20:fd:f5:87:0d:76:08: b9:31:9a:84:55:d1:d1:4d:c6:ec:fa:80:02:e5:c5: f9:ec:bd:dd:5f:d3:78:f6:96:c0:fc:3f:ec:cc:27: a1:d8:82:c9:05:bc:e0:7d:16:71:c4:ca:1f:ad:51: 24:61:36:34:46:94:18:39:0f:bf:04:c8:e5:97:b2: b0:51:d7:99:58:c9:16:88:52:c6:9c:c7:d5:4a:c6: 3d:7c:87:5c:19:5e:6e:a8:47:5c:46:c5:25:ad:08: df:b9:da:04:91:d4:55:3b:36:72:b0:9d:43:10:8d: 64:2d:4e:ff:20:86:fe:d3:a0:59:63:70:a0:a3:d6: fa:79:a6:8a:28:74:a7:ce:c2:9e:4e:be:0f:3f:5d: 7d:11:27:ad:3a:95:c0:e4:7c:30:70:a8:4c:7f:c8: f1:a3:c4:9a:fa:f3:5a:2a:d1:ee:dd:5a:e2:1a:ab: f9:1b:0d:78:30:6d:61:cd:75:72:42:26:73:28:63: 47:40:74:c7:2c:f0:02:a8:b7:0f:85:cf:9d:2e:b1: c7:be:61:81:39:db:72:2c:bc:e8:1e:a8:ed:37:0f: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.59.0.0/16 157.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:ed:16:37:4b:c5:5d:01:cf:3e:23:4f:61:80:03:27:15:5a: e1:9b:1a:39:e4:15:ff:b7:fb:cd:6e:88:01:bd:51:a1:20:b8: c9:ec:d1:36:3e:96:01:8c:d1:06:02:8b:bc:8e:da:c4:dd:3d: d0:ee:0b:83:a9:d5:0a:ad:7c:99:f3:57:15:8e:f2:1b:10:fd: 5b:85:c5:aa:65:c8:c9:fe:e7:da:22:ea:87:4e:f3:39:57:4e: 5f:e1:f8:f5:17:d0:58:1c:60:f6:79:70:82:3c:d6:30:5e:93: 77:2e:4a:be:51:32:20:d7:0d:c0:58:d7:4f:4c:1f:86:ce:71: cd:b9:ca:4c:ee:65:d0:a4:7f:63:8f:2a:e5:78:96:55:e5:f8: ae:39:6a:b6:ec:69:5c:f3:fb:0d:79:24:cc:e2:65:00:de:61: 25:4c:a3:58:ba:70:de:2c:f2:76:00:9b:cc:49:10:bf:fb:f5: be:7d:4b:16:b2:48:b7:4e:db:03:d5:19:42:88:c0:74:23:b5: 4e:7d:6c:9a:23:a5:0c:e5:7b:43:65:b8:05:9e:e3:ea:d6:60: b4:68:d6:cb:91:e7:f9:1c:ec:5b:18:95:62:5c:e8:af:d2:39: ff:fe:d3:81:d3:7b:4e:34:e8:5e:e6:84:da:3a:96:6a:a6:d5: dc:c8:8d:6a -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt/gI050hP7EW1YRh+Hak7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjU4MTQ3OWRlZTNiNTk5NGYxMWM5ZDk1NjQ2MzFiZjVhNDA0YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu39jmfrTFUNgaWuSB2IC8K+runv yUPRqDNGmaQLaTs8utMKfiD99YcNdgi5MZqEVdHRTcbs+oAC5cX57L3dX9N49pbA /D/szCeh2ILJBbzgfRZxxMofrVEkYTY0RpQYOQ+/BMjll7KwUdeZWMkWiFLGnMfV SsY9fIdcGV5uqEdcRsUlrQjfudoEkdRVOzZysJ1DEI1kLU7/IIb+06BZY3Cgo9b6 eaaKKHSnzsKeTr4PP119ESetOpXA5HwwcKhMf8jxo8Sa+vNaKtHu3VriGqv5Gw14 MG1hzXVyQiZzKGNHQHTHLPACqLcPhc+dLrHHvmGBOdtyLLzoHqjtNw8siwIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFNJYFHne47WZTxHJ2VZGMb9aQEwHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzMzNmRi My03MWE4LTQzZWYtOWI5Zi02YTZjNmUwOTYwNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMzM2ZGIz LTcxYTgtNDNlZi05YjlmLTZhNmM2ZTA5NjA3MS8xLzBsZ1VlZDdqdFpsUEVjblpW a1l4djFwQVRBYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUF BwEHAQH/BBQwEjAQBAIAATAKAwMAhjsDAwCdqTANBgkqhkiG9w0BAQsFAAOCAQEA Ve0WN0vFXQHPPiNPYYADJxVa4ZsaOeQV/7f7zW6IAb1RoSC4yezRNj6WAYzRBgKL vI7axN090O4Lg6nVCq18mfNXFY7yGxD9W4XFqmXIyf7n2iLqh07zOVdOX+H49RfQ WBxg9nlwgjzWMF6Tdy5KvlEyINcNwFjXT0wfhs5xzbnKTO5l0KR/Y48q5XiWVeX4 rjlqtuxpXPP7DXkkzOJlAN5hJUyjWLpw3izydgCbzEkQv/v1vn1LFrJIt07bA9UZ QojAdCO1Tn1smiOlDOV7Q2W4BZ7j6tZgtGjWy5Hn+RzsWxiVYlzor9I5//7TgdN7 TjToXuaE2jqWaqbV3MiNag== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:52 2026 by rpki-client