This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer File: 0mIv3sj638pY51dcKfEOc653VxU.cer (raw, json) Hash identifier: r92l2eAdFWFa5c41R90VwjhA2oe+psHDiLodHBVcSrQ= Subject key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB2E3B84CFD5514CC1761E203C1723 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 85.187.60.0/23 IP: 85.187.160.0 -- 85.187.179.255 IP: 85.187.192.0/21 IP: 151.237.40.0/21 IP: 151.237.66.0/24 IP: 151.237.80.0 -- 151.237.90.255 IP: 194.69.200.0/22 IP: 2a0d:ef40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2e:3b:84:cf:d5:51:4c:c1:76:1e:20:3c:17:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2622fdec8fadfca58e7575c29f10e73ae775715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:cb:73:dd:f5:01:bf:31:2c:50:74:94:ba: ec:00:7c:bb:bf:a6:9a:a1:b1:0d:73:6e:9f:e3:09: b5:3d:6e:77:9d:24:53:13:9a:32:d6:3e:95:ff:23: 55:95:be:99:75:62:cd:eb:b8:02:90:a5:ec:5c:21: c5:65:6d:9a:64:d6:d3:bc:75:1a:ac:c9:fa:e4:24: 88:35:99:18:fb:32:8a:22:a3:8d:d7:be:e9:f5:68: 60:d5:b6:11:f1:5e:4f:5b:17:0e:13:7e:69:7d:c3: 79:ad:aa:16:88:3d:41:8d:f0:ae:f9:a3:c3:1d:da: 81:e6:b1:a6:92:31:16:71:58:f4:b0:9b:1a:31:c3: f0:c7:d4:58:b4:5a:7f:ef:a8:81:e9:1a:21:44:cd: 04:9e:4d:fd:7d:e2:28:bf:1a:50:88:8d:9f:e4:b1: a0:ff:69:96:19:89:12:e6:8a:8b:90:68:45:b3:06: 85:57:bb:b6:40:3e:77:4b:b3:0f:0d:8e:7e:df:24: dc:4d:4e:d4:ad:01:23:78:b4:02:64:5d:fb:1e:e9: 9e:b7:57:65:38:fb:79:25:e9:8d:a9:61:e5:c3:03: bd:1b:a1:ca:67:e2:32:30:9c:ff:d0:a9:c6:57:7d: 2d:6b:37:ab:eb:a2:f0:8a:73:e9:89:43:ec:1d:5a: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.60.0/23 85.187.160.0-85.187.179.255 85.187.192.0/21 151.237.40.0/21 151.237.66.0/24 151.237.80.0-151.237.90.255 194.69.200.0/22 IPv6: 2a0d:ef40::/29 Signature Algorithm: sha256WithRSAEncryption 10:62:d9:cd:b6:63:3a:6e:b3:7e:d3:b3:be:8a:49:2b:6c:68: f1:54:c2:b6:26:43:0c:86:46:38:bb:3d:96:20:98:5d:7d:a9: 18:dd:c9:ed:a5:25:c9:2b:f6:92:42:10:d4:98:12:44:46:a1: 7e:8a:b2:91:00:5d:22:66:1f:51:20:0a:d2:9f:ea:65:b9:85: 65:71:31:41:54:ce:ae:7e:77:09:9c:88:7c:4b:5d:9d:53:0d: 7c:ed:14:ea:0d:7b:f2:27:4e:9f:4a:eb:77:20:b0:57:64:90: ac:6e:79:30:04:41:54:08:75:d3:69:a0:a0:91:79:2c:45:ad: 0c:4c:3d:dc:72:6f:f4:eb:d7:a5:7f:73:14:b1:bd:31:81:27: 3f:c0:4d:c2:ea:df:9f:25:df:9f:30:19:ba:58:57:bb:65:a9: d9:a3:69:28:92:3d:17:67:c7:e6:52:76:af:f6:fe:be:b9:63: d5:1f:80:0f:5b:cc:42:92:18:88:01:7a:57:ff:ea:e9:35:0b: fe:2d:9f:3f:39:32:7d:7a:66:81:e7:05:db:2d:da:94:4b:29: 29:a9:18:3c:60:56:39:12:3d:c2:28:21:83:03:74:36:e0:c0: 9e:1c:ef:62:20:a2:39:b7:7b:31:0a:ea:bc:67:94:ce:d0:c7: 62:91:46:3c -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt9yy47hM/VUUzBdh4gPBcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjYyMmZkZWM4ZmFkZmNhNThlNzU3NWMyOWYxMGU3M2FlNzc1NzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYfLc931Ab8xLFB0lLrsAHy7v6aa obENc26f4wm1PW53nSRTE5oy1j6V/yNVlb6ZdWLN67gCkKXsXCHFZW2aZNbTvHUa rMn65CSINZkY+zKKIqON177p9Whg1bYR8V5PWxcOE35pfcN5raoWiD1BjfCu+aPD HdqB5rGmkjEWcVj0sJsaMcPwx9RYtFp/76iB6RohRM0Enk39feIovxpQiI2f5LGg /2mWGYkS5oqLkGhFswaFV7u2QD53S7MPDY5+3yTcTU7UrQEjeLQCZF37Humet1dl OPt5JemNqWHlwwO9G6HKZ+IyMJz/0KnGV30tazer66LwinPpiUPsHVpbawIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFNJiL97I+t/KWOdXXCnxDnOud1cVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5Lzg1ZjAy ZS1mMWFjLTQ0ZmItOTJlYi1mMDVhYTIyOWQ2MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvODVmMDJl LWYxYWMtNDRmYi05MmViLWYwNWFhMjI5ZDYzOC8xLzBtSXYzc2o2MzhwWTUxZGNL ZkVPYzY1M1Z4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUF BwEHAQH/BFMwUTBABAIAATA6AwQBVbs8MAwDBAVVu6ADBAJVu7ADBANVu8ADBAOX 7SgDBACX7UIwDAMEBJftUAMEAJftWgMEAsJFyDANBAIAAjAHAwUDKg3vQDANBgkq hkiG9w0BAQsFAAOCAQEAEGLZzbZjOm6zftOzvopJK2xo8VTCtiZDDIZGOLs9liCY XX2pGN3J7aUlySv2kkIQ1JgSREahfoqykQBdImYfUSAK0p/qZbmFZXExQVTOrn53 CZyIfEtdnVMNfO0U6g178idOn0rrdyCwV2SQrG55MARBVAh102mgoJF5LEWtDEw9 3HJv9OvXpX9zFLG9MYEnP8BNwurfnyXfnzAZulhXu2Wp2aNpKJI9F2fH5lJ2r/b+ vrlj1R+AD1vMQpIYiAF6V//q6TUL/i2fPzkyfXpmgecF2y3alEspKakYPGBWORI9 wighgwN0NuDAnhzvYiCiObd7MQrqvGeUztDHYpFGPA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:41 2026 by rpki-client