This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer File: 0sKw7hh5KECQZdGe6cCFjowX6hM.cer (raw, json) Hash identifier: Jt3Hzye4hshp6WBS41+6jr5ErxOQne9n9vSP/LANufE= Subject key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDF23C2433A9DC82AC61A02D72638E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 1140 AS: 48283 AS: 210004 AS: 215088 IP: 94.198.152.0/21 IP: 185.76.132.0/22 IP: 193.176.144.0/24 IP: 194.0.5.0/24 IP: 194.0.28.0/22 IP: 2001:678:8::/48 IP: 2001:678:2c::/48 IP: 2001:678:30::/48 IP: 2001:678:34::/48 IP: 2001:678:38::/48 IP: 2001:67c:e6c::/48 IP: 2a00:d78::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f2:3c:24:33:a9:dc:82:ac:61:a0:2d:72:63:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:16:c1:d5:77:13:45:d9:46:44:10:1a:7a: 85:d7:bb:e3:5b:0c:0f:f1:33:3e:c6:be:2b:87:8a: a7:2a:9c:3b:5a:d7:a1:0b:7a:e9:45:6f:24:d3:0e: c3:d4:7d:da:0d:da:0b:90:88:16:ca:40:3a:db:8d: 11:83:d3:6f:bf:8f:65:4a:6c:23:c1:e9:46:a2:cb: 2f:45:20:fb:b9:7a:23:4f:a6:3c:91:e3:1f:9d:d9: 32:65:f7:a8:32:e9:8c:b9:cf:77:fe:c3:86:11:3f: ae:e2:f4:ca:db:51:6d:35:8f:c0:b2:02:71:64:ed: 6e:08:91:93:90:f8:27:20:28:79:b0:3b:0e:f1:b9: 38:6c:00:9c:00:ac:44:32:41:e9:ce:49:ae:e8:1b: c3:4b:72:24:67:3a:95:db:40:a9:25:e9:1f:2f:e4: b5:4b:e4:a1:bf:6f:a8:62:97:83:ae:87:9a:e0:cd: 68:69:38:ae:b8:bb:1d:b8:e7:1b:b5:a1:85:49:5f: d0:31:be:89:f9:48:44:b0:49:f3:52:65:d4:3d:72: be:47:8e:a3:b5:32:fe:03:54:a4:3e:b4:6a:b0:23: a8:10:3c:77:26:25:8f:df:45:b1:81:34:0e:3c:81: 75:ce:34:30:0d:a6:f5:12:c6:3f:03:e2:99:c4:af: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.198.152.0/21 185.76.132.0/22 193.176.144.0/24 194.0.5.0/24 194.0.28.0/22 IPv6: 2001:678:8::/48 2001:678:2c::/48 2001:678:30::/48 2001:678:34::/48 2001:678:38::/48 2001:67c:e6c::/48 2a00:d78::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1140 48283 210004 215088 Signature Algorithm: sha256WithRSAEncryption 64:15:03:ab:e9:4e:b5:c7:6d:a0:87:92:90:66:d2:98:72:93: a6:d7:d5:62:df:30:aa:49:58:90:80:58:8f:c9:12:a9:ec:de: 04:35:7a:80:3f:3d:c7:bd:79:84:fa:c0:85:4d:7c:84:50:0e: 61:94:ce:28:92:c6:a8:57:9a:0c:28:38:1e:4c:48:12:8c:f7: 41:22:cb:c1:11:62:31:cf:ab:eb:fb:f6:a7:d0:2b:2f:52:af: 6c:3c:19:1d:c4:5b:ce:39:1c:02:0b:65:0d:80:e2:4b:53:41: 64:c8:b8:9a:7b:a0:ae:26:b6:22:4a:50:62:e1:a1:ae:ed:3e: 6e:7d:48:de:97:69:0f:f7:64:11:14:44:79:d4:df:9f:d1:ed: c6:7d:ff:85:2d:f8:67:d0:0b:b2:4b:3e:99:5d:e0:77:04:28: 9a:3f:3d:1f:04:47:1c:94:4c:a6:c5:e2:75:07:46:69:de:82: 49:2b:53:cc:1a:e0:5a:f4:b0:f0:39:a8:e5:d2:b9:21:8e:49: 96:d4:67:b3:08:6b:59:ba:da:34:40:29:3b:cb:0d:e2:f0:96: f3:2a:99:ae:78:5b:36:69:1c:ed:79:37:19:b2:05:65:5c:1d: a7:52:f6:a2:43:da:02:83:a4:dc:43:07:a9:e7:3b:0c:01:ac: 25:14:d5:10 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgISAZt87fI8JDOp3IKsYaAtcmOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmMyYjBlZTE4NzkyODQwOTA2NWQxOWVlOWMwODU4ZThjMTdlYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywEWwdV3E0XZRkQQGnqF17vjWwwP 8TM+xr4rh4qnKpw7WtehC3rpRW8k0w7D1H3aDdoLkIgWykA6240Rg9Nvv49lSmwj welGossvRSD7uXojT6Y8keMfndkyZfeoMumMuc93/sOGET+u4vTK21FtNY/AsgJx ZO1uCJGTkPgnICh5sDsO8bk4bACcAKxEMkHpzkmu6BvDS3IkZzqV20CpJekfL+S1 S+Shv2+oYpeDroea4M1oaTiuuLsduOcbtaGFSV/QMb6J+UhEsEnzUmXUPXK+R46j tTL+A1SkPrRqsCOoEDx3JiWP30WxgTQOPIF1zjQwDab1EsY/A+KZxK//6QIDAQAB o4IDCzCCAwcwHQYDVR0OBBYEFNLCsO4YeShAkGXRnunAhY6MF+oTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2FiYWMx NC02ZWFiLTQ5ODUtODY3YS1jOGU4NjNjMWE4ZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvYWJhYzE0 LTZlYWItNDk4NS04NjdhLWM4ZTg2M2MxYThkMS8xLzBzS3c3aGg1S0VDUVpkR2U2 Y0NGam93WDZoTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUF BwEHAQH/BG0wazAkBAIAATAeAwQDXsaYAwQCuUyEAwQAwbCQAwQAwgAFAwQCwgAc MEMEAgACMD0DBwAgAQZ4AAgDBwAgAQZ4ACwDBwAgAQZ4ADADBwAgAQZ4ADQDBwAg AQZ4ADgDBwAgAQZ8DmwDBQAqAA14MCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAgR0 AgMAvJsCAwM0VAIDA0gwMA0GCSqGSIb3DQEBCwUAA4IBAQBkFQOr6U61x22gh5KQ ZtKYcpOm19Vi3zCqSViQgFiPyRKp7N4ENXqAPz3HvXmE+sCFTXyEUA5hlM4oksao V5oMKDgeTEgSjPdBIsvBEWIxz6vr+/an0CsvUq9sPBkdxFvOORwCC2UNgOJLU0Fk yLiae6CuJrYiSlBi4aGu7T5ufUjel2kP92QRFER51N+f0e3Gff+FLfhn0AuySz6Z XeB3BCiaPz0fBEcclEymxeJ1B0Zp3oJJK1PMGuBa9LDwOajl0rkhjkmW1GezCGtZ uto0QCk7yw3i8JbzKpmueFs2aRzteTcZsgVlXB2nUvaiQ9oCg6TcQwep5zsMAawl FNUQ -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:52 2026 by rpki-client