This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer (raw, json) Hash identifier: IdibjqCgPwPV8YEGH6z/upk7u/XV4q0GEHKUnpjvEpA= Subject key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE628E807801959B0DAEC88CD916CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35794 AS: 60757 IP: 45.132.84.0/22 IP: 45.143.88.0/22 IP: 85.92.120.0/22 IP: 185.0.22.0/24 IP: 185.217.188.0/22 IP: 2001:7f8:31::/48 IP: 2a0d:bcc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:62:8e:80:78:01:95:9b:0d:ae:c8:8c:d9:16:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:ac:26:18:05:eb:96:1a:d1:ee:5a:49:fc: 6a:77:05:17:4d:62:b9:bf:fc:99:4f:ca:43:d0:36: c2:95:0f:b8:ed:e5:7f:ac:b3:86:1d:bb:05:45:1b: ca:db:90:8b:8b:7f:bd:1e:3e:63:67:0b:80:a0:d1: 56:a3:26:89:ee:50:9c:8c:63:7a:7b:d4:78:7a:53: 3d:11:dc:7f:82:24:4d:d1:30:b0:ca:8c:28:1a:68: b8:0f:b3:52:e0:8e:6d:7f:fe:ba:4b:f2:cf:3f:f8: 54:d2:a4:49:fe:90:f6:d4:10:67:d7:8c:1f:e0:33: 7f:95:6f:d5:17:5b:55:dc:85:3a:07:c0:4f:33:f9: ca:61:a1:3b:c5:52:be:94:76:e4:f5:77:ee:9c:ce: cb:4b:b4:01:01:db:59:ed:7e:86:88:fe:b1:77:cb: 92:a6:46:ab:a4:ac:24:be:81:72:28:14:05:ab:6e: 8b:5a:74:5a:9f:5d:e7:57:c9:70:b9:34:ed:7d:49: 78:d0:b3:df:32:f7:b0:6d:59:16:ed:b2:91:f7:b8: ea:65:ce:b8:eb:36:66:55:d5:79:0e:fc:f4:7b:5d: 7f:92:ac:99:b7:3b:ea:21:18:04:fe:c1:25:13:0e: f8:e4:29:8f:f9:79:fe:d3:c3:6e:91:30:f7:c9:b4: 54:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.84.0/22 45.143.88.0/22 85.92.120.0/22 185.0.22.0/24 185.217.188.0/22 IPv6: 2001:7f8:31::/48 2a0d:bcc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35794 60757 Signature Algorithm: sha256WithRSAEncryption 88:76:04:dc:44:a9:77:25:a4:a0:53:f6:4c:a2:75:a8:a8:c5: 25:61:28:8c:5f:ca:12:7d:0d:d9:c7:73:da:f0:7d:32:4b:1f: af:ef:07:92:b1:0a:4c:5e:a8:ed:cc:ca:55:55:d5:1b:71:bc: 2b:f7:03:0e:53:95:c4:44:d5:29:f1:81:3d:d9:94:2e:9a:d5: c4:a0:b2:d7:b5:a8:e0:33:1c:99:85:46:96:e4:be:8c:38:c9: fc:25:11:aa:23:4d:14:2a:d7:a9:e1:3d:7d:af:5f:c5:64:f9: ef:e3:9b:1f:e0:99:dd:a6:6a:a4:db:35:50:aa:a8:1b:85:44: c3:61:4a:42:09:2b:0d:83:89:04:6c:ae:2f:4d:0e:04:94:41: fd:97:0c:d1:e4:09:e0:45:e4:b0:96:02:ae:0d:06:8c:60:4c: 69:c4:83:83:10:62:1f:71:39:9a:91:52:4a:fa:9d:a7:5b:ae: 64:bd:16:57:f0:fd:29:1f:a4:a0:a5:b6:8e:b0:af:c9:0e:96: 89:46:f1:37:f2:d1:c7:09:12:d8:77:7d:1c:9d:12:4f:95:c0: 7e:69:08:92:56:e1:f4:d8:00:d3:ef:39:48:f0:74:65:82:78: ca:67:60:4e:c1:25:1e:55:64:dd:10:d8:45:e6:a9:07:4d:3f: 28:16:ab:b1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt87mKOgHgBlZsNrsiM2RbLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjlkYzc5MmFkZmNmZTg4Yzc5ZTc5NThmYmZlYzUyNTYzMGI2MmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc2sJhgF65Ya0e5aSfxqdwUXTWK5 v/yZT8pD0DbClQ+47eV/rLOGHbsFRRvK25CLi3+9Hj5jZwuAoNFWoyaJ7lCcjGN6 e9R4elM9Edx/giRN0TCwyowoGmi4D7NS4I5tf/66S/LPP/hU0qRJ/pD21BBn14wf 4DN/lW/VF1tV3IU6B8BPM/nKYaE7xVK+lHbk9XfunM7LS7QBAdtZ7X6GiP6xd8uS pkarpKwkvoFyKBQFq26LWnRan13nV8lwuTTtfUl40LPfMvewbVkW7bKR97jqZc64 6zZmVdV5Dvz0e11/kqyZtzvqIRgE/sElEw745CmP+Xn+08NukTD3ybRU9QIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFNKdx5Kt/P6Ix555WPv+xSVjC2L5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2Q4Zjhj Zi0xODhhLTRiZDAtOGRiYS00MWU3ZmJhNmQ2ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvZDhmOGNm LTE4OGEtNGJkMC04ZGJhLTQxZTdmYmE2ZDZlMS8xLzBwM0hrcTM4X29qSG5ubFkt XzdGSldNTFl2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjAkBAIAATAeAwQCLYRUAwQCLY9YAwQCVVx4AwQAuQAWAwQCudm8 MBYEAgACMBADBwAgAQf4ADEDBQMqDbzAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC AwCL0gIDAO1VMA0GCSqGSIb3DQEBCwUAA4IBAQCIdgTcRKl3JaSgU/ZMonWoqMUl YSiMX8oSfQ3Zx3Pa8H0ySx+v7weSsQpMXqjtzMpVVdUbcbwr9wMOU5XERNUp8YE9 2ZQumtXEoLLXtajgMxyZhUaW5L6MOMn8JRGqI00UKtep4T19r1/FZPnv45sf4Jnd pmqk2zVQqqgbhUTDYUpCCSsNg4kEbK4vTQ4ElEH9lwzR5AngReSwlgKuDQaMYExp xIODEGIfcTmakVJK+p2nW65kvRZX8P0pH6SgpbaOsK/JDpaJRvE38tHHCRLYd30c nRJPlcB+aQiSVuH02ADT7zlI8HRlgnjKZ2BOwSUeVWTdENhF5qkHTT8oFqux -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:06 2026 by rpki-client